
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: QK0mAYj6lFO/bPFdWJXnIMqnXokkxQRqudgBEs4uE8w=
Subject key identifier: F6:0E:8A:55:C0:AA:E9:18:40:76:B1:1E:27:8A:A5:74:D2:7A:72:D7
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: 0155
Signing time: Thu 23 Jul 2026 06:51:21 +0000
Manifest this update: Thu 23 Jul 2026 06:51:20 +0000
Manifest next update: Thu 30 Jul 2026 06:51:20 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: vS7VOjFHY70YPMCmEEBmnT5J6tpLEFXpOZKsk1ozBis=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: Jul 23 06:51:20 2026 GMT
Not After : Jul 30 06:51:20 2026 GMT
Subject: CN=6a61b9e9-5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:b4:d6:66:64:b5:2a:ca:6e:3b:bb:63:69:
22:e1:cd:06:36:09:15:5c:bd:e9:de:f6:3c:00:f8:
74:5f:b7:97:32:04:fd:bc:bc:a7:48:97:46:7d:92:
13:73:44:4f:a5:37:4b:5b:da:4d:3f:95:b6:e9:7b:
08:93:c9:53:9e:fe:96:6e:65:b4:51:e5:31:40:ea:
ca:65:50:ed:49:7a:f3:45:9a:4d:c2:16:00:44:b9:
46:35:c2:b9:57:0b:ea:5e:48:6e:bb:53:14:b0:40:
96:3e:28:13:58:3f:0e:a8:fd:90:2b:0c:8a:2c:40:
41:ed:2c:8d:b4:c4:0b:86:08:be:1a:75:5e:59:33:
a4:7c:9b:79:16:61:93:b9:1c:0d:9d:cd:ff:66:85:
a0:60:bf:a8:c0:3a:39:b0:56:5a:72:24:b2:2d:fd:
46:3d:f5:b6:4b:f0:73:7e:f3:2b:89:ab:f1:c5:d4:
7e:39:cc:77:73:78:09:5f:2c:3b:89:f3:10:9a:27:
2b:9d:78:97:a6:11:ef:4a:48:bc:8f:0d:8b:48:84:
59:c1:c0:49:90:1b:98:a0:87:ed:6e:b9:41:b5:75:
65:d5:60:1f:64:fa:19:53:bc:af:2d:b9:d3:59:4d:
6f:64:0f:c5:28:58:f3:a2:c7:84:32:3b:f9:13:e8:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0E:8A:55:C0:AA:E9:18:40:76:B1:1E:27:8A:A5:74:D2:7A:72:D7
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:97:f9:86:5d:88:f3:c0:5a:8f:5c:d9:20:97:0c:2e:80:1f:
a5:0e:0d:32:aa:af:d0:e1:c2:47:85:fe:46:fd:ac:8d:f8:91:
3a:0a:76:b0:f8:15:6d:2e:8c:f0:6d:f1:7f:2f:cc:d3:08:46:
1e:0b:8d:7f:16:a4:a0:69:0a:f4:e7:3d:d5:40:20:8a:c4:27:
97:b5:6d:9e:4e:97:d5:c4:b7:4c:35:55:26:c6:7f:7f:1a:cb:
9f:c5:41:06:d2:8a:cf:b3:65:c2:5a:ca:b2:ac:6a:ee:3d:f1:
7f:df:30:e7:ee:05:a0:36:91:59:d2:33:79:bb:2d:76:a2:f2:
9c:c5:a6:70:52:82:62:c6:5c:94:60:4f:35:e1:e8:45:8c:c0:
64:d2:09:19:9e:d2:eb:14:bb:53:2a:ba:6b:a7:88:c7:70:a2:
95:81:0f:f3:d4:37:12:e3:07:89:36:a6:dc:ee:1c:a4:a4:7c:
ce:97:58:c5:38:d7:14:04:b4:88:38:c2:06:05:14:d7:b6:ba:
e2:3a:4c:27:e1:eb:2e:34:46:35:e8:de:79:2d:52:8b:3d:98:
7a:68:e0:0e:e0:36:f2:a4:48:a2:bc:52:20:e0:25:b8:c5:64:
4d:f5:86:f0:ec:92:5f:2a:12:74:78:f8:1f:a7:d7:64:e6:3b:
cf:fc:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:26 2026 by rpki-client