
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json)
Hash identifier: w5i3bxJb68Sm8f9gGmAQNIlkPecmb4uZTxjB7bb68gs=
Subject key identifier: A2:FF:22:0A:E3:89:31:3E:88:C1:63:59:21:E6:3D:D7:3A:CE:B9:D2
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
Manifest number: 01CE
Signing time: Thu 23 Jul 2026 05:22:01 +0000
Manifest this update: Thu 23 Jul 2026 05:22:00 +0000
Manifest next update: Thu 30 Jul 2026 05:22:00 +0000
Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: IaWCuTxh3mE3V8f/dRVbyI4rALnYdxQ8FBZJsn1+MFc=)
2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: 3ACPZlFXJEBS0DfhOh+fI+mz2WtH3cLyLDO6b8JhniE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Validity
Not Before: Jul 23 05:22:00 2026 GMT
Not After : Jul 30 05:22:00 2026 GMT
Subject: CN=6a61a4f9-f00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:43:fa:c0:8a:60:1c:ef:81:9c:98:ec:93:1e:
19:5e:25:e8:41:9d:48:98:6b:5b:8f:19:20:14:d3:
1c:07:62:bc:ad:d8:32:de:32:d1:4f:e2:c9:3b:26:
d5:f8:73:4c:69:ab:78:6d:6f:d9:56:09:a4:10:a1:
1a:79:d9:8a:60:5c:16:21:99:f1:18:74:d8:1a:80:
d2:06:f8:7f:b9:a3:d7:93:4c:2c:6a:ac:10:40:4f:
1f:bf:c4:1c:4d:ef:96:96:0c:75:bb:3c:1e:e8:fa:
e8:43:cf:d3:b1:04:00:e8:ec:31:22:67:e0:72:82:
49:78:e1:b9:7a:4e:c7:ec:4f:7e:a4:da:bd:b2:6e:
41:86:62:39:e3:58:cc:ad:3f:91:6e:c2:af:80:b3:
d1:9a:fe:68:f0:27:98:2c:7e:37:89:1c:58:e2:a7:
fd:37:d2:40:38:57:af:f9:09:04:98:22:7b:07:f0:
6a:77:70:42:f7:21:f0:b9:5e:37:a1:0c:ee:17:0d:
62:ed:5f:99:b6:c6:fa:22:59:a3:51:07:c4:a2:91:
b3:6e:d6:43:c8:18:21:33:b0:ad:69:b0:ac:3c:89:
62:60:a5:6d:58:9c:73:7c:a2:5a:84:1b:50:a9:f7:
48:5d:ff:a4:58:13:89:97:4e:cd:44:ed:4c:cc:63:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FF:22:0A:E3:89:31:3E:88:C1:63:59:21:E6:3D:D7:3A:CE:B9:D2
X509v3 Authority Key Identifier:
keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bc:0a:a8:11:cf:be:1d:f0:ac:a3:79:cf:d7:c8:a0:90:ab:
03:c6:2f:29:e4:dd:ba:7d:76:af:4b:d5:4d:b8:98:a8:85:12:
10:f7:5a:a5:60:49:64:d1:36:aa:e6:b6:e2:69:68:6d:93:5c:
c9:07:d8:64:8d:51:42:42:00:b4:24:bf:22:26:22:56:9d:d5:
22:9c:b8:22:2f:34:32:17:59:c9:c8:8e:5f:07:ae:6e:75:f6:
d5:68:53:da:42:9c:04:f2:fd:ec:5c:02:9b:2a:34:4e:10:93:
09:0a:1d:d6:f5:19:a2:9b:5a:d3:f0:f2:26:84:02:d5:fe:85:
7f:2e:15:be:6c:04:b6:bc:d0:6c:d1:0d:c0:ec:e4:5d:08:26:
37:a4:4c:1f:d6:46:f9:18:e7:11:67:20:05:cd:4d:a2:11:cd:
7a:38:9d:c1:b6:75:9f:89:60:73:ea:5a:b7:9b:f0:72:88:ab:
e1:bb:10:2d:8e:c1:a0:95:80:d4:a0:1a:e4:be:a6:2d:2e:6a:
8f:f0:02:63:2b:92:c5:5d:fb:d7:3c:d6:31:f9:55:31:25:cd:
85:d1:7f:db:b3:b2:e0:af:45:9e:7a:22:cf:02:49:a9:bc:ae:
76:31:29:de:5f:ce:d7:12:54:e9:1d:8d:54:07:96:e0:49:10:
a9:57:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:30 2026 by rpki-client