
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
File: 0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json)
Hash identifier: pt0VVP4mbGDeeSTCI33zjOeWJwCf2rgnXwf0UaUSL1I=
Subject key identifier: 90:8F:8E:45:69:74:2E:27:53:43:4C:71:49:9C:5A:4E:2F:E9:F2:AE
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Certificate issuer: /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
Manifest number: 74
Signing time: Wed 23 Sep 2026 07:40:13 +0000
Manifest this update: Wed 23 Sep 2026 07:40:12 +0000
Manifest next update: Wed 30 Sep 2026 07:40:12 +0000
Files and hashes: 1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: +r6b0NJC32djRkRx88hhgJMOC2UwIegqKE0n3PT+2nY=)
2: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=)
3: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Validity
Not Before: Sep 23 07:40:12 2026 GMT
Not After : Sep 30 07:40:12 2026 GMT
Subject: CN=6ab3825d-7682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:c1:cf:e7:87:f2:a5:5a:7a:a8:09:d9:7a:
a2:6b:1b:f5:12:95:35:08:c4:ae:62:f0:10:d1:89:
25:83:f9:51:58:81:15:9e:29:29:9f:30:aa:88:d7:
a5:34:18:23:93:98:9e:24:9b:93:49:5e:77:54:92:
de:b3:95:99:6b:3f:2e:6c:aa:4a:d9:f2:68:bb:f7:
85:0e:b3:1d:63:8f:52:c2:78:55:36:bf:7f:aa:22:
1a:94:8a:50:e3:c1:90:48:bc:81:9c:47:b8:28:b6:
85:36:39:04:d7:1c:2c:fa:73:b1:7b:1e:86:67:c0:
59:51:57:71:2d:92:95:06:f7:58:00:a1:cd:b0:a2:
c3:ec:57:58:f7:da:bd:d0:6e:af:2e:49:6d:ac:8d:
8e:59:87:a4:d9:7c:5c:93:5e:f6:35:59:ad:01:b8:
15:7e:2c:8f:51:f5:b8:82:f4:22:4b:c4:84:0a:5b:
a0:50:6a:30:b2:31:c6:d3:de:33:90:2c:fa:83:71:
85:30:30:03:90:b7:4c:64:44:4f:7a:16:ad:e2:7f:
c6:86:5a:7d:23:08:8a:cd:1d:e1:d3:72:45:04:1e:
88:f9:87:35:53:ea:f3:ee:96:b6:73:3a:fa:9c:72:
e7:7d:14:ca:55:fe:27:06:46:ca:dc:6c:f7:e2:88:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:8E:45:69:74:2E:27:53:43:4C:71:49:9C:5A:4E:2F:E9:F2:AE
X509v3 Authority Key Identifier:
keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:9a:08:2d:23:f8:4a:7e:96:72:47:9d:f2:50:2f:62:76:71:
a1:4e:3f:0b:60:86:f0:2e:24:7e:8e:71:c8:fe:2c:30:45:4a:
37:36:49:65:0e:08:78:0c:60:a3:e6:06:56:7c:de:25:6e:13:
fb:d7:25:66:e6:2d:b6:36:71:88:40:e5:80:8c:b3:2c:fa:4b:
2c:c3:be:e3:6f:b2:36:11:11:a9:0d:1a:55:fa:93:06:49:c7:
77:79:3c:52:5d:fe:ea:c9:2b:33:a7:06:da:1e:d8:8c:f5:2d:
64:cb:c7:b1:a4:af:89:fe:66:b3:b3:4e:56:da:4d:0c:d5:9c:
92:17:54:a4:22:da:fa:e1:9f:81:28:50:58:4b:de:ac:4f:c9:
9e:3d:0a:30:66:37:4c:61:76:98:5b:d4:6d:d6:ce:92:51:96:
a0:74:d6:82:ab:28:17:8b:5a:4c:b1:8e:64:4a:fd:58:32:31:
5c:50:f6:a7:fb:9c:a1:f9:9d:71:27:f8:ee:f8:97:ac:e8:35:
65:20:9c:57:2b:19:b5:d3:cf:bc:62:32:8e:28:cf:a3:87:f5:
f3:fb:c1:2c:19:1a:0a:bf:b6:c6:05:12:07:6a:57:90:bc:a5:
19:75:03:4b:86:01:47:b4:b7:fa:f5:c8:6b:ab:06:1d:83:3e:
c5:13:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:10:48 2026 by rpki-client