
$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier: ZcP85WWzrveLv0M6r3sbZvGvda/2QvErJpAyShcRQr0=
Subject key identifier: 99:2B:DE:A4:8D:90:FD:D1:BC:FB:87:1B:C9:81:4A:48:97:78:57:F5
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 0C0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number: 0BD5
Signing time: Tue 12 May 2026 19:04:30 +0000
Manifest this update: Tue 12 May 2026 19:04:29 +0000
Manifest next update: Tue 19 May 2026 19:04:29 +0000
Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: xKEBBAk7vWxHmma0B7BG0/6gye4Zh8XiRxuMrckrZ2Y=)
2: 86850E56021D11F18B736F00496F56BC.roa (hash: t1YOO3CTB2wqmZ9Z1apALeTPXX0rA5ab+0BE/sJrH9E=)
3: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: OsKpmn4d4PR+9xigCzefdFcY4eHlBHpLVwQgzWBMDnY=)
4: 856D71DE021D11F18B736F00496F56BC.roa (hash: a/UgAx4cP23xBKUXkuXkulL3xR54CJ89nH7g3WJITWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: May 12 19:04:29 2026 GMT
Not After : May 19 19:04:29 2026 GMT
Subject: CN=6a0379bd-9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:55:e9:27:04:5a:20:d5:c9:b6:e4:8f:10:
06:f6:ee:8b:51:eb:e9:02:fa:c2:ed:d4:54:57:55:
e1:e2:47:ae:66:9a:f5:fa:28:f9:01:19:89:75:22:
bd:39:7e:ff:28:d4:f1:da:7e:5c:1a:e8:13:12:0a:
f0:c5:82:8e:89:01:4a:35:97:d9:f6:60:00:ca:f6:
b6:ce:f0:b4:52:04:99:76:8e:a3:b5:35:3a:e5:02:
dc:a1:fe:61:d9:a5:51:3b:0e:52:57:73:ce:d6:9b:
4c:8e:2c:c7:bc:91:ab:ae:83:6d:8a:54:f1:27:4a:
7a:8b:bc:f0:82:e4:8f:b5:d4:bd:93:49:b7:ef:8e:
19:8a:c3:1c:d2:cc:4d:e5:a1:cd:48:c0:92:d4:9c:
66:4b:ad:11:06:a2:e3:8d:9e:b9:89:8f:9f:4f:e7:
9e:21:c1:6b:f5:5f:2b:84:e4:cf:13:95:d7:dd:09:
30:5a:bd:59:38:ec:4b:a9:b6:fc:b9:a7:09:0c:26:
08:5e:1e:e3:72:a8:52:ba:e7:83:75:75:0c:8c:56:
b9:b6:b7:25:cd:77:3b:a9:26:6b:a6:49:cd:7b:17:
4b:c5:cb:93:6f:16:b5:8b:bc:36:9c:e7:94:84:9e:
4a:bc:c4:ae:a9:89:14:6e:97:2c:5e:c2:70:06:b9:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:DE:A4:8D:90:FD:D1:BC:FB:87:1B:C9:81:4A:48:97:78:57:F5
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:66:6c:bf:31:ea:d6:1c:bb:65:5d:d7:bc:ed:cb:1e:87:d8:
26:9f:f0:05:d1:f9:a0:05:23:1f:eb:ff:70:cb:59:0e:c7:2f:
ae:dd:ea:d1:42:f2:be:74:a2:e0:99:b4:0c:b4:69:7e:98:d3:
af:8e:49:f4:aa:ac:a0:9d:e6:1e:a5:55:df:da:9d:fc:16:c1:
7a:c8:f1:3c:f5:1b:b4:ff:e8:68:6c:d9:60:8e:1c:23:58:71:
a0:bd:3d:6a:aa:9b:53:6a:a2:84:b0:c9:a1:c7:89:83:cc:d9:
07:33:90:c0:d9:f1:29:eb:1b:81:ca:b3:b4:01:30:72:1b:d7:
32:85:3d:fe:d2:43:eb:89:cb:a9:3d:68:23:6e:c3:d8:b3:01:
79:a8:7d:81:34:44:b8:5a:53:b3:fb:49:29:2d:61:c8:5d:24:
84:da:a0:b6:64:4f:4e:0e:60:ac:cd:85:be:5d:29:c3:e5:86:
18:bf:e2:d5:fa:64:31:f3:5d:95:39:9e:07:7d:7d:24:cf:2a:
3b:d7:60:a1:f3:fd:94:e5:61:05:60:f1:4a:f6:34:58:2a:5c:
32:5f:b6:0b:ee:65:80:53:f7:2d:01:f5:29:0d:42:89:42:98:
53:99:d8:fc:4c:de:25:5e:ee:ec:81:c5:ec:7e:91:a4:5f:91:
d3:ca:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:46:28 2026 by rpki-client