
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json)
Hash identifier: b2W7h21e7GwigiWF61/Ab0eKzZ56B4aaEaFmOZUgUzo=
Subject key identifier: 92:30:14:A1:82:B3:88:A1:45:24:5C:1C:E8:73:52:E2:52:B2:B5:AD
Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8
Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8
Certificate serial: 0719
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
Manifest number: 070E
Signing time: Tue 24 Mar 2026 21:39:57 +0000
Manifest this update: Tue 24 Mar 2026 21:39:57 +0000
Manifest next update: Tue 31 Mar 2026 21:39:57 +0000
Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: jtwyLnraG2WeLk2+KoFX8AGoS0onbnSXD0Fl9KwQnfI=)
2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: Zh84MNMXDebOUwpMyjzZRth9/ldoCErLFQzQxsoQLWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl
rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8
Validity
Not Before: Mar 24 21:39:57 2026 GMT
Not After : Mar 31 21:39:57 2026 GMT
Subject: CN=69c304ad-9344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:7f:ab:b8:94:c1:9c:f9:43:ce:f4:d8:4d:
cf:e4:54:5b:44:95:12:d6:e7:f5:9d:8e:94:64:f0:
08:b0:7d:95:7e:97:e7:05:dd:7a:c9:4f:8c:e8:c4:
9c:c3:44:f5:61:92:1a:54:53:7c:1d:bc:14:ff:2d:
85:cf:6c:6f:2e:bf:c3:21:7f:70:6e:7e:38:ae:b9:
ba:a0:d2:76:17:f2:87:05:b3:cc:e8:08:a3:54:e4:
2d:39:a1:37:88:b1:53:55:8f:3b:36:34:0e:ed:95:
92:e3:3c:b2:05:63:aa:9f:ea:23:12:08:45:5d:8f:
28:6e:aa:da:29:5f:41:43:e3:c5:eb:32:61:f0:3b:
8b:4e:0f:8e:8a:4f:78:2d:ae:ea:cd:20:c2:23:85:
e2:4c:48:b1:71:64:54:ab:29:89:b1:22:10:16:c3:
f9:ac:c0:09:7a:b9:94:68:8f:38:a2:99:5c:74:c1:
6c:00:4e:b3:d3:bb:6f:3a:1b:43:cb:d5:54:39:28:
45:b4:f0:49:46:df:a3:ee:ca:e0:5d:2d:c6:ab:c6:
b4:36:0b:03:89:61:c6:19:40:47:0d:59:92:45:32:
57:03:5a:48:13:34:be:26:fd:9f:74:b6:d0:49:e1:
bd:45:9d:6b:18:97:73:92:db:08:36:6a:2a:c3:25:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:14:A1:82:B3:88:A1:45:24:5C:1C:E8:73:52:E2:52:B2:B5:AD
X509v3 Authority Key Identifier:
keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d7:4f:ab:92:38:ee:0b:f3:16:58:94:6c:87:61:a5:e0:32:
80:cc:25:66:91:63:67:f4:bb:5c:69:b7:c1:26:bf:f5:be:f8:
ea:81:14:7f:07:50:90:a9:0c:f8:73:a1:c2:92:aa:78:3b:aa:
b1:76:1c:30:82:e8:a9:53:12:4b:c1:0c:36:38:f1:93:85:fb:
96:ef:cb:5c:66:e7:60:26:a7:82:a9:ef:b2:1e:05:51:65:ba:
62:98:9d:ab:b8:2b:05:98:23:af:07:4a:83:28:a0:66:5e:ea:
46:06:8c:b0:5e:38:63:e2:69:2b:1e:55:dc:8e:fe:b4:00:6a:
a8:ad:ef:58:e6:f7:95:fa:7f:36:38:a6:cb:cc:d8:bb:70:68:
ec:25:42:d7:4f:25:f6:aa:d5:5f:2d:e3:bc:8a:a2:1e:ce:1b:
a8:f7:11:0f:d3:2b:59:27:51:4a:ba:81:18:e3:e0:20:fc:7a:
37:52:56:dc:6a:cb:da:45:66:de:dd:b0:b3:bc:5e:89:8c:c9:
04:7b:93:8f:07:02:b4:81:4d:b1:b7:8c:b2:d6:4a:b5:54:f3:
d2:45:1c:df:86:d4:8e:92:cf:10:fa:7a:0e:cb:34:f7:1c:15:
2b:8c:ab:ec:1a:9a:f7:75:bc:e3:a7:8e:fb:f7:15:3e:93:06:
bb:55:b7:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB
MzQ2N0UwRTgwHhcNMjYwMzI0MjEzOTU3WhcNMjYwMzMxMjEzOTU3WjAYMRYwFAYD
VQQDEw02OWMzMDRhZC05MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Rd/q7iUwZz5Q8702E3P5FRbRJUS1uf1nY6UZPAIsH2VfpfnBd16yU+M6MSc
w0T1YZIaVFN8HbwU/y2Fz2xvLr/DIX9wbn44rrm6oNJ2F/KHBbPM6AijVOQtOaE3
iLFTVY87NjQO7ZWS4zyyBWOqn+ojEghFXY8obqraKV9BQ+PF6zJh8DuLTg+Oik94
La7qzSDCI4XiTEixcWRUqymJsSIQFsP5rMAJermUaI84oplcdMFsAE6z07tvOhtD
y9VUOShFtPBJRt+j7srgXS3Gq8a0NgsDiWHGGUBHDVmSRTJXA1pIEzS+Jv2fdLbQ
SeG9RZ1rGJdzktsINmoqwyX6BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIwFKGC
s4ihRSRcHOhzUuJSsrWtMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE
NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X
cmVvQldLcVB0Uy1qUm40T2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXtdPq5I47gvzFliUbIdhpeAygMwlZpFjZ/S7XGm3wSa/9b746oEUfwdQkKkM
+HOhwpKqeDuqsXYcMILoqVMSS8EMNjjxk4X7lu/LXGbnYCangqnvsh4FUWW6Ypid
q7grBZgjrwdKgyigZl7qRgaMsF44Y+JpKx5V3I7+tABqqK3vWOb3lfp/Njimy8zY
u3Bo7CVC108l9qrVXy3jvIqiHs4bqPcRD9MrWSdRSrqBGOPgIPx6N1JW3GrL2kVm
3t2ws7xeiYzJBHuTjwcCtIFNsbeMstZKtVTz0kUc34bUjpLPEPp6Dss09xwVK4yr
7Bqa93W846eO+/cVPpMGu1W3nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:07:04 2026 by rpki-client