
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
File: LVzM98MOtjzd6jS-g75guw4CehM.mft (raw, json)
Hash identifier: yNyU1t5O4c5k9OM8a9ILMvhRzvI751+PDeY4UMv5LXM=
Subject key identifier: C9:46:33:22:26:D1:01:C7:C9:29:82:50:C4:DC:91:58:BB:D3:78:1F
Authority key identifier: 2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13
Certificate issuer: /CN=A919F10A/serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13
Certificate serial: 0BB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
Manifest number: 0BA5
Signing time: Tue 24 Mar 2026 18:52:35 +0000
Manifest this update: Tue 24 Mar 2026 18:52:34 +0000
Manifest next update: Tue 31 Mar 2026 18:52:34 +0000
Files and hashes: 1: LVzM98MOtjzd6jS-g75guw4CehM.crl (hash: bTVi5nMypXhQKaRzgY0WFReiLm58K7VqeGEVnv198kE=)
2: AE5FD48E431911EAB8FF4125C4F9AE02.roa (hash: YWRXUtTIWgISIF2WzL/G6wUrY9BA/U31AiWxV+Ynf2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl
rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F10A, serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13
Validity
Not Before: Mar 24 18:52:34 2026 GMT
Not After : Mar 31 18:52:34 2026 GMT
Subject: CN=69c2dd73-902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:db:f4:87:b7:f3:98:a9:fd:b6:41:0c:b3:
4c:3d:40:9a:8f:ef:10:41:c8:fa:63:57:6e:ed:b4:
10:de:67:23:30:fa:c1:14:f7:d3:1d:ae:64:a2:46:
84:a1:30:b6:64:4e:7e:4f:0e:ea:27:12:1f:20:6e:
96:93:b3:ed:6d:23:0a:83:b4:e5:9d:5b:06:1b:94:
df:94:bb:eb:65:0b:55:40:2d:d9:95:0d:91:db:8b:
10:1b:29:55:28:cf:9f:0d:44:08:cf:f6:e3:05:49:
5d:e6:45:55:ed:ff:6b:9e:9e:df:f7:5f:b1:64:45:
90:20:5f:2a:44:f0:58:4a:78:4e:88:64:ea:99:59:
72:e3:bc:09:d9:a3:62:25:37:fd:db:6d:09:d6:39:
a2:4b:12:d3:b2:6e:c2:b7:4e:f0:ce:e5:7d:74:13:
60:07:87:60:15:fd:ce:4b:1f:67:15:d5:35:52:b5:
a5:45:1a:c8:a3:e5:74:fa:4c:cf:33:07:42:bb:ef:
f5:43:48:88:35:15:4b:d5:15:96:aa:93:7f:34:08:
9c:0b:8a:b1:f4:3a:26:47:bc:06:15:a5:56:80:a4:
6e:ed:56:58:28:23:4d:ae:66:81:a0:72:45:d9:dc:
4f:82:d0:38:0e:8c:5a:d1:5b:2a:8f:62:6c:a7:e4:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:33:22:26:D1:01:C7:C9:29:82:50:C4:DC:91:58:BB:D3:78:1F
X509v3 Authority Key Identifier:
keyid:2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0c:c1:b5:7e:0e:d4:2f:36:a4:5a:8c:56:37:c1:0f:94:75:
df:e7:db:3c:a2:0d:14:1f:12:97:76:12:70:18:4d:4d:88:2f:
96:4f:82:4f:ba:9a:d0:47:f7:4a:db:41:3e:7d:eb:27:02:d9:
78:d3:bb:4d:14:8c:32:72:76:66:eb:0c:c7:e4:18:27:95:bc:
11:de:13:cd:df:00:cb:b4:36:08:5b:74:da:5f:1a:da:3b:18:
7a:0c:7a:49:6f:fc:62:b4:0c:c8:3f:7a:fa:d0:c8:72:df:dd:
5e:d6:06:57:05:d6:a0:34:74:d7:4f:9d:03:f3:90:93:50:92:
12:ec:a6:1e:73:33:72:a7:a0:f2:54:84:12:99:10:f4:82:c9:
ec:88:c4:91:5f:de:52:4d:20:32:81:2d:24:9e:7b:98:98:3b:
a5:6b:d9:1b:4f:74:6a:46:f1:62:8c:f9:7b:1f:46:c0:37:d9:
84:1a:45:ba:84:d2:9f:ac:83:2e:e7:64:57:c1:5d:37:d4:2c:
35:01:0b:6a:3c:97:f9:d7:a5:89:de:4b:1d:fd:e1:c8:0d:4b:
aa:8f:4a:85:cd:94:9f:31:8d:e6:00:03:58:d3:d7:36:8e:33:
cf:3c:1e:9e:c9:5b:c8:8c:3a:da:79:52:80:1b:6c:06:27:0f:
66:90:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:43:48 2026 by rpki-client