
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier: E5uZm+nxKYtpIVjWF3BCfMlEQuZ+oTKnGdyzy6No4Yc=
Subject key identifier: 7D:B4:A7:B7:D5:02:5D:98:4D:44:14:D8:47:EE:60:EC:23:F9:31:09
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial: 0BC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number: 0BB8
Signing time: Mon 02 Mar 2026 01:38:03 +0000
Manifest this update: Mon 02 Mar 2026 01:38:00 +0000
Manifest next update: Mon 09 Mar 2026 01:38:00 +0000
Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: pTJoTlJ5/uq4V7AZwYi2uy7qsulreEwja6l4EP5xO08=)
2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: ZJ2vN4ORbvna0D0Yqlj8XNP78COyDtoGq6tfy7d5TK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Validity
Not Before: Mar 2 01:38:00 2026 GMT
Not After : Mar 9 01:38:00 2026 GMT
Subject: CN=69a4e9fa-8496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:be:7c:0a:3b:b2:77:16:5b:6c:b2:0f:c6:
d3:ee:54:9c:ee:d7:ac:6f:67:5c:ab:fb:79:00:36:
13:82:91:21:1d:d1:51:02:2e:2b:05:6e:ff:c6:0c:
ed:f9:96:cc:28:3e:63:0b:2b:f8:63:25:bf:e6:13:
d6:0d:ac:de:cd:54:e8:5d:d3:c6:73:81:86:ac:bf:
d7:bf:0c:fe:13:1e:a3:ea:e8:3a:67:85:00:cf:56:
94:30:33:24:df:64:e2:86:b5:70:e3:99:f2:28:07:
f2:b7:9c:be:cf:95:16:ec:58:e4:07:22:ca:69:1d:
57:99:96:33:46:dd:14:d2:25:74:d6:52:a7:a3:88:
f1:da:7d:f3:a0:b4:4e:5f:0b:da:ae:29:23:75:75:
72:22:4e:c3:da:a6:c5:7c:c2:ab:37:44:a3:b4:4a:
a2:13:f3:ac:f3:00:a8:aa:47:22:35:4b:07:33:4d:
a4:32:69:ba:09:e2:c2:cd:51:86:d8:fa:ab:d2:1f:
a5:18:c4:3a:9b:e8:bd:d1:7f:32:37:1c:bb:f9:02:
9e:7e:23:2b:d4:f1:2c:6c:6f:ea:5c:2f:e5:b9:7a:
65:98:4e:3b:bc:8c:bb:97:b2:19:4f:da:13:ae:01:
0e:0e:84:9e:06:75:49:15:18:1e:8f:51:49:a3:e9:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:A7:B7:D5:02:5D:98:4D:44:14:D8:47:EE:60:EC:23:F9:31:09
X509v3 Authority Key Identifier:
keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7e:82:d3:fd:5b:11:72:29:94:20:52:c9:31:b2:12:31:71:
58:b1:b0:57:db:03:aa:78:a5:00:64:87:39:66:d8:03:bf:36:
54:4b:9c:02:06:90:dc:c3:6a:7e:db:1c:f6:bd:32:be:22:86:
29:b6:dc:a6:46:32:f4:43:15:29:0c:30:f8:d9:59:eb:04:f8:
d7:93:0b:43:68:37:a0:0a:7c:94:9b:88:b7:64:dd:03:1b:94:
ea:05:f1:5e:67:7c:08:5b:92:ea:58:c9:dc:9d:1b:b3:fc:bf:
e0:c4:c2:29:80:b4:8b:5a:88:f9:07:8c:f8:90:31:6f:04:de:
3b:b1:66:5c:f9:cc:4d:1a:77:db:95:aa:04:88:1e:02:73:32:
e5:b7:08:67:fe:e8:78:41:ba:d9:1a:26:ad:30:8b:c5:6c:a4:
4d:77:cc:29:21:7a:bb:c8:44:ca:ff:e3:be:89:00:ea:5a:02:
89:c1:fa:70:34:c8:c7:ba:5b:d4:a7:b4:29:ae:8c:91:fd:1c:
ef:87:a6:9b:b1:23:b8:86:fe:de:fd:01:ae:8a:39:c8:04:86:
bc:ca:e1:46:ae:68:e5:1c:59:0a:b1:64:8c:54:43:84:15:d5:
0c:aa:cd:04:0c:9e:1c:47:0d:db:95:d8:ec:33:b6:09:be:98:
e4:b6:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:13 2026 by rpki-client