
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json)
Hash identifier: StnH+uqf3G2an3uBxNw/hWJoxoNgEXMVYYArX4nG0VI=
Subject key identifier: E9:9E:B5:04:2C:E9:1C:BE:41:85:26:6E:3E:45:4F:3D:85:BA:E4:74
Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45
Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045
Certificate serial: 10B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
Manifest number: 10B2
Signing time: Sat 28 Feb 2026 17:26:18 +0000
Manifest this update: Sat 28 Feb 2026 17:26:17 +0000
Manifest next update: Sat 07 Mar 2026 17:26:17 +0000
Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: fQTHCpHa+w3AEmp6pOVJBnYA8lsN+jsxqLFzWFaytnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl
rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4277 (0x10b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120E21, serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045
Validity
Not Before: Feb 28 17:26:17 2026 GMT
Not After : Mar 7 17:26:17 2026 GMT
Subject: CN=69a32539-f386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:7f:72:c7:39:28:59:7d:30:f4:b2:aa:21:
77:67:58:be:bf:8b:ff:35:2e:0f:18:6c:e3:00:51:
86:1e:44:19:fe:30:35:21:ab:1e:1a:89:e3:0a:5e:
45:8c:30:73:50:4a:81:6d:7d:8c:42:8f:a4:b5:5d:
a5:15:d9:6e:c4:db:0c:b5:2f:83:b1:8e:ba:06:f2:
a5:9c:16:2e:f5:66:a5:9c:d5:26:dc:12:8f:d9:e8:
aa:4b:cb:ef:f4:0a:aa:c1:9e:55:74:de:5d:84:23:
01:6a:b7:78:f2:53:82:db:7f:46:13:a6:30:ac:59:
2a:4b:d5:65:41:92:84:a6:1d:a2:63:2e:0a:6f:53:
05:e2:96:05:8e:d8:df:0a:03:2c:17:62:de:f9:b6:
15:44:6c:0d:8e:dd:98:36:64:25:42:72:fe:b7:cd:
a5:80:49:c0:6e:5b:d8:25:9f:bf:c4:89:05:29:da:
e5:c7:f2:fc:df:8f:d9:31:c4:d5:ec:bf:f2:e9:22:
23:d8:d7:cd:86:b2:7e:de:1e:07:b2:4a:d5:d4:01:
c9:df:0b:86:b3:34:32:bb:e9:d5:f7:e7:51:39:a1:
1f:94:dc:b2:46:db:6b:30:c0:25:32:b1:32:4e:7d:
fe:01:0b:15:1d:6b:fb:66:03:a1:42:e8:38:8b:28:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9E:B5:04:2C:E9:1C:BE:41:85:26:6E:3E:45:4F:3D:85:BA:E4:74
X509v3 Authority Key Identifier:
keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e3:f9:74:a6:13:23:ea:8d:d0:7f:a0:4a:88:16:f6:f8:2c:
de:d0:22:52:b0:b3:92:3e:22:cd:1a:18:a2:d4:6b:28:5c:a7:
18:a9:07:91:82:89:cf:b8:35:6d:e9:7f:c0:ca:2e:9c:66:ef:
1a:0e:88:3a:5b:25:b9:fd:ec:ad:77:cb:4b:8a:4a:12:24:7f:
55:d8:87:ef:27:d1:21:95:b3:4b:37:cc:a5:8a:3a:71:48:2c:
d9:51:0c:2d:54:a3:7a:d8:19:0c:ab:0d:f7:cd:a8:4c:c5:a6:
76:34:26:e1:bd:68:62:a5:34:ce:b9:2f:7c:93:5a:75:bd:0b:
48:a1:d6:49:38:9e:32:0f:45:a0:a3:df:be:65:f6:53:1d:81:
1a:77:13:4d:ec:fb:d9:1e:14:c3:2c:4b:ed:ef:fa:a5:29:00:
f0:0b:1d:6d:4f:52:cb:d1:e8:2a:d0:c0:96:06:aa:da:7f:bf:
e9:8b:e4:cb:41:b8:e6:18:bc:fc:c2:93:97:8f:55:44:dc:41:
ca:5c:4c:32:40:5f:ee:e5:a3:44:40:d1:4a:ee:07:64:6f:09:
ee:20:45:29:0e:be:22:3d:3d:e7:f1:ac:f4:56:86:8c:64:a3:
06:76:50:df:49:44:9c:d4:69:18:7e:2b:8f:cb:83:bb:09:5d:
83:14:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:39 2026 by rpki-client