
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json)
Hash identifier: 3T2TCyRwiJOg8nt+fKy2tpqCWhhOPkvRwtsQ6gZqZ8k=
Subject key identifier: F1:29:F8:94:09:69:C1:93:09:D4:A8:E4:60:EE:7A:7B:72:FF:B1:01
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 0900
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
Manifest number: 08AE
Signing time: Thu 16 Apr 2026 20:46:17 +0000
Manifest this update: Thu 16 Apr 2026 20:46:16 +0000
Manifest next update: Thu 23 Apr 2026 20:46:16 +0000
Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: qAMwGSQlzcKI10yKtcpRKMe0DIVkEVt2xb2hUhc8/Ys=)
2: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: vdQ2xrptBn7xNAJo3kWc/DGcrDKO04tseFsh6m019NM=)
3: D3148936F04D11F0ADCEC652566F56BC.roa (hash: JpBcmYX7vhkzKbx6B5+SUfTpThWFFWkRmqfYfwES20Y=)
4: CC46464A32F511F194E8E564A8833773.roa (hash: wa4S129mLqKqFxRXf/3Xa9iNQ59gliUa2ykpDU878CU=)
5: F539311C7DA011F08A71610EC4F9AE02.roa (hash: zuOnKl7Ra5fTAdkhJCdRbWwvMsV4axmICBuK3Fon6uM=)
6: ABC4A34EAFB511F0815FDC37C4F9AE02.roa (hash: sTzRTjegS6pXcKJix4GmDLpe4+EUgN+B0F9yGltkFT4=)
7: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: RTv0ABS4pIQE1F79UxrIcL7ETQomsrjHR3AoQMEbPV4=)
8: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: mxO7b7RvGtlPB9HynwXd3uHeWp2ebdT0RMpPUyZ35Zw=)
9: CC56497C347711F1AFE4A57EA7833773.roa (hash: zZ1KwCxmmZi15SPPLF3sX474SjNz1O/2Y+XXtpmgqlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Apr 16 20:46:16 2026 GMT
Not After : Apr 23 20:46:16 2026 GMT
Subject: CN=69e14a99-228e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:b8:60:f4:fd:dc:5c:41:5b:6a:fb:16:a3:
c9:f1:0c:18:d1:68:b5:5c:96:81:ea:e6:61:8f:4b:
31:2f:f8:e9:a3:51:98:95:49:0f:28:b7:8e:8a:d4:
ff:a6:d4:c0:51:91:dd:ae:92:f4:47:92:ac:26:7e:
ed:2c:cf:cb:a1:b2:db:3e:51:26:22:d6:22:ed:8c:
df:ba:e2:97:29:48:51:6d:1f:70:a2:53:5d:21:e1:
cf:9a:6b:71:8c:d0:8c:02:12:98:3d:2a:16:65:4a:
09:ee:9d:ed:42:16:6f:99:f5:cd:ea:21:21:0c:e0:
94:12:b7:2a:e6:37:4a:ca:11:04:03:e8:a3:e3:8d:
b4:57:5e:15:1c:bd:ba:12:9b:e8:c3:43:97:93:40:
8a:4d:17:39:f2:dd:f1:eb:70:a6:00:f6:43:19:84:
2a:30:6a:d5:54:a0:f5:71:d2:42:dc:7c:56:76:23:
fe:35:fd:55:f8:b9:1c:6d:51:e6:5e:af:32:30:7c:
8a:c1:9a:0e:b1:90:4f:20:5b:8b:f7:76:7c:8b:0b:
bf:c3:34:a3:ad:c9:2d:16:4a:57:2e:63:14:43:f4:
81:0c:c1:55:f4:40:b6:f3:b5:ea:9c:fa:3e:c2:6e:
0a:cc:cd:b8:87:2e:36:c0:f4:55:e3:5c:d9:fd:05:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:F8:94:09:69:C1:93:09:D4:A8:E4:60:EE:7A:7B:72:FF:B1:01
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d1:37:90:90:12:45:67:9d:bb:77:9a:f2:9e:19:8b:8b:0d:
62:50:e9:1e:7a:28:8b:f1:25:06:2a:50:a4:37:46:b8:32:f3:
21:60:38:b3:73:9b:21:51:a6:79:19:d3:af:c0:f1:86:a2:ee:
06:96:81:3b:04:1e:d4:84:77:47:b8:a8:96:dc:c7:8d:70:c7:
b2:cd:a2:a3:f8:50:a4:a6:3b:09:89:2a:c8:02:83:5a:13:e3:
de:cd:17:b4:4e:6c:3a:fb:76:1e:8f:fb:fa:48:b1:04:b6:33:
f8:90:32:bd:1b:6e:f0:da:8f:ff:a9:a7:6a:29:c4:c1:5b:6b:
5f:02:2d:3c:4e:1b:c2:5a:4d:03:6b:c9:e3:31:e7:7d:93:b0:
ca:13:c5:00:d7:63:9b:12:70:79:30:4c:06:8d:31:3a:d5:9c:
85:60:2a:dd:04:fb:d1:20:9f:32:4f:6a:7e:a6:bd:5b:76:18:
be:3f:08:05:07:a3:f4:71:a1:c4:75:6f:06:92:7e:53:05:3f:
95:3d:4a:c7:b4:06:f5:85:5f:38:08:1e:a9:a0:47:f7:76:aa:
07:6e:e3:dc:b0:a4:c8:36:a2:73:5b:8a:dc:2c:7f:61:6c:01:
e4:b3:c6:ae:d2:87:07:c3:7c:84:03:2b:70:d5:61:8a:ee:8e:
8b:c9:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:52 2026 by rpki-client