
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: AFdHDcXP7m7kv3VfWbScBCizGIli6aJz7tJyCW8v7uQ=
Subject key identifier: 3F:5D:C3:0B:F4:32:93:2A:45:57:07:50:FB:2D:86:BF:06:F9:BC:97
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: 010A
Signing time: Mon 21 Sep 2026 06:03:51 +0000
Manifest this update: Mon 21 Sep 2026 06:03:50 +0000
Manifest next update: Mon 28 Sep 2026 06:03:50 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: 6TRCsa2/p6ML1lyLbsxtRbD6xzVJ4CPBp+UEjCvS7R8=)
2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: RmTfAxmFDKtRdCkYRFuzlxslcEJJ6dHJkRgwrVvJ4ss=)
3: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: z9lBCM2YReTvWnOO7UOQ4Z/V5QvjzGlZ8HP+HdhlsEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: Sep 21 06:03:50 2026 GMT
Not After : Sep 28 06:03:50 2026 GMT
Subject: CN=6ab0c8c7-6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:b5:af:11:74:ae:c3:26:50:f6:c4:82:68:
12:4e:7f:2c:d1:55:0e:d2:8c:fb:d9:d9:4e:07:52:
7b:d6:58:e9:16:e9:d7:cd:1e:8b:07:8e:b1:0f:3c:
84:35:40:c8:36:58:a0:b4:6e:c0:36:86:94:ac:d5:
3b:a4:dd:68:4e:14:aa:9d:2c:d1:99:3c:41:30:79:
f1:25:84:cc:f4:a3:55:0d:40:de:3d:91:9e:5e:94:
f2:6e:be:20:8f:6b:78:92:27:93:00:ce:9b:5f:e7:
57:e6:5b:2a:f7:62:e3:d4:f5:04:bb:36:a9:7d:e2:
c7:dd:dc:4d:36:a6:c7:64:9d:4c:9f:71:d1:02:d3:
95:7d:34:46:05:48:cf:9a:98:d7:fb:aa:c7:ee:09:
25:fc:fa:4d:5d:23:e7:e4:55:df:97:90:92:38:6a:
9b:e2:a4:56:d7:a8:81:6c:0f:b1:7a:e6:d8:4b:03:
ed:42:b1:73:3c:35:b3:c8:a8:a4:9a:b8:e9:b1:0e:
0a:43:f1:12:1a:52:fc:0b:b3:30:e4:e1:de:ba:34:
a6:94:11:87:99:51:c5:c7:0a:68:17:51:cc:2c:30:
96:00:ab:6c:b7:49:1e:65:5a:03:4c:75:ae:91:e7:
4c:57:26:b7:0c:9b:77:2e:31:70:99:79:a2:b3:ec:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5D:C3:0B:F4:32:93:2A:45:57:07:50:FB:2D:86:BF:06:F9:BC:97
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:6e:45:1f:36:17:ea:71:3b:dc:7a:bb:1d:02:24:d3:f6:
e0:73:b1:00:1b:05:f8:27:79:f8:16:1e:95:11:9c:0e:57:17:
9e:c4:66:51:f1:41:0a:b9:81:46:48:19:51:c4:65:a5:26:84:
a3:f7:05:81:03:c2:e0:02:62:0a:e1:b5:da:51:cf:81:94:ff:
96:63:12:bf:71:c8:94:ea:ca:8b:0f:d8:8b:b5:70:5f:ee:b5:
23:c4:f8:c9:87:0a:5f:14:8e:de:a1:5d:e7:19:11:49:2b:2e:
bf:ca:ea:c9:17:af:8a:67:d5:92:ff:3f:f7:11:1d:8c:9c:51:
04:59:f3:bb:7c:aa:1d:a1:89:6b:40:29:36:7f:64:c2:36:85:
10:6d:9a:10:81:df:a3:44:78:bf:19:18:0c:57:f2:ca:49:02:
16:b5:58:72:71:b9:3a:d0:c5:bc:9d:7e:8d:2a:d7:d8:a1:4e:
87:a4:18:68:67:3e:5d:cc:bc:be:a4:b4:7f:96:ba:a4:b6:5e:
1a:7b:67:d6:7b:99:85:4b:7e:0b:1d:85:df:a7:59:eb:bd:f8:
37:d5:f3:ae:b1:c5:a4:65:c3:49:b1:43:a8:2b:25:98:63:f9:
fb:eb:9d:35:55:d8:05:8d:63:5d:67:6c:94:dc:b6:4e:d1:fa:
2e:db:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:54:40 2026 by rpki-client