
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: L3jms7Vxx6WI4Ki6Mazie4ReDFCgdpDNqu+RJfkx1WI=
Subject key identifier: F3:00:9D:F7:30:FC:58:8E:6F:8C:2D:89:8F:FA:D7:37:79:79:20:DA
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: B8
Signing time: Wed 15 Apr 2026 06:36:07 +0000
Manifest this update: Wed 15 Apr 2026 06:36:06 +0000
Manifest next update: Wed 22 Apr 2026 06:36:06 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: l093501q6LIaj1UYMzlJsRI+L2XyXdyKK+T+Rhi1WyY=)
2: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: t6ZSVMbsxuBBJVxsfnJR2/4SpjFBD9tweOs5BjzUU9w=)
3: E7930D061E6111F098E32F79C4F9AE02.roa (hash: tRzWam95vSpEscniZPqXRHQpti8KQpPkufP+tHJBdpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: Apr 15 06:36:06 2026 GMT
Not After : Apr 22 06:36:06 2026 GMT
Subject: CN=69df31d6-12f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:b3:15:61:d3:e5:7e:6f:7b:92:01:8c:36:
ad:b3:ea:3f:83:86:ca:d9:f4:2b:b3:56:bb:e4:e3:
63:8f:1c:71:87:d0:0d:58:27:3b:b2:12:9b:a4:72:
3d:2b:82:80:a2:97:2c:a7:0d:95:b6:87:f0:55:99:
50:96:b2:e7:e7:44:bd:3f:34:07:ec:80:db:37:e9:
eb:3b:c8:fb:b2:89:ff:03:eb:41:63:e0:d3:69:53:
49:ca:47:4b:79:83:7f:ba:ed:e9:dc:67:19:a1:9b:
12:ee:17:ac:1c:0e:b1:03:e6:0a:25:ec:2c:90:11:
8c:dd:d1:f5:a9:57:ce:7a:45:f4:8f:b7:56:e9:27:
f6:b3:d7:63:d8:21:cd:0a:d5:0f:c5:98:38:4f:eb:
40:99:21:c5:19:45:b5:96:f3:8c:8b:35:9c:c8:8d:
5b:e5:00:31:e7:ae:ad:f3:0c:cf:81:5d:63:09:5f:
9b:68:2e:a5:4f:53:82:fe:42:85:ab:f7:5e:64:b2:
4d:1d:df:1f:b4:78:c7:6e:ff:59:3f:b8:a1:2e:a5:
7f:fa:25:1c:72:94:1a:9a:44:81:6f:4f:68:b7:c7:
ed:4d:fb:15:9b:2a:96:43:e8:5c:36:78:82:12:f8:
ef:dd:b1:0f:5d:43:b4:92:d6:1f:6c:e2:3a:0c:31:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:9D:F7:30:FC:58:8E:6F:8C:2D:89:8F:FA:D7:37:79:79:20:DA
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:3e:06:4d:d6:9b:8e:cf:23:32:11:ff:fd:ad:18:39:d8:21:
5a:0c:b0:f9:70:31:4c:c2:a7:a1:89:63:ea:7c:e0:38:ee:2e:
47:4c:cb:d2:c3:12:16:4e:59:47:1d:62:0a:62:1f:02:f6:a6:
ba:67:33:13:c8:5a:e8:04:f8:cf:72:31:08:e9:54:43:5b:56:
3c:ee:d2:06:f0:62:10:41:ba:53:bb:21:74:cf:5b:b7:3f:d2:
bb:ee:45:27:49:c4:0c:60:a9:1f:46:89:0f:45:49:91:76:22:
7c:05:24:f6:42:eb:4f:f6:3c:04:c8:95:49:e3:fe:0e:28:77:
01:7f:0d:09:b9:31:f3:66:b6:dd:ab:c8:75:ca:b0:72:8b:24:
72:f2:3f:6f:ba:51:86:6b:8e:ec:fe:3c:f9:aa:c2:37:3d:50:
73:2d:aa:2e:83:fd:96:b3:e3:a8:a0:85:15:4d:0e:e5:96:f0:
81:43:39:a0:c4:33:43:33:34:bb:39:bc:5e:1e:e5:ad:9c:b7:
2e:9a:37:14:18:02:cb:4d:d8:33:fb:df:2a:f7:0b:a1:20:60:
64:3b:50:9e:5d:68:d0:d0:90:2c:0c:7e:82:99:53:c0:53:b5:
28:ff:13:68:27:6e:95:4f:6b:f2:4d:b9:03:30:85:2e:1a:85:
2b:79:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:11 2026 by rpki-client