
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: JQk3W8CMd+TT+l4bNZRr7unC8oEVsrKctcpeym89sgw=
Subject key identifier: 6B:3E:9E:F9:96:1C:B0:5D:2F:2E:89:12:68:3E:02:4C:C2:C6:EB:21
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: ED
Signing time: Mon 27 Jul 2026 08:29:21 +0000
Manifest this update: Mon 27 Jul 2026 08:29:20 +0000
Manifest next update: Mon 03 Aug 2026 08:29:20 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: 345KkJj+/ep2paRXWCMsT1Md/1YHo1TcRWFYHG2/Xig=)
2: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: z9lBCM2YReTvWnOO7UOQ4Z/V5QvjzGlZ8HP+HdhlsEo=)
3: E7930D061E6111F098E32F79C4F9AE02.roa (hash: RmTfAxmFDKtRdCkYRFuzlxslcEJJ6dHJkRgwrVvJ4ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: Jul 27 08:29:20 2026 GMT
Not After : Aug 3 08:29:20 2026 GMT
Subject: CN=6a6716e1-d8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:9c:8c:1f:6f:0b:31:a3:7c:2c:db:e1:3f:
01:2a:85:7d:17:41:f4:7e:79:ea:4c:fa:50:bd:c5:
48:3b:f6:5c:97:fc:d3:0c:44:c9:7e:59:4b:33:4c:
dc:bb:28:96:24:28:ad:92:b7:ec:a3:b0:d1:aa:a5:
e5:4a:aa:eb:76:e5:a6:1f:5d:15:6a:8f:17:bc:95:
39:33:f4:c8:50:da:59:1d:a7:6e:a5:7d:22:ee:6f:
d6:35:10:fa:3d:cb:bb:2f:8b:dc:5d:15:b5:3f:07:
ee:d7:ec:d7:94:c1:16:91:21:16:d3:e7:4f:ff:fb:
73:78:73:7e:cf:1d:80:7c:5c:69:fd:3a:92:16:96:
57:78:cd:f6:53:8b:9e:45:0e:73:c0:d8:2e:e9:f9:
13:40:e3:98:b2:14:a6:2f:46:ff:7e:71:14:a6:bf:
f5:81:b5:d8:5f:3f:33:6d:3c:7c:8c:04:fb:10:56:
5c:d7:4d:ec:31:05:99:f9:81:e2:78:73:38:36:53:
07:04:a8:31:09:b8:30:cd:b9:b2:ef:40:66:0e:94:
b9:a7:54:6a:5b:27:d2:86:26:ef:37:c5:a6:9f:dd:
09:50:46:01:03:48:f0:1b:b7:97:0e:8f:a4:b4:b1:
b7:5c:b6:1b:50:1c:49:01:22:fe:10:7f:43:2f:b8:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3E:9E:F9:96:1C:B0:5D:2F:2E:89:12:68:3E:02:4C:C2:C6:EB:21
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d4:cd:1f:3a:25:7d:1d:94:44:6a:65:7c:a8:78:37:bb:12:
b1:52:49:95:22:56:8a:53:a1:05:29:56:ea:5f:e3:ed:6e:e1:
e1:1f:c7:ef:3e:18:47:09:8b:55:9a:62:e0:25:66:17:93:d2:
c2:cb:27:8e:fc:98:10:4f:5f:a0:c2:1d:92:f3:fe:eb:cf:15:
ec:8a:8a:d6:f0:b2:a5:e8:9f:3b:9e:c7:68:e4:b2:7f:f3:a3:
ff:34:9a:27:aa:a0:e3:a2:4f:51:0a:29:a6:78:77:35:ab:c2:
85:7f:54:5d:51:ed:a8:50:36:55:eb:db:85:d5:1e:5e:ec:0a:
c8:a5:05:f1:8b:a9:3d:d6:a3:32:b4:eb:5a:91:16:a8:11:4b:
5e:89:3e:fa:67:e1:8f:2a:89:34:4a:66:2b:37:e8:19:8a:40:
76:45:22:46:48:03:80:77:7c:6f:f2:50:7c:39:13:97:35:19:
a4:77:8b:c8:0a:9a:61:e8:a7:e1:84:84:49:a2:d1:d8:8a:10:
6e:cf:35:95:0d:37:ad:a1:30:83:7f:32:9d:11:9a:37:1f:28:
10:f1:89:16:20:0e:bc:90:5f:5d:38:77:af:b6:55:54:0e:81:
de:f4:c9:27:53:44:0b:a9:06:b4:33:8e:39:7d:d7:f7:8c:c7:
a9:4e:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:30 2026 by rpki-client