
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier: i2QJ9zVtYGiA3MHi6oFfw6aI20JWoHl5zxdb4C9fB7w=
Subject key identifier: DD:D8:1A:1D:F5:96:DC:7C:80:56:C9:51:D5:91:38:31:E4:A4:FC:2E
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial: 0327
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number: 0320
Signing time: Mon 21 Sep 2026 00:52:41 +0000
Manifest this update: Mon 21 Sep 2026 00:52:40 +0000
Manifest next update: Mon 28 Sep 2026 00:52:40 +0000
Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: a6fyH0GK7n+J4yYEvaczhU/T+ikh4Zx+9FRw7QHu33k=)
2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: 415aT/obMJjSH780K/K390shhJpsFr+sPe3d3m1bO1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Validity
Not Before: Sep 21 00:52:40 2026 GMT
Not After : Sep 28 00:52:40 2026 GMT
Subject: CN=6ab07fd9-3401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:31:98:8a:0e:5d:25:6f:12:d6:24:dd:af:
ed:92:6b:bc:70:7a:2a:0d:e3:48:66:ca:50:43:3e:
99:05:a0:bb:ce:46:d1:a6:47:86:11:8e:22:e8:27:
1a:9c:f0:f4:b1:4c:fa:93:bb:89:74:cc:da:ca:84:
7c:06:aa:fb:42:01:b9:51:1c:cf:5b:e1:ee:6d:44:
88:40:9c:38:f6:52:e5:c1:e9:8b:b4:30:b5:38:bb:
06:49:47:53:d1:16:e0:d6:3b:85:9f:af:f1:0f:68:
71:26:22:80:8b:50:ab:81:03:09:a0:c6:cf:41:f5:
39:81:1c:5d:20:98:23:3d:f4:4d:ca:a4:1e:13:f2:
94:1e:09:83:2c:d4:0b:38:2a:32:a8:9b:b4:83:61:
7b:b7:6b:d0:f0:1e:ba:1e:24:c9:31:95:45:e2:74:
78:a7:22:58:06:d4:3d:cb:49:1b:2e:66:b5:48:f9:
b2:0d:fc:5f:80:80:7c:ae:05:94:c4:9e:1e:66:e0:
88:bc:8b:5c:fb:66:18:85:ae:97:ef:4e:e7:34:e9:
90:fd:4f:34:c8:86:9f:d8:54:5a:e8:f2:12:3b:35:
53:96:a5:0d:67:54:b0:a1:64:a0:3f:01:94:f8:77:
57:78:12:00:95:97:fa:a3:59:4d:70:48:d2:19:ab:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:1A:1D:F5:96:DC:7C:80:56:C9:51:D5:91:38:31:E4:A4:FC:2E
X509v3 Authority Key Identifier:
keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:4a:d1:7f:e2:7f:21:e5:02:7f:27:d4:33:b2:1b:70:56:76:
47:a7:e8:c1:78:f8:8d:1a:80:94:d7:7d:03:cc:d1:c6:d2:13:
cc:20:0b:05:27:f7:46:d3:a0:cf:97:ea:06:6a:b5:79:9a:55:
a2:c3:88:fe:63:ad:f5:6e:18:ce:3d:31:1a:71:9c:f2:65:70:
b0:cc:ed:df:5a:f3:54:0c:f7:9d:7e:8b:23:76:2f:30:9d:88:
aa:83:95:05:f1:89:89:3a:d6:2b:93:b4:c3:35:fd:50:65:91:
58:82:4d:06:41:85:7d:c5:e5:fc:23:07:17:9b:85:d2:44:13:
e9:03:d8:e8:de:41:af:89:c2:e3:7e:e1:0d:5b:75:32:79:27:
4b:d6:bb:bb:18:95:c9:34:3a:b6:d1:68:f5:2f:8e:47:37:ad:
eb:6b:82:7c:01:b9:9d:dc:de:1a:90:9b:74:ed:41:c4:9b:05:
43:db:ab:bd:0b:15:5a:5d:49:d9:b6:1a:42:09:9e:c6:8a:09:
3c:04:f5:11:da:5d:07:88:c6:8a:d4:43:36:45:7f:18:99:05:
af:10:ae:66:bc:b7:c1:21:6a:3a:fe:48:28:09:18:5c:97:4b:
c3:63:ad:f4:21:e0:20:df:98:69:c1:ac:1f:73:69:0f:56:7f:
a1:61:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:40:32 2026 by rpki-client