
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier: ByHminY4D99oNIxWUsq+QhwHtr4biZgEJxbSYGFKtT4=
Subject key identifier: 84:31:C0:FF:A3:AB:06:34:35:5C:3C:30:78:D7:73:1B:AA:41:1B:2E
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number: 02D0
Signing time: Fri 17 Apr 2026 01:17:09 +0000
Manifest this update: Fri 17 Apr 2026 01:17:09 +0000
Manifest next update: Fri 24 Apr 2026 01:17:09 +0000
Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: EBU495PTqBkja05wnVWGY/5vt7Dk1nd25QSmeb4Zg8A=)
2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: 415aT/obMJjSH780K/K390shhJpsFr+sPe3d3m1bO1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Validity
Not Before: Apr 17 01:17:09 2026 GMT
Not After : Apr 24 01:17:09 2026 GMT
Subject: CN=69e18a15-b52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:03:8a:0e:0e:ba:74:3c:1d:39:38:ed:ff:
d4:c0:d9:b4:78:f0:d7:9f:ad:f1:c9:72:c9:56:7a:
8f:1a:68:8c:5a:89:01:03:3d:cd:06:97:2f:54:5a:
f6:9f:84:2a:d2:3f:0f:13:7e:b0:1a:b9:13:5e:4d:
b2:8b:2c:c6:ed:f4:b3:76:20:94:cb:33:4e:b4:c3:
8a:94:ee:88:93:fe:4d:e7:03:fc:03:c0:be:33:97:
cb:99:07:92:e8:95:e9:e3:ee:31:08:e5:5a:4f:ac:
cc:d8:fb:c1:cb:2d:b1:b8:6e:94:16:aa:a5:0e:b2:
18:f0:e2:f5:f7:c0:b7:8d:ee:1d:34:26:4f:00:bc:
2e:b8:8e:8e:e5:dc:45:60:00:8f:d2:47:09:68:6c:
a3:f3:9c:e5:24:ba:2b:93:95:5d:94:93:94:53:6c:
af:9f:ef:c4:07:dd:e8:e6:3b:6f:37:8e:ae:73:73:
ab:fb:62:87:8b:e7:da:d0:df:db:5f:c0:32:a3:f5:
a1:0b:fe:b8:44:c7:dc:5d:1c:e2:e3:76:39:09:9f:
57:92:42:91:a5:35:81:a4:9b:fa:60:ee:bf:39:4d:
c9:9b:a8:33:4e:d9:10:66:9c:79:25:3d:d8:f0:9d:
28:f3:2d:79:4d:c6:2c:27:6d:36:4a:07:b2:bf:3b:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:C0:FF:A3:AB:06:34:35:5C:3C:30:78:D7:73:1B:AA:41:1B:2E
X509v3 Authority Key Identifier:
keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:52:9e:84:c5:cc:b2:85:6d:03:50:da:b2:57:0d:29:7d:
5b:86:e9:4c:26:91:61:25:b0:2b:ab:30:51:00:ad:4e:49:87:
d6:60:53:81:9c:12:ae:a4:26:c1:fb:20:1b:9c:17:cd:b6:01:
c2:0c:c2:33:72:f6:58:f6:98:a1:74:4a:b4:cc:d0:c8:f6:a7:
a3:79:96:6e:ce:8b:90:0f:fe:11:da:26:2e:1b:54:dc:e2:80:
75:cc:e8:56:97:79:2f:98:2a:ab:50:52:1f:ea:cf:d3:e5:eb:
2f:4c:01:d0:56:56:0f:ea:68:31:b9:2b:71:c6:a0:26:9e:04:
54:35:1b:d4:0b:1a:92:ab:9a:41:60:1c:91:b4:55:c9:6c:12:
37:5a:86:40:68:2f:b3:7f:d8:76:91:b5:0c:60:f9:56:2d:ee:
a9:a5:38:52:df:47:1b:36:6f:c8:d4:f5:5b:6e:e6:50:aa:8e:
05:93:15:ac:3b:f7:d5:dd:cc:7d:9e:09:bf:48:5e:9a:92:6f:
f6:c7:16:9e:c4:a0:30:81:d7:f2:0a:f1:95:30:7d:17:ac:6c:
43:d1:97:29:88:38:8e:dc:79:3a:4f:4b:75:6c:3f:d8:48:7f:
e4:30:98:84:98:75:1a:51:0d:b0:7e:b2:d3:96:51:c2:a4:8f:
69:81:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:17 2026 by rpki-client