
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: TpBI73GAfyyr7tT47kP85pz6Sa5Pzdsup6TnfxSm/u8=
Subject key identifier: 17:42:DA:19:C1:EB:75:3E:75:69:98:FF:A9:DB:65:9B:35:9A:8F:EF
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 0809
Signing time: Fri 12 Jun 2026 22:58:45 +0000
Manifest this update: Fri 12 Jun 2026 22:58:44 +0000
Manifest next update: Fri 19 Jun 2026 22:58:44 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: DmYITZayNVtbnrkD21gAwVnHwzii5HTP9PApCkt3zD8=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Jun 12 22:58:44 2026 GMT
Not After : Jun 19 22:58:44 2026 GMT
Subject: CN=6a2c8f25-7f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:ae:79:52:ce:05:c8:a6:42:98:75:f9:c9:
21:15:3e:a4:d5:5e:39:74:59:23:c3:ea:64:ef:a3:
eb:ba:1a:61:14:1f:92:6f:dd:c2:b6:ec:f1:9b:f1:
c2:35:10:0c:73:27:ea:d8:51:51:6b:61:bf:df:b5:
34:5a:f6:36:eb:ef:63:77:f8:75:93:62:ea:6a:c6:
4e:2e:3d:01:95:52:2e:23:c4:6a:c5:7e:c3:8e:85:
34:3b:97:75:3e:0c:44:9f:9d:61:09:1b:98:52:1d:
2d:f4:19:15:9c:b2:0c:bc:e1:1c:22:21:cb:1d:ff:
61:d8:79:62:91:c4:ba:66:f5:52:6a:d1:b8:39:00:
37:84:1c:f5:db:05:78:b6:5a:36:52:18:27:6f:3e:
15:7e:43:4e:8c:2e:51:ff:18:7d:a4:73:b5:48:b2:
8f:89:c3:c7:cb:40:15:f6:d3:4b:8e:68:7d:d1:2a:
c2:4d:40:db:19:80:15:c5:60:e3:77:39:a6:16:45:
de:a6:dd:20:54:f6:0b:1c:c7:dd:46:76:1f:2b:c8:
6d:df:7c:2c:2f:ea:e7:92:82:fb:42:e3:c7:74:37:
0e:a3:90:37:90:2d:88:2a:fc:75:41:b7:d3:b4:79:
49:de:8a:62:9c:ad:3a:d8:20:9d:df:55:fa:0e:ee:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:DA:19:C1:EB:75:3E:75:69:98:FF:A9:DB:65:9B:35:9A:8F:EF
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:74:03:b3:fa:ee:ea:51:06:de:ac:91:9a:c9:51:6d:ec:ab:
90:88:08:09:db:a7:88:e4:c3:d5:00:5d:a6:53:9e:ff:1b:b9:
42:c4:8a:6c:df:43:9f:dc:f3:26:38:07:f2:e2:e1:a4:bd:fe:
8c:cb:c4:de:93:ab:24:0e:b7:74:8f:00:cf:cf:72:7a:c4:ac:
6e:b7:11:6d:cd:82:ec:17:42:1d:6f:af:ca:28:7d:c2:16:71:
dc:c5:ef:17:7a:9f:43:c2:2a:fd:1b:be:5b:f3:51:fa:f5:bf:
eb:c7:71:9f:57:55:58:8a:ba:51:e1:01:c4:7a:80:b8:54:9b:
73:7c:11:57:66:74:65:9f:89:cc:04:42:70:a8:23:7f:70:42:
d5:34:a2:73:1b:ee:3d:c4:af:f5:2e:56:18:08:65:97:9d:c2:
79:b0:f9:69:a5:62:09:00:2a:7d:9a:41:2d:75:e5:69:92:f9:
b1:da:d3:aa:c4:86:7b:a9:a1:f1:ee:29:6f:f3:f0:b5:56:c6:
d0:76:f8:50:3a:d8:58:c0:1a:e1:6b:9a:61:ad:20:6a:97:49:
f4:ce:b2:5f:ce:2d:6d:8c:3d:92:76:ab:7d:bc:42:42:9a:ea:
9d:b1:7f:3d:bc:53:d7:f0:c0:29:a3:92:4a:1b:77:10:30:08:
85:d5:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:35 2026 by rpki-client