
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: V4XVERM69vmDkw6vXX3Ca13JmkE/2LrYJiah2Cgyy3Y=
Subject key identifier: 2D:E0:12:F4:30:B6:2A:B9:11:C0:56:77:4E:AF:A6:BC:B3:99:5C:08
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 0837
Signing time: Tue 28 Jul 2026 23:29:26 +0000
Manifest this update: Tue 28 Jul 2026 23:29:25 +0000
Manifest next update: Tue 04 Aug 2026 23:29:25 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: AzBWSKCCXR6WKn/OO071LINvERlUHrlBk48gcNBykWI=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Jul 28 23:29:25 2026 GMT
Not After : Aug 4 23:29:25 2026 GMT
Subject: CN=6a693b56-2b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5b:b1:e3:bf:32:2f:57:c3:a9:34:12:bc:a1:
7b:42:9f:85:88:9c:09:db:26:df:8f:dc:43:cf:71:
7e:4e:21:06:3e:95:0c:03:4c:c0:35:b4:0e:b0:03:
a0:52:01:0d:a9:b0:d0:d2:56:0c:ce:80:4b:73:fa:
d7:ee:16:f1:7b:60:14:1d:a7:8e:1b:a9:bc:87:21:
f9:eb:2d:1f:fd:22:32:a8:cd:f9:ca:5a:1b:d1:2c:
73:15:37:e2:47:13:e4:45:7e:6f:65:43:de:8f:85:
a2:68:4c:42:de:cc:35:cd:dd:75:3f:05:94:65:a2:
68:ba:89:f1:98:d2:f4:a6:45:34:5b:69:7e:11:cd:
ba:f2:91:51:bf:89:ba:f9:d0:4d:6c:25:b2:10:fe:
cf:87:93:fa:32:ee:e1:25:48:d8:21:01:8c:f1:f7:
91:25:e3:4b:b0:a0:e8:5e:04:b1:dd:10:03:7f:df:
42:11:35:55:64:e4:6b:06:d0:3c:18:fa:2a:4c:7b:
62:7b:29:79:3a:ac:5b:aa:b4:de:89:f7:03:36:aa:
1b:af:05:3b:35:e7:75:68:61:9d:fe:47:ff:29:00:
73:38:fe:53:63:6e:f5:d7:16:3d:bc:e6:39:0a:be:
fd:2d:f0:d0:5e:bc:20:43:e3:3e:9e:de:36:50:a3:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E0:12:F4:30:B6:2A:B9:11:C0:56:77:4E:AF:A6:BC:B3:99:5C:08
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:9b:0a:01:8a:25:ed:ae:9e:17:01:58:9c:9d:b4:f3:e7:48:
67:5e:9b:52:11:1a:03:18:48:78:bd:ee:3a:f3:24:d8:1f:24:
01:3b:d0:65:1b:a6:f7:7d:78:b5:dc:83:a7:4e:ea:ae:05:4c:
aa:71:dc:f3:fa:21:d4:b4:ad:ee:59:98:0e:ce:57:77:ad:48:
f0:53:72:a2:e7:31:2a:99:f4:36:a5:71:ad:66:28:36:b9:5a:
38:8b:30:0c:ed:6e:d0:53:cb:3b:8c:4b:8a:78:ae:ed:94:1e:
6f:e3:8e:e3:30:b2:4e:ed:36:e1:9f:84:a3:c5:7b:d0:b7:ed:
10:26:c6:db:f9:ab:f7:85:d1:28:eb:aa:8c:ef:2a:36:93:05:
6a:f6:45:da:21:db:b2:bf:4f:91:b0:45:81:f6:be:72:81:33:
67:3e:a2:a6:70:38:45:62:37:ca:72:e0:28:38:92:6b:ce:64:
54:6c:8b:9f:1e:52:57:50:84:ad:c0:64:bc:ed:c4:d4:8e:96:
08:69:dc:29:05:fc:be:27:3e:07:aa:58:cd:96:b9:2e:07:af:
93:29:a8:d4:7b:8f:b2:e3:e6:70:4f:1b:31:93:84:fa:55:2c:
63:20:8b:0b:b3:41:69:e1:3f:d0:0d:3f:ed:51:f1:ad:46:53:
f4:56:d2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:17 2026 by rpki-client