
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: ZbetZz9qZuIu5hjSVir/qV63sDgMewjYwIhpEvbdze8=
Subject key identifier: A7:A8:D6:2B:6F:B7:0C:07:35:84:AC:90:E8:85:2E:C1:35:01:32:F1
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 079F
Signing time: Mon 02 Mar 2026 01:41:08 +0000
Manifest this update: Mon 02 Mar 2026 01:41:06 +0000
Manifest next update: Mon 09 Mar 2026 01:41:06 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: KCQkmpxAn4KaaWW/5gefxFNSdg6+IK6DF/qsbipccHU=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Mar 2 01:41:06 2026 GMT
Not After : Mar 9 01:41:06 2026 GMT
Subject: CN=69a4eab3-6cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:53:d4:dc:06:1b:d7:e6:6b:8e:56:50:3d:
7b:58:a8:c6:58:6d:d1:ba:85:a6:e7:c0:c9:92:8c:
ea:97:3b:63:ad:b8:48:44:09:0e:bb:9c:17:f2:41:
33:e6:2d:8b:b1:a7:15:0b:2b:24:06:04:2a:82:df:
d4:04:aa:74:ea:84:ea:83:3f:ca:55:25:9e:81:a2:
e6:46:3f:30:fa:04:b1:1a:c6:df:93:97:9b:f5:ae:
f2:e1:39:79:e4:45:cf:6e:87:70:1b:82:a4:af:d9:
00:0d:3d:7d:71:07:7e:a2:19:6e:0a:a5:0c:62:c9:
c0:75:90:55:af:d6:f0:ee:ad:39:4d:1a:ba:15:6d:
51:cb:b7:a4:1c:df:35:78:0b:24:2c:68:fe:0f:11:
65:f7:e9:02:8d:89:bb:ba:26:1e:5a:21:78:d1:23:
4f:65:0b:62:9b:de:c1:eb:32:80:84:1a:c2:32:56:
8c:29:27:0b:04:6e:ee:ef:58:14:05:25:52:c5:67:
47:7d:53:5d:5b:59:78:fe:5f:74:b1:2a:c0:de:12:
4d:bc:0e:01:a0:d4:3b:a2:d2:53:fc:08:ab:64:40:
09:87:eb:85:b8:9a:34:d8:64:04:cd:23:c4:0f:fc:
77:47:84:9d:07:7a:44:27:00:8c:68:ed:54:3f:99:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:D6:2B:6F:B7:0C:07:35:84:AC:90:E8:85:2E:C1:35:01:32:F1
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:f7:a2:2c:02:10:20:b5:2e:42:b2:08:17:2d:b9:5a:ab:
51:0e:a5:c1:24:c5:2f:18:ae:bd:be:84:ee:ad:8a:e8:01:d5:
f9:42:52:92:4f:4d:1e:66:e8:63:08:db:f4:ff:db:14:a5:96:
d4:ad:e5:d6:f7:07:ee:8d:8b:8a:81:6b:2a:5d:54:25:d3:b7:
86:ea:7a:76:23:91:69:06:bf:6d:fd:19:93:f9:33:99:f2:5d:
09:46:1c:f8:d5:c1:62:c4:bb:55:34:4e:bc:ab:13:70:32:f9:
6c:46:17:dd:5e:14:36:c5:29:87:d9:00:eb:c3:66:5f:13:44:
a6:c7:93:09:f8:e3:b5:35:44:09:07:08:6b:17:8f:ee:06:96:
e7:47:98:5d:22:20:43:9e:91:1c:52:61:a6:21:f2:13:46:19:
d2:e8:04:c1:a2:f3:1f:62:af:51:5a:02:41:93:45:d0:f3:69:
f7:29:a1:f5:2c:ad:2b:2d:2e:3e:21:c0:01:f6:3d:d9:34:68:
a1:63:c4:e0:05:a6:68:53:da:f4:2b:b8:ea:42:43:b5:94:ac:
3c:ee:06:d0:56:4c:71:36:da:e4:22:0b:1a:72:26:2c:23:ff:
6f:53:ed:8f:e4:11:02:0b:07:96:ad:23:8a:9b:06:e1:50:4f:
1a:10:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:12 2026 by rpki-client