
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier: o7TgOb9nKGmuNaD9nWBeP7RDCQXqaG+9Hcop2HZWHwM=
Subject key identifier: 7E:6E:AF:C9:69:6F:65:CE:66:F7:F3:A4:01:EC:F9:79:00:F7:99:AE
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number: 01F0
Signing time: Sun 01 Mar 2026 04:00:32 +0000
Manifest this update: Sun 01 Mar 2026 04:00:32 +0000
Manifest next update: Sun 08 Mar 2026 04:00:32 +0000
Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: pEOxRlakZ9Soa9TGXsH2/il8U6dCer9m9d4OtIJs1vw=)
2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: w2G6mnACs8k8ArQ9Khbqaqk7miaXJQo8wHP+q2xbHko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Validity
Not Before: Mar 1 04:00:32 2026 GMT
Not After : Mar 8 04:00:32 2026 GMT
Subject: CN=69a3b9e0-6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:e0:e7:e6:79:0c:55:80:05:c8:4f:03:5d:
68:d6:e3:a7:24:a4:57:11:82:bc:c4:26:5c:eb:87:
1e:9b:5b:d7:b8:8e:98:22:13:e1:75:83:9d:cd:54:
34:42:46:6a:fd:18:c2:b0:5b:a8:85:d6:d7:99:d0:
50:27:bf:8f:21:2b:e1:b6:68:03:e4:f3:a9:3f:3b:
e1:f2:f2:7a:c3:f9:72:49:5c:6a:4d:8a:ae:8b:c4:
42:9f:46:26:f4:90:49:00:84:64:55:20:0a:72:20:
c3:79:cd:6b:4a:f0:e9:dd:a8:57:b7:d6:12:32:b4:
8a:c6:b2:dc:7d:14:cb:4a:e3:5c:92:1f:7e:1e:12:
47:39:2a:7d:62:d0:19:20:37:2a:38:94:ae:53:d9:
b4:e9:14:99:b1:ce:4c:fb:30:5f:79:36:7f:e8:ec:
90:f1:38:77:3a:af:62:7b:b2:00:84:c4:db:79:08:
1f:63:93:9e:92:68:1d:7d:b3:b6:01:65:f6:47:5b:
17:09:69:29:e6:47:2d:d2:6a:1f:a6:7c:57:7f:2f:
ac:fa:de:3f:74:3d:5d:38:51:5b:59:58:8e:93:d8:
ab:30:c6:bc:a4:98:9e:28:ab:de:3d:1e:b0:6a:fa:
b5:f6:89:c2:62:08:ac:9d:a4:d9:eb:04:b4:13:b9:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:AF:C9:69:6F:65:CE:66:F7:F3:A4:01:EC:F9:79:00:F7:99:AE
X509v3 Authority Key Identifier:
keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c3:ba:5b:b3:50:8c:4d:cb:51:ce:51:05:c8:96:8f:b5:1a:
26:04:ff:e3:b9:4b:91:12:95:1b:c2:90:e1:d7:54:8e:6f:cd:
23:82:ee:fe:cd:41:69:2f:13:c8:58:cc:2d:f7:b8:be:6d:48:
3c:43:b5:62:36:1a:cd:8f:c1:c3:b7:f5:5b:75:ac:fd:f0:42:
5e:98:e0:1d:03:c4:2d:c1:a6:c4:b0:36:79:46:58:09:c3:9a:
ad:61:90:74:08:af:95:3d:02:55:12:50:a5:c1:82:27:85:04:
cc:2f:0a:db:9b:3e:d7:82:f3:e1:fe:91:53:04:a8:72:82:fa:
22:db:22:d4:9c:39:34:50:06:18:bb:eb:90:c3:e9:6f:8d:13:
dc:84:14:95:6e:d5:bc:f9:6f:de:e7:d1:02:48:35:08:95:60:
9d:32:72:04:ee:dd:df:91:51:17:c3:1a:48:da:19:4a:33:2f:
32:65:26:fc:a7:74:d4:10:16:b6:bc:c7:27:a1:7a:94:cf:cd:
a5:f8:81:09:bd:69:7c:a3:9a:5e:2c:97:f2:3f:72:ad:6d:e7:
9b:54:1b:49:5a:df:58:5c:97:17:78:3d:ca:03:a5:9c:bc:9d:
3e:ae:25:46:fe:13:41:a2:c4:34:24:6e:47:1c:a7:a3:56:58:
35:8e:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:42 2026 by rpki-client