
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json)
Hash identifier: wOJxXOSX790rJ1aFej9rcJSj/engkm92Am+PY8IiLr8=
Subject key identifier: 3F:6B:2E:18:76:7E:58:95:1D:57:21:68:86:88:CE:17:81:8E:01:15
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
Manifest number: 0210
Signing time: Wed 23 Sep 2026 02:54:16 +0000
Manifest this update: Wed 23 Sep 2026 02:54:16 +0000
Manifest next update: Wed 30 Sep 2026 02:54:16 +0000
Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: wW6B5uMAakaXSUSZa9MNkarBi5f+7okEztlXmtMvTFs=)
2: A2C289B63B0E11F1ABA6C37BA3833773.roa (hash: jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=)
3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Validity
Not Before: Sep 23 02:54:16 2026 GMT
Not After : Sep 30 02:54:16 2026 GMT
Subject: CN=6ab33f58-7cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:48:33:09:6d:a1:bc:08:d8:17:54:e6:d4:
cf:ac:e8:0b:c0:c9:23:ac:9b:fa:8d:17:88:55:ab:
af:93:16:8e:65:47:36:b9:90:92:bd:ff:0b:52:39:
6b:86:cd:51:80:ce:be:88:9e:b7:9b:cf:06:2d:0c:
40:28:b1:67:a2:0a:e2:ca:bf:80:5a:9d:d8:9e:eb:
59:32:c1:56:55:62:6d:3e:03:18:e6:36:67:98:e7:
8d:ea:35:bf:5a:9b:e6:83:13:3c:20:c7:12:56:47:
98:99:c6:67:88:b3:12:23:e5:d1:4b:e2:6e:2b:c0:
97:fa:07:cf:17:39:8c:e3:ae:17:f7:9c:02:89:e0:
cb:19:cc:c5:81:a1:28:a9:36:05:96:59:5c:ee:ed:
10:c6:8b:09:80:b7:21:0b:68:08:d9:5e:6f:99:e0:
d3:44:6e:8c:26:c4:87:08:b2:bb:e1:f0:00:06:21:
29:e0:81:ec:5d:13:7c:93:84:d1:9b:f8:e6:1d:fb:
ab:18:46:2a:4c:21:35:71:bd:a3:6c:e1:fc:5d:69:
48:eb:bc:41:cd:9c:e1:8a:a4:21:ab:68:69:39:8e:
e2:dc:8e:22:ce:fb:a4:36:56:87:b5:49:57:0b:3b:
6c:09:18:36:c6:7c:c8:55:06:a4:b0:77:cb:6b:ec:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:2E:18:76:7E:58:95:1D:57:21:68:86:88:CE:17:81:8E:01:15
X509v3 Authority Key Identifier:
keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:7a:6a:6e:88:9d:b9:1a:da:45:27:30:84:c1:64:ac:47:7d:
a0:9d:d8:08:1e:b2:d0:27:b9:eb:7b:f5:78:9d:af:4f:30:18:
38:ae:1a:e7:92:08:6d:1a:fe:33:fa:b0:58:ed:88:e1:e4:d4:
da:65:06:2a:5a:b9:6f:48:81:d4:99:03:fb:60:cf:b7:61:2d:
01:50:b5:a3:d1:80:a5:7a:97:32:84:d9:0b:e8:5b:d7:d4:a0:
37:04:7a:cd:78:04:7a:44:42:1f:b7:73:a1:fd:b7:a3:cc:66:
cb:32:1b:84:95:45:48:eb:d1:b0:56:84:d2:ba:a4:5d:f9:6a:
b3:05:cd:5c:96:95:cd:42:a8:e9:a0:40:08:e4:01:9d:a4:ca:
b3:3e:96:9e:c6:a4:92:14:33:39:04:99:03:c5:36:51:4a:33:
e8:cd:ac:63:e1:59:c0:d7:46:c3:8a:01:f9:c4:d6:b2:46:84:
8a:cd:42:da:02:66:3a:58:14:60:7f:8e:63:47:35:21:84:18:
21:b9:ee:7b:60:96:08:39:bd:70:c5:2a:b3:02:06:b4:3f:cf:
6f:6b:6e:4c:74:a2:d4:e7:6b:3d:4b:a1:cd:e8:53:6c:ab:f0:
cb:7d:0d:44:a8:f2:20:13:d5:87:f6:50:b4:85:52:61:e1:ed:
ba:c0:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:56:45 2026 by rpki-client