
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
File: LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json)
Hash identifier: OIgHiyuL4dorgbPp/hxSif8u2A4FWEyjV35cUK98XBI=
Subject key identifier: 86:CB:DE:6C:1B:13:FB:D8:57:6C:20:5E:70:D4:46:31:00:97:1B:AE
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
Manifest number: 02A3
Signing time: Sun 01 Mar 2026 02:21:38 +0000
Manifest this update: Sun 01 Mar 2026 02:21:38 +0000
Manifest next update: Sun 08 Mar 2026 02:21:38 +0000
Files and hashes: 1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: LGBhRCpTsMlsStEkfqD9fOjO/OuE7FPRGejAD/seL/Y=)
2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: g8vcclbbREYqZXoYauTIQjOb/RVyOM/9dHk3sz7i1Lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Validity
Not Before: Mar 1 02:21:38 2026 GMT
Not After : Mar 8 02:21:38 2026 GMT
Subject: CN=69a3a2b2-d463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:80:ce:b4:71:cb:c5:5d:7b:46:ea:d8:24:fd:
3e:c7:04:5f:49:6a:8a:35:c2:a7:a4:93:ed:93:f1:
86:2f:75:57:dc:e2:5c:09:03:a6:9a:57:c2:94:dc:
d3:33:81:50:d6:bd:c9:0c:aa:10:87:72:16:0d:30:
34:0b:2c:dc:59:8d:de:e2:61:8a:35:04:cd:5c:4f:
77:f1:45:f3:49:3a:df:3b:a7:9e:cb:a3:e1:13:c4:
a2:0b:f4:d2:d3:71:b1:76:e1:ef:fa:3e:61:b7:5f:
85:25:01:e7:ac:86:3e:d6:ff:73:4e:38:b4:64:ec:
97:a6:9d:5b:22:73:30:96:e3:3f:36:54:c6:ac:22:
0c:a4:44:83:8f:57:7d:a8:3a:ef:a5:a8:5f:c2:92:
d2:06:33:84:fd:a3:7d:cf:df:3b:f5:35:7e:e5:bd:
cd:33:07:af:f5:32:e5:22:20:88:76:63:53:0c:62:
bb:84:42:4a:73:85:93:5d:d9:4e:8c:78:91:9d:ff:
79:4a:72:77:48:fa:31:86:06:97:c5:42:e6:52:83:
14:84:ee:a0:2e:be:86:79:98:55:f9:9b:08:83:b9:
ab:c0:0f:f0:82:7c:d2:69:0a:a6:76:ab:1d:74:07:
84:e8:de:6b:bd:ab:a7:47:0e:93:e9:47:f9:44:31:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:DE:6C:1B:13:FB:D8:57:6C:20:5E:70:D4:46:31:00:97:1B:AE
X509v3 Authority Key Identifier:
keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:b2:57:6a:8a:12:ea:79:0e:c7:17:33:fa:af:07:a0:02:
0a:3e:2b:32:2a:38:3b:b7:a2:94:6c:94:09:69:5f:71:f8:de:
9b:8e:8d:9e:a2:18:f4:b2:34:44:e0:df:3e:ac:0f:33:a6:15:
ed:15:52:c3:8d:28:16:33:21:f6:73:d5:28:7b:b2:42:a2:b2:
21:6c:a0:f0:3e:9c:99:41:63:02:b4:19:69:b9:24:97:a9:ae:
6b:e6:05:06:89:c4:7b:62:61:8f:7d:69:f4:79:a1:4b:0c:34:
26:da:12:ee:4f:a7:fd:f9:6a:d6:55:3b:e2:6e:e7:41:6f:9c:
4b:ce:be:00:bd:d8:c1:6d:71:f7:dd:1f:4c:c3:80:35:db:1b:
f0:7f:7c:98:aa:64:43:f5:ea:97:76:5a:f9:24:d2:ec:98:cc:
5a:b2:1f:b8:11:8c:b7:1b:88:03:7f:24:00:ed:b5:89:e5:37:
f7:4e:5c:bd:3d:2e:40:bc:06:79:d0:86:17:24:f0:05:03:0d:
9c:72:19:51:31:63:e5:dd:d5:f6:42:b8:3a:ad:15:5d:f1:72:
89:91:33:2e:eb:a0:b4:ff:d9:84:86:05:61:f9:5b:2d:21:78:
ba:50:8c:12:ac:89:dc:7a:56:74:c4:f6:84:67:65:b6:0e:e5:
63:0a:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:05 2026 by rpki-client