
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier: XNv1rROm5haWliLQZ9grvUNSZiVYidaB/VsxMp+jcP4=
Subject key identifier: 73:72:70:FC:77:7D:53:6A:BD:19:B8:0E:E0:86:DC:1C:8C:63:1C:0D
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number: 04C6
Signing time: Thu 16 Apr 2026 23:48:08 +0000
Manifest this update: Thu 16 Apr 2026 23:48:07 +0000
Manifest next update: Thu 23 Apr 2026 23:48:07 +0000
Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: Ip4MZ5nDCO4sbmQKFcXfdvbO/2LPn3Lf0cNJUJIPXHc=)
2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: Cnel+OeT3oP8Ba57DN2AfJdE9d8ywFeBBz6sL8SdLcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Validity
Not Before: Apr 16 23:48:07 2026 GMT
Not After : Apr 23 23:48:07 2026 GMT
Subject: CN=69e17538-3a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:9d:38:b5:03:3a:bf:2c:07:a1:d6:7d:bd:
ba:36:ec:67:dd:b8:c9:32:05:fb:82:5e:87:1f:0e:
35:76:e5:c5:bb:81:bf:51:4f:3f:3f:9a:f4:cc:08:
66:db:1b:2d:82:5f:f7:4f:60:06:84:c7:af:97:4e:
2f:12:24:4d:8b:91:39:8c:87:27:88:02:b9:0c:2e:
d6:b3:ff:57:6a:ae:7f:f0:88:09:68:31:09:8e:82:
42:6d:7e:e1:12:ef:21:e5:1f:fe:bd:55:a8:ed:5b:
28:b1:62:f1:2f:67:24:a9:4b:ee:94:75:2a:a6:de:
df:9f:ea:bc:73:6b:5b:3c:30:bd:ec:5b:93:ef:03:
14:90:83:6a:8b:b1:30:21:f4:02:84:54:45:ae:d9:
58:a0:4a:d3:ac:fc:a6:3d:e5:a3:77:5d:bb:5a:30:
bd:8f:ab:f9:7e:b7:de:41:5d:b0:5f:ee:db:e5:70:
5a:4f:d3:60:ed:59:bb:1e:59:3a:4e:14:59:95:1c:
ba:7c:6b:0f:5a:bc:c2:2a:49:63:5d:93:87:f1:38:
d9:5f:95:97:e6:a0:91:60:65:c5:5d:f5:87:33:b9:
4b:1f:a4:a8:9b:77:eb:5e:65:43:24:b6:14:90:8c:
a7:d1:4b:4b:51:1d:fb:63:ef:a7:bf:21:57:44:0c:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:70:FC:77:7D:53:6A:BD:19:B8:0E:E0:86:DC:1C:8C:63:1C:0D
X509v3 Authority Key Identifier:
keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:fd:64:3a:8d:c0:31:49:97:35:95:1a:f3:d5:5d:d2:b2:ca:
15:3f:39:2a:dd:e9:0d:b2:e0:57:05:85:8e:46:96:82:45:a6:
36:a9:a0:69:45:9c:da:d6:18:2d:08:92:5e:9b:1d:c2:96:f6:
34:c4:67:5e:1e:7e:6d:81:36:15:c8:9c:d7:ff:df:19:11:48:
95:94:37:30:81:a3:ec:00:21:c2:a6:b9:13:10:ad:6f:f4:fc:
c5:8e:71:fe:be:c2:eb:1b:be:19:26:eb:ba:78:43:40:a8:76:
86:8c:6f:5a:cb:f9:52:d0:df:67:fc:b0:cd:21:4c:78:cc:af:
3f:07:50:39:00:0d:de:e1:81:69:c7:d0:ea:e4:3a:bf:67:36:
13:a7:08:52:4f:ef:f4:44:ab:9b:05:3b:b2:08:1b:80:44:15:
b3:de:81:17:2c:de:46:c0:2f:bc:cb:0f:77:a9:08:3c:10:18:
fc:8e:92:42:83:41:6c:62:51:d9:fa:df:21:9c:6f:59:9c:b5:
c8:d0:fd:1e:f2:a0:56:24:0c:80:86:5e:a6:1b:6e:f5:2b:69:
7f:72:31:75:37:f0:6c:f8:e7:62:a5:44:ad:62:83:30:dd:cd:
70:6c:51:8d:9f:80:13:d5:35:72:b5:dc:31:e2:4a:c6:9b:8d:
a6:e1:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:11 2026 by rpki-client