
$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
File: LtaWwj0zRedLDXNOJLcQqniq5fo.mft (raw, json)
Hash identifier: ebBPx7hXlEUT2MaKIUBONadDXVQba6yZZGm0g/SDp/s=
Subject key identifier: B3:DA:44:9C:41:47:C6:7C:D9:0C:07:19:AE:55:89:BA:AB:64:8B:BF
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Certificate issuer: /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
Manifest number: 3F
Signing time: Sun 01 Mar 2026 09:50:47 +0000
Manifest this update: Sun 01 Mar 2026 09:50:46 +0000
Manifest next update: Sun 08 Mar 2026 09:50:46 +0000
Files and hashes: 1: LtaWwj0zRedLDXNOJLcQqniq5fo.crl (hash: PfgcW1u5OVMyI3HkbK6l3NJd0UPo6wMM3UKTxHSGbAM=)
2: 5D7ACB26B90811F0ADC46B62C4F9AE02.roa (hash: 4Afz0RP57yzwWRjbdV6j33r3wX6GOFsx3kHHTaSiTLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Validity
Not Before: Mar 1 09:50:46 2026 GMT
Not After : Mar 8 09:50:46 2026 GMT
Subject: CN=69a40bf6-7ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:4b:ae:0e:75:d2:79:ca:34:f3:8d:f7:d1:
08:1e:d9:5c:2e:be:85:b1:9f:11:63:fe:64:13:89:
a4:5c:f0:e5:bb:fb:55:78:48:fa:3c:42:5a:a4:d9:
12:66:71:25:47:6a:d1:36:78:6f:f1:10:21:b0:99:
b6:86:4f:7b:51:39:b1:f9:8f:57:b9:7e:9d:04:e4:
c2:d4:67:c9:95:9f:81:8e:61:dd:3d:39:18:9f:ad:
df:b7:15:be:1a:56:a9:62:24:47:08:6d:2c:84:18:
04:3e:89:41:a3:6c:2b:14:78:53:43:7a:ac:fe:e4:
8f:2e:9c:cb:9a:2e:44:c5:f9:ed:8f:6d:9e:a1:3e:
ba:28:ef:90:e5:7e:1e:a8:84:4b:6c:8b:ce:93:43:
33:d0:19:a0:74:7e:29:f1:bf:b6:49:29:ed:0b:18:
25:d2:4a:05:5c:7a:97:12:03:f7:b0:2e:d1:25:e6:
5b:9d:b9:bb:80:b3:f1:5e:46:a3:a8:96:d1:12:0c:
8f:05:91:0e:77:84:a8:05:b6:a9:56:fe:05:28:c9:
47:fd:86:54:f7:ba:06:89:eb:b7:01:44:b7:12:f5:
54:e6:b3:88:6d:c9:51:83:a2:98:93:44:ea:4c:0d:
af:99:03:94:7c:3a:1d:47:fb:f0:19:26:c0:22:70:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:44:9C:41:47:C6:7C:D9:0C:07:19:AE:55:89:BA:AB:64:8B:BF
X509v3 Authority Key Identifier:
keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:af:5f:4b:ed:d1:01:1e:01:94:c0:a2:e2:40:b6:fb:97:b5:
ce:27:90:30:bf:b4:3c:f3:11:c3:5e:6c:49:dd:21:4b:1f:fb:
bd:de:bd:a3:03:f2:ad:97:59:a7:7a:24:b5:53:20:93:00:ba:
59:21:27:1c:da:32:33:64:76:9d:cc:13:00:93:26:36:7b:6f:
3b:43:79:6a:15:b7:31:47:a5:65:76:d7:e9:a9:69:10:67:a6:
58:ce:90:78:fa:cf:f5:07:c5:e3:de:4d:25:a4:01:e4:f8:1d:
3a:fe:1d:91:0c:b9:e1:e2:97:75:c8:b3:1e:f8:bc:f2:ea:22:
f7:3b:f9:bb:57:c9:78:54:c7:84:c3:fe:34:42:b9:41:df:21:
c7:b5:53:4c:40:cc:26:1c:0b:58:95:4a:24:9e:f8:f7:fd:b3:
60:15:04:5d:97:08:e4:8a:02:ef:7f:8d:f7:88:74:0a:70:11:
f3:82:7d:7a:b4:41:37:0d:cc:95:5c:c4:c8:53:eb:d6:ce:0d:
f6:a1:08:64:76:f8:96:e5:a7:23:1c:0b:a7:54:5d:1d:61:cf:
c2:09:7b:d9:a8:fd:15:50:00:01:f1:0f:94:5d:52:02:25:db:
23:86:65:0f:00:b6:83:2b:92:c8:f8:0b:5e:10:5b:c5:8e:02:
89:ad:dd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:44 2026 by rpki-client