
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier: ekSaOgpJbTa8UdyzZ4hPEDlvJMJZ1rK8LPf7tppG6bQ=
Subject key identifier: A9:09:9D:3B:23:75:74:BF:5C:7A:DD:B2:64:4D:E7:4A:17:09:65:73
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number: F2
Signing time: Sun 01 Mar 2026 07:28:53 +0000
Manifest this update: Sun 01 Mar 2026 07:28:53 +0000
Manifest next update: Sun 08 Mar 2026 07:28:53 +0000
Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: FX4s/GOXiUQ1mqnnuI/dueYH3ZIkv7z1D/5TjQ1jFlE=)
2: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dfWTxzpp9zXo46ZkeMa+zA4D9hQsUMAYfKkDEAfqr00=)
3: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: enHP38spS/cKfOn42zv8/O5zNl/TksEZwto02A0n87g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Validity
Not Before: Mar 1 07:28:53 2026 GMT
Not After : Mar 8 07:28:53 2026 GMT
Subject: CN=69a3eab5-fc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:c9:e8:7c:d3:bb:e5:c0:5a:3c:f7:e1:78:
a1:7f:89:b8:0b:f1:32:72:53:08:c4:18:3f:bd:ef:
4e:4c:37:c5:a4:db:14:02:5e:98:b5:ba:ad:dc:b9:
ad:c2:0e:e6:1d:82:7f:f0:93:72:d3:1a:0a:5c:ab:
23:af:16:0a:52:83:1d:c1:51:b8:10:a3:95:9f:67:
8f:4a:de:aa:45:49:fd:30:1a:66:e4:07:07:e3:db:
3b:3a:9e:11:96:92:c1:f2:d3:e2:19:c4:e3:3e:8d:
39:90:86:31:39:ca:d5:9d:9a:7c:2d:33:16:9b:af:
f0:67:82:3c:53:1c:d7:2b:ba:68:b5:ed:e6:9f:7d:
c8:d7:e0:9b:a0:6a:0f:09:16:05:d0:1a:eb:dd:be:
4f:40:06:36:95:61:ff:68:0f:30:7d:c1:8d:19:e6:
ab:34:d1:0b:4d:95:50:47:38:34:30:1e:24:27:a4:
b1:74:45:d2:5b:d2:fb:66:bc:91:77:41:93:56:b8:
24:67:c2:97:49:61:ee:47:6c:3c:d3:74:25:4a:83:
45:0e:d7:87:b4:67:f5:5e:7f:b9:8d:10:96:ac:fe:
97:fb:f0:ec:59:81:7e:ff:ec:b6:d6:48:1c:49:17:
97:28:bc:99:72:39:4f:17:0c:cd:5a:7b:16:a0:09:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:9D:3B:23:75:74:BF:5C:7A:DD:B2:64:4D:E7:4A:17:09:65:73
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:0c:cb:3c:95:0c:f6:cb:98:59:fc:11:af:fc:d7:20:16:
77:bc:91:cf:11:c7:1d:13:e4:d3:25:2c:18:3c:4e:a9:28:d2:
02:3d:f3:d1:f1:63:98:d3:0a:88:9f:b7:cd:9e:47:f6:51:1e:
54:58:53:6a:4f:15:2b:e4:a6:d6:ce:f9:7d:63:13:bc:26:75:
cd:24:17:96:30:60:3b:82:a6:7d:51:74:ec:44:2e:ef:04:78:
4b:b1:4e:dc:68:ec:ed:82:68:f3:e1:45:c6:6e:44:c8:02:ce:
50:23:12:c3:16:02:d0:85:30:4f:ee:4f:d7:1a:0e:f7:45:e7:
d9:b2:4b:ca:4b:94:54:00:cd:37:a9:56:46:77:26:9d:21:35:
43:d5:35:14:f7:9e:3a:fd:4e:7e:17:23:16:e1:16:d1:a5:b9:
e3:50:0d:90:0e:aa:7f:a1:d4:93:a5:11:08:c6:06:86:40:37:
d3:39:f0:05:0d:7f:5f:27:d6:a8:a5:86:54:7d:3a:ce:a6:a5:
bc:69:c1:2f:20:c5:44:19:ea:bd:25:27:81:3e:b2:8f:eb:de:
19:d3:c1:dd:23:01:f4:94:fd:b4:24:48:81:a6:b5:97:b1:1f:
5b:50:23:77:54:b4:f1:ac:fe:75:cb:01:77:36:e2:b4:ee:98:
47:d5:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:24 2026 by rpki-client