
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft
File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json)
Hash identifier: Atp4j52fCaCNTndwhAA/jpM0BH4OhHYsPI1EDnuNaqs=
Subject key identifier: 35:41:4A:4F:01:53:E1:7E:D2:40:AD:90:82:91:E4:DC:90:5D:E4:3B
Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44
Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244
Certificate serial: 04E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft
Manifest number: 04DC
Signing time: Tue 22 Sep 2026 23:22:26 +0000
Manifest this update: Tue 22 Sep 2026 23:22:25 +0000
Manifest next update: Tue 29 Sep 2026 23:22:25 +0000
Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: wov2qWX72CKRbLlTXHbNoxmINwAAhab089xVNN1jxEA=)
2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: N+WDRVK1GCgpC7/SSOzfsvjQlOUQfUPMZGxcGp5tWsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl
rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244
Validity
Not Before: Sep 22 23:22:25 2026 GMT
Not After : Sep 29 23:22:25 2026 GMT
Subject: CN=6ab30db1-46ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:4f:23:26:3e:bf:b6:b4:df:7d:09:57:f7:
15:d1:0f:74:c8:44:65:57:41:e8:3e:9d:fe:af:2d:
af:f5:d9:b4:1e:1f:f8:3f:20:24:7c:c7:73:ac:8d:
21:64:18:04:4d:61:dd:b1:a8:d9:d8:12:e4:98:2c:
a2:40:55:98:60:93:8c:8f:3f:51:80:49:a0:cd:49:
d1:1d:97:fb:ee:0e:d6:ce:44:c8:93:36:a4:8f:25:
00:34:c2:e4:6e:14:0e:cf:87:ce:5a:1c:88:23:83:
e1:74:93:0b:ee:e6:4e:23:4d:92:80:55:29:af:92:
31:d9:0c:ca:98:47:ca:4a:5d:cd:ec:56:c7:e4:3e:
72:d2:bf:ec:a0:48:c6:fb:d7:34:f4:8f:62:3e:77:
e9:dd:7e:00:43:af:0a:b1:cf:a6:65:be:7f:56:f0:
5a:a2:10:cc:eb:3f:4d:a6:cd:62:5c:84:b1:2e:f5:
e9:23:3f:82:d6:47:82:9b:72:c9:4a:66:fc:63:27:
fe:91:44:5e:cd:98:7c:2c:06:a9:e6:84:61:89:88:
b5:59:2b:f0:2a:fc:22:6b:64:4d:e3:86:a4:3e:20:
60:20:2e:44:6e:7b:75:1c:ac:86:18:67:a3:86:08:
4a:c3:f9:64:c8:6c:ad:fc:bd:b1:21:61:9d:bc:c3:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:4A:4F:01:53:E1:7E:D2:40:AD:90:82:91:E4:DC:90:5D:E4:3B
X509v3 Authority Key Identifier:
keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7b:a6:6a:a6:e3:9f:3e:8f:ed:de:b4:1b:f7:c6:c0:03:c8:
6e:26:69:0f:d0:d5:b5:1c:5d:ca:37:55:43:ef:1b:9a:c6:d3:
04:80:b8:a1:3a:04:e0:1f:c9:da:79:9c:7d:d5:8e:6c:04:11:
09:19:81:f3:9e:8c:37:8b:30:7d:c5:7d:94:8e:26:b1:21:75:
14:06:ef:81:1b:c6:7d:80:a7:1e:0e:2c:1d:e6:0b:6f:4e:ef:
ec:2a:19:30:f8:ca:5d:09:b9:37:dc:5c:98:a0:ea:e9:b4:8e:
a0:b3:ea:80:92:df:ab:fe:08:0e:ed:ce:df:65:f4:36:b2:7f:
83:a0:19:ba:16:ae:48:0c:6f:33:91:e1:8f:f7:b8:9b:15:2b:
d6:c6:f3:7a:ec:35:06:9a:fa:f1:27:02:9f:d1:70:16:7c:07:
6e:ff:a0:09:8d:15:0c:3a:3c:22:3d:bf:a5:01:b9:74:7b:4e:
b8:3b:6f:04:5e:98:66:7b:51:99:2d:a4:73:bf:95:1d:45:c2:
19:de:92:c8:e2:e9:79:02:ba:0d:7a:35:a1:79:ea:00:57:34:
bf:05:38:e3:50:27:7f:a2:9e:d1:46:ef:66:c8:7b:90:06:3c:
4a:48:56:de:ef:bf:cd:00:4d:85:51:47:a6:e3:be:41:e9:3a:
57:16:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:16:35 2026 by rpki-client