
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json)
Hash identifier: bR+h2bs8kjT9v3ofLYlGCXoicgKBVnqUCni/qU4KH48=
Subject key identifier: CF:19:A7:C9:8D:17:1A:68:57:83:D1:2A:E3:CF:AF:17:AF:16:D9:9C
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
Manifest number: 014C
Signing time: Fri 17 Apr 2026 04:51:23 +0000
Manifest this update: Fri 17 Apr 2026 04:51:23 +0000
Manifest next update: Fri 24 Apr 2026 04:51:23 +0000
Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: 02V1U4wu5ooL3XkUfP+YNeLpA41NFLm0MYmne17I4m8=)
2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 21CMC+4jrqt9R3YVeyqV8PFYMlUBz4//FXWyuGoWN2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Validity
Not Before: Apr 17 04:51:23 2026 GMT
Not After : Apr 24 04:51:23 2026 GMT
Subject: CN=69e1bc4b-36e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:e7:83:ed:2a:24:46:86:56:08:1f:3c:8c:
31:c8:7b:bc:c8:dd:8f:e2:b5:f2:3e:ec:bc:4d:fa:
00:4a:1c:c1:47:f3:a8:83:5e:c1:07:0a:ec:ee:3c:
70:48:ad:f5:c2:f8:8d:6f:7b:88:e7:43:8d:9e:27:
de:89:2c:bf:f0:8a:99:92:97:94:7f:61:bf:a3:93:
79:a6:fd:a0:71:b3:96:df:6d:8f:aa:35:bf:3b:ec:
df:1d:c5:b0:40:d1:6c:fc:41:08:d0:1b:45:5f:3e:
55:5c:ec:4c:93:c9:da:57:30:c0:51:33:9c:8e:45:
16:83:5f:15:fa:48:b0:65:ef:03:26:27:98:1e:38:
1b:5c:ce:ec:74:f2:1e:4c:f8:22:45:68:93:37:64:
6f:65:7a:b0:76:c7:0b:63:a6:4a:10:d8:44:ef:61:
e1:fc:7e:07:9d:98:2a:17:31:20:97:85:a4:b6:49:
fd:36:f3:a0:0d:30:60:c4:34:bd:ee:43:23:65:0f:
fc:c6:a3:72:98:49:d1:0f:63:ac:43:50:65:4c:46:
61:e5:e7:ed:5a:5b:ad:e0:8b:fe:dc:23:08:e5:76:
8f:a7:51:d5:8f:57:be:c0:6d:50:8e:c8:be:c4:71:
2a:6b:b7:e0:de:69:bf:af:66:9f:43:66:41:87:6a:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:19:A7:C9:8D:17:1A:68:57:83:D1:2A:E3:CF:AF:17:AF:16:D9:9C
X509v3 Authority Key Identifier:
keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:ad:22:1f:9c:59:73:d7:94:b4:d1:c7:ee:58:57:8b:b6:
91:97:f2:8f:60:8d:4f:d1:ef:b1:84:6a:b2:37:2f:d8:f3:39:
88:2c:2e:c5:2f:cb:d3:a0:e5:09:e3:16:ff:c2:ae:52:29:80:
55:ea:96:cf:47:e3:9a:2a:d9:9f:27:dc:5c:86:aa:42:d2:0a:
dd:91:96:c4:19:7f:1c:e0:74:d4:a4:db:7e:d4:b4:e6:50:a9:
94:69:c1:3a:71:f0:9c:9b:91:7e:6f:c6:20:d7:2e:28:74:8a:
9f:41:4c:50:75:a3:e3:b4:3d:ba:cb:28:35:bb:69:76:37:9f:
34:3d:33:19:f6:8a:e8:77:0f:5b:cd:71:30:11:b0:d5:b4:f7:
4c:c2:3f:46:76:6f:a0:47:f6:9a:f7:30:8a:6e:68:39:40:56:
7a:8e:2b:8a:73:97:ab:79:5d:4f:08:dd:4c:79:6f:db:b3:02:
51:bb:c0:58:16:aa:9a:96:5b:aa:95:24:99:42:c7:c9:b7:b6:
6c:75:37:9d:54:80:62:fc:e9:d6:18:3d:37:a4:17:5d:9a:08:
37:f9:90:88:b6:15:b4:4d:c9:d8:18:5d:a4:e5:80:d5:e0:5b:
91:59:4a:ab:67:d9:9a:23:67:a3:a1:9b:fa:2c:9b:95:ed:74:
aa:d8:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:35 2026 by rpki-client