
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json)
Hash identifier: Y00fm0i7r+s7m/b9hgWVNNJFcXy8uG1728A17RV+LJQ=
Subject key identifier: 3C:E3:1F:65:1E:AA:77:1B:70:05:1B:F2:DE:75:0B:65:8F:69:25:01
Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
Manifest number: 075B
Signing time: Thu 16 Apr 2026 21:37:56 +0000
Manifest this update: Thu 16 Apr 2026 21:37:56 +0000
Manifest next update: Thu 23 Apr 2026 21:37:56 +0000
Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: WD5vREL9C7oxgrQc4svT66RcmryBbB4NRM2ZrVhbLik=)
2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Validity
Not Before: Apr 16 21:37:56 2026 GMT
Not After : Apr 23 21:37:56 2026 GMT
Subject: CN=69e156b4-effa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:bb:46:77:d4:4e:89:2e:b2:a6:49:fb:26:
2d:0b:cc:fb:67:0e:37:29:88:9e:78:af:87:be:79:
a2:66:ef:91:79:9a:97:de:57:fa:a0:71:87:a4:b8:
7f:7a:86:2e:1d:e7:6a:f7:d6:18:b6:d2:55:d5:80:
01:cd:74:ba:db:5e:ab:dc:80:96:00:c6:9e:84:ad:
e6:e4:38:72:e7:c4:4b:eb:c7:7a:6c:3f:d8:8a:d7:
58:38:d1:b2:c2:fc:3f:95:77:f4:6b:ff:ac:87:54:
6f:9a:de:a5:20:9c:45:4e:4c:43:66:4e:15:91:c7:
aa:88:37:ae:03:ab:6d:4b:29:7c:52:a8:36:23:51:
a9:7e:af:10:91:31:89:6b:55:6c:76:59:c8:d2:9b:
47:70:0d:b8:4a:cc:1b:9c:08:11:fc:19:90:50:7b:
ac:26:62:a9:80:56:d2:7f:a6:0f:a8:23:fc:40:b9:
84:03:15:93:9b:8e:dc:21:9d:f8:8b:a9:58:94:66:
50:d0:3a:9a:d6:b2:76:75:bd:18:c5:65:5e:7d:1b:
34:29:ea:b4:7e:c1:7a:37:d3:b2:00:6b:77:55:aa:
78:fb:fa:05:8a:41:c3:0a:f5:a8:59:ce:8d:4d:70:
60:c1:94:fb:e5:8b:b4:56:e2:a0:be:db:ed:fd:9d:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:1F:65:1E:AA:77:1B:70:05:1B:F2:DE:75:0B:65:8F:69:25:01
X509v3 Authority Key Identifier:
keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:17:9b:26:c7:02:7a:1f:59:5a:a4:8a:d2:03:04:c7:53:
2d:a5:ea:48:7e:ee:22:07:8d:f6:46:42:8b:44:6c:45:f9:60:
90:1e:15:96:64:94:23:3c:3c:04:09:63:50:4c:d6:b5:88:1d:
f8:22:f4:67:6b:15:4d:de:6f:32:bb:e6:5e:90:49:99:0d:f6:
1e:94:c7:70:fa:01:a2:34:b7:36:25:ea:f5:29:cb:66:19:68:
e3:89:53:18:73:56:12:ea:86:aa:16:73:58:18:ee:91:01:68:
ed:34:24:88:41:b5:e1:0e:2d:f9:8a:24:d0:9d:16:c5:3f:6b:
b5:53:da:7b:4f:10:a1:a7:7a:c2:1b:e5:e4:a7:c0:53:3a:08:
24:fb:60:a7:da:03:50:47:57:6b:8d:d9:50:1a:5a:c0:03:a6:
77:13:27:85:c9:ce:ac:57:b5:d2:a8:95:40:e1:fc:30:30:da:
47:d0:66:e3:4a:e7:78:2b:7f:dd:f1:3a:26:fd:5f:e7:da:e8:
2c:d0:74:30:4c:c0:a4:b5:f4:ed:64:a4:4e:67:fc:90:f8:2c:
a9:7a:f7:5d:4a:9d:03:af:ea:23:9d:40:c9:e4:16:71:5b:55:
5d:b5:63:89:bf:ad:4d:18:ff:f2:f4:09:37:b0:c7:d0:8c:3a:
4e:8c:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:35 2026 by rpki-client