
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json)
Hash identifier: J5aS0spb1msn3vzxT65ETJ6gauZXeqJ705WE8xd9pVI=
Subject key identifier: C3:47:6F:89:ED:98:7B:21:91:59:EA:D2:BF:E0:EB:4E:26:4E:76:96
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
Manifest number: 0B3C
Signing time: Fri 12 Jun 2026 19:16:25 +0000
Manifest this update: Fri 12 Jun 2026 19:16:25 +0000
Manifest next update: Fri 19 Jun 2026 19:16:25 +0000
Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: 3zRXxLLwYlQggLoEwIUfDpDnwBiVKetpgxsj2jfTrXU=)
2: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: gULvTolTuEQQ8V1CNmUYM1da4itNfnCs1HnngbZhPLc=)
3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: t8HfITWMiY77C/57T/c++ATVS/SPRcZB8peHOJW/N/M=)
4: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: AbgBtupL6oOugUr9CWAY/Qjm4Xwk2lURBbagBtXRmQE=)
5: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: WHnFAG70JawqBzlnEo6WtvfDMead1qbEaY3qu5N7lXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Validity
Not Before: Jun 12 19:16:25 2026 GMT
Not After : Jun 19 19:16:25 2026 GMT
Subject: CN=6a2c5b09-589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:83:3f:6a:58:5c:4b:57:9d:a0:e9:63:92:
6a:98:e0:50:d1:37:a5:a3:37:d4:f5:9e:22:90:91:
a0:2f:c7:fc:46:b0:ae:29:3a:22:c6:02:6f:cf:43:
73:41:c0:b4:20:c0:5f:68:6f:a9:b7:82:90:f3:7d:
61:3c:e0:99:d9:15:57:cf:52:99:05:fb:34:77:8d:
49:48:a5:de:74:18:e0:bf:1f:13:a7:d4:f4:ae:b9:
9f:e6:f3:8f:f3:a5:05:7e:ad:a5:13:73:f6:dc:28:
71:5d:f0:18:cc:48:28:f7:44:a5:4f:fd:03:83:5b:
a3:dd:de:05:34:79:47:8c:1c:69:74:1e:d5:e7:6e:
11:71:0c:72:bc:9e:df:78:3c:2f:fb:f6:11:07:bc:
f8:25:fb:fb:c3:9b:98:3f:7c:75:31:6e:40:31:f6:
a0:cb:a0:3d:49:9e:70:d8:bc:42:93:4a:25:37:71:
7d:41:88:8f:2c:bc:20:94:a2:15:dd:cc:66:5b:62:
53:0e:39:e6:38:35:cf:2d:2e:18:4d:b9:79:db:bc:
52:88:7d:78:1a:3a:8b:c2:6a:c3:9a:ba:6a:71:db:
54:fb:8c:53:67:ca:15:bc:71:36:7a:ce:88:9e:4e:
95:49:da:09:d3:a7:ac:b7:a9:ca:6f:c1:e5:94:21:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:6F:89:ED:98:7B:21:91:59:EA:D2:BF:E0:EB:4E:26:4E:76:96
X509v3 Authority Key Identifier:
keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:63:11:82:1e:ef:5e:26:17:c0:76:8c:c8:16:7f:d9:83:a3:
d9:9a:08:b9:7d:4f:9f:e1:2a:12:ac:fe:17:a6:74:46:e9:13:
f2:d6:f6:e0:14:7c:ea:18:22:10:e1:55:c4:4b:b1:de:fc:52:
d6:c8:b2:9c:76:dc:8e:10:a4:ff:62:22:71:ca:fd:c6:1c:49:
d7:df:9d:1d:c5:af:4b:23:5a:e0:13:80:05:28:52:48:d2:84:
db:90:df:d3:92:17:d8:66:14:eb:b5:d0:09:91:8d:a0:f4:2e:
95:71:dc:61:2e:d4:a1:f7:42:d5:5a:8e:ea:3a:a1:ff:49:b2:
56:42:a8:38:52:2b:92:8c:4e:56:a4:e8:ca:33:4e:5a:7f:ef:
ea:9b:b8:ba:22:9d:ea:08:68:82:67:3a:1a:3c:c1:40:ce:9b:
ec:05:ea:47:0a:cd:65:64:f0:19:59:70:d7:d8:5b:ae:c7:6e:
45:f6:df:2f:0f:4c:59:db:8e:b9:03:5a:e9:19:49:63:cb:39:
dd:4c:e4:0a:e4:e4:de:17:cb:d3:09:f4:05:1a:62:82:fb:87:
65:29:d1:8a:89:b3:39:b0:85:17:ff:c5:05:5a:86:d5:e3:f7:
5e:64:75:22:64:c4:06:16:3c:d6:34:30:1b:69:e9:8e:5f:3d:
eb:ed:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:49 2026 by rpki-client