
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: C//WfEv3S9X5ebO3kpoAcuayCCIjfWWip7ZF7WYeC+4=
Subject key identifier: FF:54:EB:4E:13:03:1B:34:FD:A7:42:FE:72:F4:D8:1A:62:74:CF:2B
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 0257
Signing time: Sun 01 Mar 2026 23:09:55 +0000
Manifest this update: Sun 01 Mar 2026 23:09:55 +0000
Manifest next update: Sun 08 Mar 2026 23:09:55 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 8Ccmv7Zfpq8IynkqOptfW3d++xyf6umC83BfVcc8rEY=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Mar 1 23:09:55 2026 GMT
Not After : Mar 8 23:09:55 2026 GMT
Subject: CN=69a4c743-d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:a0:2a:af:6f:0b:3a:58:20:e4:85:98:f5:
d7:18:4c:77:1d:a8:92:06:71:2a:22:3e:c8:9c:ab:
1b:5a:c1:95:9b:4d:76:a7:82:56:35:cb:eb:04:5a:
6d:08:81:52:fc:19:4a:16:a4:fa:5d:0c:fb:f3:f6:
66:3e:53:cb:d2:e6:fe:3a:2e:4f:e1:ec:c3:8f:09:
dd:b6:af:c1:14:98:49:82:9d:ef:b2:eb:cd:b3:c2:
15:be:76:f7:37:58:e6:70:63:22:1c:63:d2:f2:22:
66:24:f0:f5:f0:41:78:a8:32:d2:5a:ca:34:a8:f7:
52:63:45:5a:e7:8f:12:53:70:fa:53:6b:4c:bd:4d:
ea:af:b9:65:f3:b0:ab:e3:e6:f1:0b:4c:0c:c9:7c:
5c:44:9d:c8:de:48:bb:c4:26:73:0d:0f:43:90:ef:
6b:3a:96:0b:6a:fd:fc:3f:5a:7d:06:46:49:2d:b8:
ff:35:d8:00:34:d0:e4:39:20:ac:93:01:d5:dc:cb:
f1:7c:a3:35:95:26:fb:8b:00:38:0d:ca:f0:2a:87:
0a:2e:81:1b:ed:aa:e1:0f:a6:f0:5b:04:f5:5c:2e:
cf:b6:4e:de:e9:36:b4:8b:76:a3:34:44:d6:72:ef:
3f:ee:fe:43:72:e8:d0:12:13:8f:22:13:83:59:16:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:EB:4E:13:03:1B:34:FD:A7:42:FE:72:F4:D8:1A:62:74:CF:2B
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:61:44:fb:17:26:fd:d1:03:58:b5:b2:6d:f5:58:1d:e6:99:
74:b9:6d:f6:d9:f5:42:ed:9f:bd:d2:83:51:ca:62:e9:76:1a:
b8:0d:13:aa:3d:b6:a2:59:e1:c4:60:01:bf:cc:8b:bf:4e:93:
4b:d8:75:0e:c7:65:3a:fc:78:87:d2:4b:5b:17:0a:06:26:3d:
71:44:0c:11:82:7d:49:8d:26:a7:25:5b:dd:35:9c:7d:e0:d3:
56:eb:da:76:2a:19:71:71:75:ea:47:ca:54:de:a9:6d:33:14:
cc:cd:02:48:6e:0a:06:ce:96:3a:2f:8e:69:88:43:26:34:fb:
68:91:34:43:c4:b3:db:44:f5:79:5a:58:a9:a9:8e:71:f3:58:
17:fd:2a:89:67:11:e5:47:7c:d6:4d:52:0e:f5:18:31:17:4e:
87:23:94:4a:e0:d5:cb:00:c0:8d:d1:8a:eb:80:8a:64:cc:b4:
f3:2d:4e:df:1c:b0:d6:5e:26:c7:1f:fb:e4:a5:76:47:c6:71:
b0:45:6a:8c:91:0f:45:1e:8d:f8:f2:a7:87:54:62:b5:29:ef:
db:44:81:af:da:5f:d3:32:ad:b4:d6:b2:d9:1b:9f:70:fc:eb:
22:15:7b:c6:e7:95:13:48:e9:7b:a8:a3:0c:a6:80:45:4d:54:
70:8c:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:29 2026 by rpki-client