
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier: MyXfLh/YwA6VxD7/Kn6+ZA6EvcKMkzApErzThIhf/YE=
Subject key identifier: 8C:27:3C:93:6C:BF:93:44:F5:17:A5:F2:EE:19:D6:CA:70:CE:74:2A
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number: A1
Signing time: Sun 01 Mar 2026 05:41:48 +0000
Manifest this update: Sun 01 Mar 2026 05:41:47 +0000
Manifest next update: Sun 08 Mar 2026 05:41:47 +0000
Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: Id4XPJYxVpV6yKGey6HHJx8Xkd4qjd4wDK1fr3jPrLA=)
2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: b16d+2kTdbON2ixe1jCa6GapHvNF5ngdixgV1f1xSyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Validity
Not Before: Mar 1 05:41:47 2026 GMT
Not After : Mar 8 05:41:47 2026 GMT
Subject: CN=69a3d19c-556d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:bd:ca:c5:c1:0a:bc:ac:a4:9e:51:a2:a2:
21:be:e0:99:d2:22:aa:c5:db:a1:83:ab:be:0d:c2:
0a:89:f8:9e:0a:47:37:d2:65:65:a6:4f:27:e3:96:
71:45:34:bb:fb:cc:08:04:9e:4f:55:87:9a:ec:79:
5e:5e:a0:4c:27:ed:45:ed:85:79:50:97:af:ce:75:
90:36:7a:2f:a2:82:6f:8d:4d:c0:83:2e:41:16:03:
0e:09:e8:fd:aa:e3:d0:71:f4:c3:f7:de:83:b6:7a:
54:11:8f:19:16:34:08:3c:b8:e8:0c:1f:2d:ee:09:
1b:12:5a:d4:0b:ed:0c:f7:22:89:30:78:c5:17:ca:
a5:15:6c:ab:cf:d7:84:14:fb:91:ff:1c:ae:35:41:
e3:c8:2c:ab:d5:69:74:0d:20:85:6d:b9:60:ce:33:
31:61:65:28:66:8f:23:42:82:e2:61:45:59:2d:9d:
a9:00:cc:ad:f3:8c:06:97:7e:1d:9c:32:73:c6:32:
2e:66:bb:2b:11:b0:cc:ff:c4:6a:1b:f1:b9:37:fb:
f9:36:20:2b:07:17:c7:d7:88:18:57:34:ca:89:ce:
4d:9e:56:41:59:3f:67:fc:08:e6:a3:c2:b2:c7:24:
8e:66:50:9b:55:42:a7:18:82:83:16:2e:b2:36:48:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:3C:93:6C:BF:93:44:F5:17:A5:F2:EE:19:D6:CA:70:CE:74:2A
X509v3 Authority Key Identifier:
keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c9:3c:27:4e:3a:cf:1d:58:4d:b0:a3:06:4e:e1:77:69:94:
45:cc:6b:76:9b:f8:71:3d:ff:0d:97:34:32:bc:50:68:40:d8:
27:37:98:f9:58:3f:ff:31:1f:54:35:39:d9:51:04:cb:18:65:
1a:17:cc:5a:63:b3:65:40:2d:01:57:4f:d4:24:ce:1c:37:5f:
46:e4:e9:b0:c4:e4:8c:26:2e:05:05:4d:8d:d6:01:9f:65:60:
d9:b8:51:99:66:c7:a8:65:15:6f:f5:f5:38:7e:60:05:01:65:
d8:96:97:3e:58:a2:8e:2e:f1:90:51:69:71:45:0a:22:a7:90:
9b:35:e0:a5:50:67:46:b1:df:fa:35:8e:1f:be:a3:a5:fc:5a:
86:5f:23:97:eb:18:31:77:3a:b4:86:0d:04:29:5b:60:9d:ea:
b4:6e:73:8f:84:e5:9f:f3:fd:f7:4a:a5:e5:63:41:a0:49:7c:
93:62:9c:53:0d:d3:34:25:c9:4f:d0:a6:ef:51:82:f1:01:a8:
37:7d:a1:e8:07:0e:9e:3f:46:c4:d0:af:2f:ea:e3:42:08:08:
a9:cb:94:d3:ff:64:ab:09:0e:41:dc:fb:53:1f:40:dd:ac:cc:
a5:c7:41:5e:62:ce:17:f0:e5:a8:06:ab:de:45:2f:c0:3d:29:
96:02:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:31 2026 by rpki-client