
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier: Y7NMamGJnT+HW+ceggxcwlVInhH7ryL4e1lzaYqlX4Q=
Subject key identifier: DE:7E:B4:57:1E:C7:A1:37:1C:9B:20:14:5E:9C:9E:44:44:FB:25:F4
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number: BB
Signing time: Fri 17 Apr 2026 04:08:18 +0000
Manifest this update: Fri 17 Apr 2026 04:08:17 +0000
Manifest next update: Fri 24 Apr 2026 04:08:17 +0000
Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: gB8GiZG9Aby3J5+GdOrRrosHE+lb/lC2z4Q7pTdETmk=)
2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: OU+mhLZle+EP1xDm2dufdCPvv2y3/vJOiy9NfS4fNUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Validity
Not Before: Apr 17 04:08:17 2026 GMT
Not After : Apr 24 04:08:17 2026 GMT
Subject: CN=69e1b232-54e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:99:11:a0:5a:74:ce:43:da:0f:fc:7d:6c:
89:ff:6d:e4:80:64:e1:8f:de:06:c6:d3:13:aa:c2:
6f:ba:a5:0e:da:94:15:03:52:1e:77:09:da:0f:f0:
2a:2b:74:e4:dc:22:53:ca:7c:c6:66:6b:19:c5:5c:
6b:85:49:55:11:30:9c:91:0c:91:5b:c8:1e:5e:43:
f2:d0:c3:5c:ec:ab:c6:af:84:a2:cd:d8:d9:2b:bb:
65:22:84:80:ed:78:b8:cd:10:09:f8:7d:e4:c4:ee:
17:5d:13:4a:e2:5a:65:76:59:b3:d4:e3:fa:33:7a:
62:f0:ed:c2:ae:b5:2a:22:5c:3c:03:26:dc:62:34:
f6:a8:c7:34:9b:b1:61:0b:55:81:6c:49:70:99:a4:
59:7d:2e:68:e5:3f:83:e4:d4:05:ba:e8:e2:b6:0e:
9b:26:f4:d7:e2:a8:c3:28:38:93:94:0f:af:86:51:
7d:f3:c6:d3:2b:b6:d1:6d:52:b2:95:b4:8c:4f:b8:
95:00:04:a3:7f:90:a1:37:4d:35:18:46:b9:16:8f:
d4:60:68:52:03:80:da:45:98:e0:3e:03:35:23:93:
fc:3a:ea:17:34:90:f9:27:37:e7:90:26:92:78:35:
28:7c:f3:38:59:78:61:b7:a2:36:95:ef:10:15:7c:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:B4:57:1E:C7:A1:37:1C:9B:20:14:5E:9C:9E:44:44:FB:25:F4
X509v3 Authority Key Identifier:
keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:32:36:a5:8c:17:af:a4:75:f1:df:de:71:b1:76:6b:21:58:
fa:de:69:33:3c:c4:d8:e8:90:e9:c7:23:b3:ac:c5:e3:e9:4d:
77:5a:fa:c0:00:a4:1f:e9:37:86:39:d3:e9:2a:e9:1c:96:c3:
05:4b:51:0f:8e:c9:b2:69:24:aa:03:b7:49:d5:82:9a:f9:66:
8b:a0:37:79:e0:cb:b8:8b:83:08:98:2d:6a:0b:62:62:f7:39:
29:2e:18:6f:7b:85:5c:27:f2:73:ad:8b:2f:93:80:b5:e3:45:
ab:75:e1:1f:4f:9b:34:6d:03:01:81:6e:84:3e:8c:08:73:0a:
b6:59:47:b8:7b:0c:37:5b:9d:70:0f:3c:7e:eb:04:ca:8b:13:
bb:14:23:a7:8a:fb:3f:98:66:b9:31:53:65:d2:d5:7f:d1:02:
b0:52:f1:5e:bd:4e:ac:7e:9a:6d:bb:f0:1c:98:c1:26:8b:24:
3e:33:61:aa:3f:24:19:e3:0a:1a:b2:27:a9:ce:54:02:68:dd:
13:1e:b3:57:c9:db:07:a8:37:3f:85:b6:ac:10:68:71:37:cb:
ed:4c:74:0c:0b:dd:5b:97:ae:23:fc:49:22:05:dd:26:9a:53:
07:0c:a2:d9:5c:2a:43:f1:3c:5d:2c:dc:0d:45:10:e1:13:d1:
da:9d:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:07 2026 by rpki-client