
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json)
Hash identifier: oy5c0Cll9fMtWZlxPy/dmf5Z9NGZ9rX+YexSPJXhkCM=
Subject key identifier: 83:0C:D6:CA:F8:66:E4:47:62:4C:D9:84:1E:4B:49:C0:09:0C:B9:F7
Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B
Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
Certificate serial: 052E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
Manifest number: 0528
Signing time: Thu 16 Apr 2026 23:28:22 +0000
Manifest this update: Thu 16 Apr 2026 23:28:22 +0000
Manifest next update: Thu 23 Apr 2026 23:28:22 +0000
Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: bMB71QC6SC8f3MxXWdiN9+ml0pwCRiR13Sf5BFHYzIk=)
2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: 2zZp2EZnjPU7rSqrkWIEvs8kVJLdfQr1KOxHb8prK6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl
rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
Validity
Not Before: Apr 16 23:28:22 2026 GMT
Not After : Apr 23 23:28:22 2026 GMT
Subject: CN=69e17096-1af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:42:00:0b:97:ef:88:06:3c:40:dd:8c:03:
9b:f3:6c:a3:f9:c9:25:c1:ea:1f:d3:e9:3a:52:19:
0a:59:03:58:ed:77:65:e3:14:59:82:20:d8:70:4d:
e8:ab:8b:46:16:d4:a7:33:e7:c4:ac:17:8e:3e:a5:
21:fc:03:4e:3f:96:f7:cc:97:03:2f:52:5b:87:77:
62:a0:ce:76:93:a1:75:94:04:8d:17:52:60:87:ee:
59:1b:dc:c9:0c:10:ff:8f:6e:ff:a8:0c:24:0e:ef:
4b:73:9e:d3:51:3d:16:f5:fe:a1:00:ef:3f:25:50:
15:ce:1f:78:ca:18:df:d9:fc:3a:26:79:ce:39:dd:
83:37:ce:17:16:52:62:9e:19:95:13:72:94:b9:28:
75:55:69:65:74:1e:59:aa:48:9a:0d:c9:9d:25:01:
a0:48:04:85:eb:db:f2:39:77:b5:1b:19:cd:23:a2:
14:78:a1:12:7f:c5:80:ac:44:5f:d3:c3:0c:eb:76:
df:d0:d5:74:de:ca:ea:7a:63:fd:1b:fd:82:a4:0a:
9b:10:4b:27:52:35:6e:0c:57:46:1f:b5:14:f1:d6:
23:26:89:cb:b2:b7:20:4f:a6:ea:06:82:00:ac:6d:
96:c8:d9:66:a0:fd:c7:9e:09:a0:2e:ef:88:e3:f8:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0C:D6:CA:F8:66:E4:47:62:4C:D9:84:1E:4B:49:C0:09:0C:B9:F7
X509v3 Authority Key Identifier:
keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:42:c4:a3:79:66:c8:d4:78:93:bb:3e:81:0f:6a:fb:71:9c:
94:99:7c:a8:bd:94:84:3d:cc:0d:52:60:81:e2:df:fd:2c:e2:
fc:d9:18:d0:a4:a1:38:d2:f7:ba:ef:3d:af:d7:e4:da:6d:bd:
ab:cf:46:fc:66:7a:a3:b6:df:f2:fe:2b:9d:55:2d:8a:84:39:
7b:d4:59:1b:d4:95:25:17:75:3d:ab:05:e1:04:50:cf:dd:9c:
74:7f:25:0c:bd:45:f2:17:16:c2:3f:92:ac:d7:fb:8d:30:dc:
c4:1c:ab:2a:68:11:4b:ee:b6:84:5d:c1:2e:aa:8a:da:3c:c6:
c2:32:b6:1f:90:b7:0e:a5:72:21:74:db:3c:10:d5:1e:bc:7a:
12:ad:b8:55:7d:9e:a9:8b:e4:56:e7:cd:37:f1:78:6f:09:25:
54:ed:52:03:c7:18:36:61:db:47:c6:40:4f:42:6e:7a:7b:cb:
44:4f:32:5a:59:17:3c:af:0d:6f:90:18:67:7d:f4:73:50:7c:
eb:7e:fe:0b:af:34:24:af:a8:3b:ff:1a:e9:83:82:7c:08:7c:
e9:21:e2:21:98:98:6a:eb:c3:27:44:9c:b9:c0:d3:89:50:eb:
8e:7e:5d:0a:49:78:af:91:a3:9d:33:bd:81:8c:40:64:8a:4d:
fc:d3:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:01 2026 by rpki-client