
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier: lk7Ea8S/8ghZE0KsYn/tT6moJMpX2VBpBI5p+T3crhY=
Subject key identifier: 7D:4E:BD:0F:A8:8F:5D:BA:77:DE:18:39:11:A7:04:3C:01:9E:2A:A4
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number: 01B8
Signing time: Fri 17 Apr 2026 03:42:40 +0000
Manifest this update: Fri 17 Apr 2026 03:42:40 +0000
Manifest next update: Fri 24 Apr 2026 03:42:40 +0000
Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: jxGiWJH1FWr7uIlPVNlsRgZlny5Elyn56aP+SEE7Eu8=)
2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Validity
Not Before: Apr 17 03:42:40 2026 GMT
Not After : Apr 24 03:42:40 2026 GMT
Subject: CN=69e1ac30-7413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:a4:d9:32:e4:28:5d:75:50:c4:04:58:61:
79:b0:3b:36:27:16:0c:26:55:29:b4:67:bc:ac:34:
33:b4:2f:2d:b5:e7:23:99:2f:c8:2f:5a:01:6c:a6:
31:b7:0d:5f:08:65:34:a2:8d:2f:28:27:d7:2c:ba:
1a:0e:10:3b:d5:a3:fb:69:ec:1c:fa:e4:43:60:d7:
42:08:2c:ab:30:48:dd:33:c0:05:f9:5d:78:ea:39:
76:84:30:34:a7:ba:00:36:cc:53:fa:6a:be:06:f7:
46:8f:ef:e1:51:3f:a4:9c:43:cb:e5:57:03:fc:84:
cb:00:f5:55:a1:30:06:90:b7:29:88:0f:d2:80:1c:
64:44:1b:73:4d:0b:42:12:cc:bc:a4:fa:a0:73:d5:
5b:78:89:fa:44:bc:58:54:a8:28:0c:68:bd:e5:c1:
fe:8b:c4:4c:90:a4:37:2c:7a:a0:a3:8b:55:d4:c6:
6f:02:2e:b1:a4:14:78:82:39:53:f0:b0:48:fa:24:
fb:c5:b2:a8:df:ff:d0:5e:79:ca:6a:c5:ff:be:cb:
b3:ef:4d:8a:74:31:ef:57:b5:0c:e0:ad:08:0b:a9:
f3:63:13:cd:b2:d8:43:c5:e8:70:4d:5f:74:57:38:
68:6f:ec:d3:4a:73:b9:d9:7c:9e:42:b5:ad:37:f0:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:BD:0F:A8:8F:5D:BA:77:DE:18:39:11:A7:04:3C:01:9E:2A:A4
X509v3 Authority Key Identifier:
keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e4:cb:6e:e3:59:22:f1:a4:b0:c8:3b:7a:74:28:4e:18:80:
af:dd:26:61:75:e1:5b:83:04:f1:48:4c:7f:36:30:fb:ee:ab:
ea:85:79:c7:3b:dc:ec:d8:0b:c4:fb:8c:e4:43:eb:36:30:8b:
1f:64:a9:6f:20:00:95:a6:f0:aa:08:16:3b:1c:f3:03:a1:5e:
a6:1d:ba:e7:8f:96:5f:41:91:26:fd:b5:a7:29:df:82:7f:33:
7b:b3:ad:f7:e5:87:e7:02:6e:8c:a2:37:68:cb:1c:ae:1b:f0:
f9:76:87:f7:05:9c:6f:60:65:b5:3e:ba:b9:6d:6b:08:c4:6d:
a5:36:eb:7d:28:85:f5:4f:94:1c:29:a5:42:9f:fa:1b:2d:95:
54:c2:ca:87:1e:56:c9:72:9c:72:cd:e5:ee:13:5a:ef:78:c6:
9c:b9:b3:c8:39:fe:ed:bb:70:7f:75:5f:ee:f7:75:f5:d4:67:
65:fc:4e:57:3a:f8:b5:54:af:8b:5d:f9:a0:46:2f:7b:64:f0:
b0:e1:5d:92:d6:d9:4c:04:16:4b:d5:05:eb:5e:04:c8:b9:a1:
7d:a6:31:b5:0b:4b:38:9b:b8:a5:1b:20:a6:0b:bd:20:06:e1:
7c:eb:68:8b:7a:c0:b4:17:15:23:45:66:57:52:b8:35:b8:eb:
48:ca:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:05 2026 by rpki-client