
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier: u/LkRV2SKzUmwPsKDUl4pGi+HCU9/9RfHK3cM5G6Qac=
Subject key identifier: 62:60:4E:97:E4:89:D6:31:B3:80:21:89:24:F5:04:E4:6E:44:BD:91
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number: 0207
Signing time: Mon 21 Sep 2026 03:09:38 +0000
Manifest this update: Mon 21 Sep 2026 03:09:38 +0000
Manifest next update: Mon 28 Sep 2026 03:09:38 +0000
Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: MgAgk21eMurWTj9d8p9ER7gSUXoR57naAAi3T2h/bOw=)
2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Validity
Not Before: Sep 21 03:09:38 2026 GMT
Not After : Sep 28 03:09:38 2026 GMT
Subject: CN=6ab09ff2-9390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:5b:eb:b6:4f:bc:13:ce:c7:8f:51:dd:95:
47:dc:c1:48:24:85:10:08:00:56:1e:9d:d4:a7:1b:
ed:d9:fa:56:41:99:34:91:48:4b:03:f2:7a:a2:2f:
7f:8d:26:fc:e9:ee:4b:d2:46:9c:c7:6a:ef:3d:fd:
e4:7f:12:ec:27:77:ea:2e:7e:aa:5f:1b:b4:6b:1d:
17:12:85:9e:7d:93:82:c0:16:ba:a8:eb:73:ae:c4:
02:6f:37:22:d4:e6:ac:f7:b7:69:dc:67:7c:9a:dc:
4a:f4:f3:e2:9f:25:98:64:1b:f0:28:bd:7d:b5:59:
97:98:74:87:32:34:ad:f1:5f:bc:cf:c6:7e:c7:a3:
a9:63:a4:74:ab:06:eb:21:8a:e1:5d:ec:15:fa:71:
84:79:52:17:cf:bc:a2:6d:73:8f:ad:ce:15:bf:d3:
82:b3:7f:7a:6c:da:5e:29:d4:59:cb:0d:0f:a1:54:
98:4b:1f:a8:49:b4:8e:3a:b6:22:d4:1b:0f:ac:e0:
c0:b1:c2:dd:b2:c6:db:a9:55:7b:f6:18:a4:35:5f:
d7:67:a8:80:65:e7:59:71:be:11:a8:10:83:51:f0:
dc:c0:fa:f1:6d:5a:95:39:40:8b:43:40:17:9e:fe:
27:57:44:85:84:ad:ad:fb:9a:ed:f0:ae:4f:92:bf:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:4E:97:E4:89:D6:31:B3:80:21:89:24:F5:04:E4:6E:44:BD:91
X509v3 Authority Key Identifier:
keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:da:8b:e9:ca:4c:f9:28:c4:e5:da:54:ab:64:8e:2a:d2:34:
48:53:4e:af:c4:24:a3:51:8f:14:ac:0f:69:f9:ef:54:13:51:
78:3f:31:76:35:1c:68:fe:68:61:cf:14:0b:87:e5:f7:53:6f:
5b:f5:e0:d4:a9:4a:c0:75:93:6e:7f:24:8e:83:95:93:df:a2:
5a:c9:85:2e:4b:23:47:3b:77:5f:3e:3d:0c:9f:d5:13:60:bb:
48:48:3e:51:63:a1:6b:13:0f:8f:5e:82:4e:d7:70:d7:45:cb:
1a:e2:bc:15:4d:b5:c1:95:b2:84:8d:66:78:6e:1e:23:94:07:
34:b0:42:e6:0b:a4:be:ee:99:eb:c0:45:b7:f1:20:19:68:e6:
d2:df:8e:21:8c:70:ad:87:69:aa:31:b8:e4:3b:d7:b7:c6:e0:
f5:7e:cf:48:12:aa:f3:15:9b:38:72:fa:b2:9b:26:d9:d8:5c:
21:b4:09:b3:8d:28:f9:c5:47:69:94:bb:0d:30:dd:41:f6:7f:
1a:6b:3c:de:6c:c8:20:7b:d2:82:eb:00:27:70:eb:18:3d:29:
fe:a1:17:0c:ea:cd:c4:4c:b8:c6:70:85:b8:de:88:37:41:fc:
ea:97:7f:4b:91:4b:8c:83:7e:50:b1:17:22:1d:f1:fd:89:00:
40:fc:14:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3
MjhGOTVDRjUwHhcNMjYwOTIxMDMwOTM4WhcNMjYwOTI4MDMwOTM4WjAYMRYwFAYD
VQQDEw02YWIwOWZmMi05MzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTZb67ZPvBPOx49R3ZVH3MFIJIUQCABWHp3Upxvt2fpWQZk0kUhLA/J6oi9/
jSb86e5L0kacx2rvPf3kfxLsJ3fqLn6qXxu0ax0XEoWefZOCwBa6qOtzrsQCbzci
1Oas97dp3Gd8mtxK9PPinyWYZBvwKL19tVmXmHSHMjSt8V+8z8Z+x6OpY6R0qwbr
IYrhXewV+nGEeVIXz7yibXOPrc4Vv9OCs396bNpeKdRZyw0PoVSYSx+oSbSOOrYi
1BsPrODAscLdssbbqVV79hikNV/XZ6iAZedZcb4RqBCDUfDcwPrxbVqVOUCLQ0AX
nv4nV0SFhK2t+5rt8K5Pkr/BaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJgTpfk
idYxs4AhiST1BORuRL2RMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy
RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i
TlI0ZFFsYXRBclp5ajVYUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvNqL6cpM+SjE5dpUq2SOKtI0SFNOr8Qko1GPFKwPafnvVBNReD8xdjUcaP5o
Yc8UC4fl91NvW/Xg1KlKwHWTbn8kjoOVk9+iWsmFLksjRzt3Xz49DJ/VE2C7SEg+
UWOhaxMPj16CTtdw10XLGuK8FU21wZWyhI1meG4eI5QHNLBC5gukvu6Z68BFt/Eg
GWjm0t+OIYxwrYdpqjG45DvXt8bg9X7PSBKq8xWbOHL6spsm2dhcIbQJs40o+cVH
aZS7DTDdQfZ/Gms83mzIIHvSgusAJ3DrGD0p/qEXDOrNxEy4xnCFuN6IN0H86pd/
S5FLjIN+ULEXIh3x/YkAQPwUfA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:25:07 2026 by rpki-client