
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier: Nxwc+48lA10Jj7K7VF0t4X9ITwiUVufsPbfqC/WHSNA=
Subject key identifier: F4:DA:62:A1:F6:E8:89:E6:FA:A0:56:66:DE:E9:E0:7D:14:B2:B8:D0
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number: 0219
Signing time: Fri 25 Sep 2026 02:59:57 +0000
Manifest this update: Fri 25 Sep 2026 02:59:56 +0000
Manifest next update: Fri 02 Oct 2026 02:59:56 +0000
Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: /GDYRcpNkxVpeT305rWfbiRTTd9H00b81hXJ/vsMTAA=)
2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: LSGqnHSpVE6t1VnR1CP7MXHTDo/gjQidyC59lrbruAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Validity
Not Before: Sep 25 02:59:56 2026 GMT
Not After : Oct 2 02:59:56 2026 GMT
Subject: CN=6ab5e3ac-8517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:6f:74:04:15:87:2a:e7:c7:fb:cd:6b:4c:
7b:4a:7e:51:e6:68:ca:4b:36:df:ec:7c:2f:7c:92:
74:c5:11:5d:56:05:92:a8:5f:ee:d3:62:bb:20:eb:
7a:a8:1e:16:43:55:2b:a1:5b:df:25:76:fd:2f:9a:
a6:a6:ec:f2:bd:25:75:4d:4c:70:f1:e8:42:3b:d5:
04:4b:2f:d8:b0:78:32:ee:90:50:5a:57:b9:3d:f8:
a4:7f:8c:54:d6:21:48:d2:5a:92:48:27:26:40:9e:
9c:ca:29:86:c7:09:e5:2f:4b:a8:8b:70:74:c1:00:
74:ad:ed:5d:cd:20:91:54:b6:20:a7:57:77:76:ae:
be:31:8d:4d:62:78:f4:24:1a:23:5c:05:f0:12:25:
83:11:81:d7:9e:2b:a9:97:91:18:da:12:14:ba:b0:
ed:92:5a:cd:d1:d6:0b:ec:ee:7a:24:a4:89:38:00:
63:a4:f1:df:8b:58:e9:2e:64:77:37:74:3a:79:a6:
82:2b:7e:26:23:25:7e:4e:7c:86:23:a5:76:f4:9c:
c4:31:40:44:0d:f7:78:a1:27:7e:43:d9:74:78:f2:
bb:c2:3d:d3:16:14:32:7e:5e:37:29:a7:eb:d7:b0:
32:36:db:f5:1f:eb:80:ba:a5:cb:05:4d:b0:05:3e:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:62:A1:F6:E8:89:E6:FA:A0:56:66:DE:E9:E0:7D:14:B2:B8:D0
X509v3 Authority Key Identifier:
keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:de:4e:94:e7:37:d5:1f:00:a6:4f:dc:ca:dd:16:26:c6:
ef:ae:5f:46:da:54:4b:9d:70:01:e8:fe:2b:06:3f:34:f3:4b:
ed:45:3c:50:ea:f4:1f:db:46:83:47:f4:d7:93:11:e8:db:b9:
82:ab:97:df:54:86:19:90:d3:7a:72:4c:b6:25:57:d2:5b:ed:
e3:14:1e:cc:6e:83:14:78:87:4a:46:bd:95:c0:14:11:ab:f6:
92:fa:c9:7f:16:35:45:38:91:bb:35:26:8f:05:ab:b6:a6:42:
48:37:ca:57:e6:e9:6b:bb:a2:50:fa:8a:77:fd:5c:aa:08:d8:
4e:c3:35:e9:ab:ba:8b:f6:68:be:9f:fb:76:39:34:69:4d:cd:
6d:e6:9d:eb:c5:dd:7b:c6:06:a2:8e:a5:0a:d3:07:8c:f9:c3:
83:94:d6:bb:18:9a:a7:bf:f2:78:2c:83:80:0b:87:d5:c7:02:
e4:2b:4e:80:fc:37:f7:9b:56:58:88:ca:e6:54:66:3d:b3:b6:
f7:ca:c4:a9:65:be:bb:11:ab:4f:a5:3a:1d:aa:1c:60:ed:25:
61:d7:f3:6e:5c:6e:03:1d:3f:19:66:3b:86:e2:73:80:5c:39:
f0:4d:00:ee:10:d2:36:4a:d1:6a:5d:52:bb:c5:ee:4a:24:ff:
f9:b2:43:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:26:25 2026 by rpki-client