
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json)
Hash identifier: DOFTgeYhL2vYBwG3HBYLxa3K9L9l97GRqThAYUwBP7M=
Subject key identifier: E1:89:8D:4A:4B:5E:34:61:81:BA:BE:C0:00:D0:9E:BB:7D:C0:E4:4A
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
Manifest number: 011E
Signing time: Sun 01 Mar 2026 07:57:26 +0000
Manifest this update: Sun 01 Mar 2026 07:57:25 +0000
Manifest next update: Sun 08 Mar 2026 07:57:25 +0000
Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: nDGrqwuUr1hRvvvEDbaY8xDtwlpSvwNfBR1fshpBsi8=)
2: F526E31C122011F1ACA5537B1D3D8C67.roa (hash: tNgjUkxOfdAY/4xo9FHInrxlrfFOp1IorHVpfXFf9zk=)
3: 4E9801F4122311F1A005593E1F3D8C67.roa (hash: GXXbbPFMfLAe6BZCkR31KQEryxfAn4vuUlIkVQ1ziV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Mar 1 07:57:25 2026 GMT
Not After : Mar 8 07:57:25 2026 GMT
Subject: CN=69a3f166-6484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:2f:52:54:c3:1b:b2:d3:84:09:b6:05:2a:
5e:a2:2a:a5:43:f8:8a:d0:e2:76:19:ae:ab:fc:ee:
47:4d:58:07:fb:71:c8:d8:0c:2d:2f:65:84:3d:53:
02:8c:1a:92:62:55:ed:e1:77:29:bf:ed:f0:d1:de:
bc:c6:93:3a:ef:fb:0f:5f:dc:81:d2:7b:35:92:84:
fb:69:0a:d3:c8:ab:18:9f:6a:2c:62:ed:ea:21:39:
dd:f1:c2:22:46:ea:4c:fc:ee:94:ae:3d:cf:4b:ea:
da:b9:5e:35:fc:f3:10:0e:59:07:86:98:c8:10:85:
56:0b:0b:88:1f:fe:76:32:96:dd:3d:c1:70:84:6b:
ea:8a:54:32:56:0a:cd:2c:1c:bc:e2:85:bb:c8:60:
21:ac:1e:87:4f:76:fa:1e:c8:f8:10:b0:ed:a4:27:
3a:f5:83:e0:d8:73:25:f3:f2:12:56:3e:da:0d:c2:
c1:74:c5:45:26:a1:fa:58:fb:79:bc:10:f1:bc:c4:
34:3b:86:ce:62:9e:a8:d6:85:03:2d:2a:8d:0b:be:
78:c7:28:87:61:42:18:af:cc:58:cd:ea:dc:de:96:
32:f0:0b:4b:f9:4f:e8:5f:7c:e9:74:6c:e7:59:70:
e9:ba:e4:1b:21:46:9d:db:60:e1:ab:58:c0:94:8a:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:8D:4A:4B:5E:34:61:81:BA:BE:C0:00:D0:9E:BB:7D:C0:E4:4A
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:f9:b1:dc:4e:38:6e:58:63:bb:13:18:8d:ba:f8:e2:6e:
3f:16:27:fa:dd:83:c2:76:66:84:24:31:87:b3:dd:ff:bd:e2:
40:61:46:99:79:5e:92:38:b3:18:3e:a3:ff:7d:79:ac:94:39:
98:af:6f:72:7c:82:34:f7:3a:89:16:e0:f0:f7:c5:45:c2:6a:
a6:36:03:e1:fd:14:7c:5b:e1:2b:d0:54:24:24:f4:5c:af:77:
de:34:69:0d:42:4c:b7:74:ff:3f:f5:06:a5:81:29:85:53:b9:
74:9b:cc:08:08:91:84:42:e2:15:35:fe:b4:31:4c:48:81:81:
46:77:af:e3:d8:f6:16:99:ab:c6:66:df:a7:eb:c4:93:4f:90:
44:c9:57:df:9f:54:b9:59:86:09:d3:6d:d5:68:f7:44:14:4b:
2e:47:fa:02:f1:6c:d3:6c:0d:9c:84:db:a7:61:df:32:c4:81:
7f:3d:96:6c:3f:39:2e:24:39:a2:69:82:7c:d6:1d:28:49:f2:
01:84:15:e3:ef:11:3b:09:b7:b7:a2:79:21:f9:be:4c:de:fe:
55:b8:64:73:03:b5:b8:09:4a:e8:98:da:c8:a3:3c:bc:d0:55:
1f:63:7a:f9:40:92:e6:5a:71:a9:85:e4:5f:7a:10:be:42:52:
58:b9:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:50 2026 by rpki-client