
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json)
Hash identifier: dqByQk3o5JTQdl2Z828MU7c/66XQ4VRYRtcM7cYRlA4=
Subject key identifier: 62:41:B4:01:7E:52:6A:FD:0A:B1:48:D0:92:A9:47:AC:EB:60:30:5D
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
Manifest number: 016C
Signing time: Mon 27 Jul 2026 07:54:16 +0000
Manifest this update: Mon 27 Jul 2026 07:54:15 +0000
Manifest next update: Mon 03 Aug 2026 07:54:15 +0000
Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: ftMrwNbxD+5P79PkMXrS1qt8JVi89jfoL3wPGSRkbOQ=)
2: 4E9801F4122311F1A005593E1F3D8C67.roa (hash: 9NUw/Vlq1cG4rvMjm7Tf+mY/SPVFiZPsiEtV3MAG4ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Jul 27 07:54:15 2026 GMT
Not After : Aug 3 07:54:15 2026 GMT
Subject: CN=6a670ea8-f99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:4b:c8:69:e4:3b:7b:f9:de:e9:70:45:86:
23:1f:0c:b2:18:fd:aa:03:73:c0:3d:82:06:37:cd:
24:08:a8:8c:0b:0b:93:0c:77:9f:2d:2f:91:92:fb:
54:48:f9:1a:13:d4:68:cf:3f:d9:3c:1c:aa:78:63:
de:65:1c:29:e4:c0:63:5f:95:d0:8f:be:73:b8:77:
9d:eb:58:e3:e5:f3:44:c4:17:55:de:3f:0e:bc:c1:
d2:0a:7b:c3:4f:42:7f:0b:cd:43:41:31:91:07:01:
28:03:bb:79:db:54:d5:a6:17:e6:79:84:3b:2b:95:
2e:6c:6e:d7:58:5d:ca:37:65:dd:40:17:4b:96:44:
36:0e:02:bb:23:08:37:65:41:c9:7c:7e:9e:88:9b:
ed:01:91:a2:e5:a0:4d:f5:39:ff:5d:67:33:2a:2e:
e4:f3:48:92:f4:e4:29:65:a6:49:34:f6:be:fb:7f:
c0:a5:6a:b3:23:1b:23:33:00:43:8c:18:3a:00:60:
f8:ad:8f:6d:d5:ff:03:b7:ad:64:44:48:e3:31:d4:
84:65:b8:2c:71:64:9e:eb:a8:35:cb:5d:d2:9d:f8:
b9:8f:ab:43:43:14:08:80:10:68:c9:c8:17:9d:78:
70:1f:f0:57:14:d8:37:b2:92:8c:ff:26:23:3c:e5:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:B4:01:7E:52:6A:FD:0A:B1:48:D0:92:A9:47:AC:EB:60:30:5D
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:52:c4:b7:d0:66:51:ec:d1:25:e4:2b:1c:23:7c:dc:84:e5:
85:5f:ed:5f:01:8b:b5:d0:19:0c:e1:1c:bf:58:55:05:07:e5:
43:ed:a7:49:86:62:85:81:8b:d0:a2:c3:5c:f8:bb:f6:94:6d:
fa:21:1d:60:21:49:33:92:d0:d9:44:28:a9:45:80:db:02:28:
08:9a:d0:17:c3:4e:92:11:ee:59:c7:47:77:4a:0b:a3:09:31:
d8:b6:f4:fd:e0:cc:58:53:4a:6c:79:03:a8:03:c0:61:f8:cb:
89:e8:f8:c8:84:04:2a:f0:fc:09:44:ba:c7:bb:cb:34:40:b6:
a2:d9:aa:a6:2f:8d:1f:b7:bb:08:2c:45:06:97:50:f0:c3:56:
4f:0c:b4:3d:b6:a8:fa:0a:61:34:d6:81:8e:fd:a0:39:f0:c4:
30:92:5a:fd:1d:ad:ac:94:bd:a3:38:60:df:a1:bb:d2:32:c9:
3e:c2:63:aa:f9:14:d2:29:f7:ac:05:4b:d1:31:fe:02:35:4f:
9d:2a:25:83:6c:78:6a:72:6c:8d:41:60:b9:bd:1f:8c:e0:ea:
24:53:e2:78:ee:aa:08:0b:4e:c9:4e:07:8c:18:48:a6:b9:46:
27:b1:c1:e2:b9:f7:41:e0:7f:0e:7c:11:90:51:07:7d:57:45:
d1:9a:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:58 2026 by rpki-client