
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json)
Hash identifier: yPHMqe+gFSpHIyg5RLrtqOdxYc4kW22IqXziTJ7qf3A=
Subject key identifier: A1:16:33:D0:F7:FD:BB:9C:73:6F:A8:39:C1:D8:37:8D:17:D0:21:E6
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
Manifest number: 01B1
Signing time: Sun 01 Mar 2026 04:48:39 +0000
Manifest this update: Sun 01 Mar 2026 04:48:39 +0000
Manifest next update: Sun 08 Mar 2026 04:48:39 +0000
Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: +lRuS+tPHVU3P0I4mxSRT8IGlucZSNSG9xkcpMZ26Hk=)
2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: quKJitER3rLWSjfmg0OVdWKLh6IMLpV8joVMSHQ5GxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Validity
Not Before: Mar 1 04:48:39 2026 GMT
Not After : Mar 8 04:48:39 2026 GMT
Subject: CN=69a3c527-18b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3b:0f:0f:b6:e3:31:6a:10:fe:60:b7:1a:06:
e7:0d:c0:d7:79:ac:e1:32:c0:98:34:b5:a8:ba:7d:
ad:ad:26:62:6d:36:4d:2b:ef:ba:a4:e3:cd:79:8f:
71:a5:80:27:64:b3:dc:e9:f6:04:d2:2e:8a:72:d0:
10:40:8d:28:51:69:91:d7:9f:f5:93:91:88:84:7d:
7d:ee:0f:7e:58:b8:51:02:63:5d:3d:ea:39:29:a6:
31:bf:a1:c7:ff:62:1b:ce:7e:b6:f6:1b:5b:16:c3:
59:42:86:36:c1:6a:c3:d6:5c:7c:aa:4f:1a:4b:c4:
ff:1a:3c:b3:c4:12:03:04:da:21:40:99:92:c2:6b:
fa:cc:b0:26:0d:9e:03:8f:a4:28:00:49:33:59:ec:
31:db:10:43:fa:cb:f9:fc:12:b4:d7:7c:e5:72:03:
9b:e3:fa:cd:be:d7:9b:c4:35:14:41:f3:25:90:ac:
b7:6f:60:2e:14:31:ab:81:f9:5f:a7:c9:59:9f:02:
57:c8:4c:ab:53:27:e8:4f:64:b8:48:6f:3b:4b:fd:
d5:92:3b:81:94:67:96:dc:45:6b:e1:33:7e:80:99:
35:de:53:7b:5d:b3:97:7a:99:77:26:d2:28:2e:92:
ac:c8:34:8a:c5:d0:1e:69:2b:4b:c6:a7:b9:8e:a8:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:33:D0:F7:FD:BB:9C:73:6F:A8:39:C1:D8:37:8D:17:D0:21:E6
X509v3 Authority Key Identifier:
keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:88:6e:3a:f1:11:f1:c0:9d:ed:07:ce:21:28:39:9c:37:70:
81:83:18:d2:ac:ed:ee:e2:dd:3f:e9:9c:53:09:e4:37:57:08:
ff:25:f3:2d:f1:3c:41:07:0b:d0:c3:ee:31:50:fe:4a:a5:4a:
cf:e1:5f:4f:83:f8:ae:b6:65:f9:f8:b0:23:44:f9:dc:ef:7a:
d9:58:32:72:a5:b1:a8:b0:9a:d1:0b:79:73:bd:f0:b5:20:d3:
8b:77:b7:80:d9:d0:b0:2f:04:e5:67:5f:65:fa:74:3e:64:03:
ea:b7:3c:09:ac:89:32:63:e9:35:d9:e6:55:6b:04:e8:33:b1:
2d:b1:90:87:3d:68:a5:ae:c2:fd:89:fe:5c:1a:3a:e5:61:35:
92:38:f9:0b:fb:57:41:7f:71:6f:e7:e1:41:70:d8:fb:1a:aa:
74:4f:e3:15:ad:bb:6f:0e:2c:f1:68:37:d2:64:20:da:31:cd:
48:8c:58:71:55:95:bb:2f:67:fd:26:9f:e8:80:7d:ee:4a:06:
d1:8e:e4:bb:07:10:7a:4e:ab:28:56:2f:51:31:a8:fb:cd:29:
7d:9f:03:cd:96:b9:c4:71:c3:3f:39:fa:61:81:de:99:9c:11:
ad:76:ae:54:51:15:de:3a:54:c7:4d:d2:f7:83:e4:75:8d:4c:
5e:e7:b6:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVEODQxMTAvBgNVBAUTKDk0OUI2NDdBNUY4Qzc5RjZEQTRBRTM2RDlFMDBDNDRF
MDJBOUE3QTQwHhcNMjYwMzAxMDQ0ODM5WhcNMjYwMzA4MDQ0ODM5WjAYMRYwFAYD
VQQDDA02OWEzYzUyNy0xOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4zsPD7bjMWoQ/mC3GgbnDcDXeazhMsCYNLWoun2trSZibTZNK++6pOPNeY9x
pYAnZLPc6fYE0i6KctAQQI0oUWmR15/1k5GIhH197g9+WLhRAmNdPeo5KaYxv6HH
/2Ibzn629htbFsNZQoY2wWrD1lx8qk8aS8T/GjyzxBIDBNohQJmSwmv6zLAmDZ4D
j6QoAEkzWewx2xBD+sv5/BK013zlcgOb4/rNvtebxDUUQfMlkKy3b2AuFDGrgflf
p8lZnwJXyEyrUyfoT2S4SG87S/3VkjuBlGeW3EVr4TN+gJk13lN7XbOXepl3JtIo
LpKsyDSKxdAeaStLxqe5jqg3UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKEWM9D3
/bucc2+oOcHYN40X0CHmMB8GA1UdIwQYMBaAFJSbZHpfjHn22krjbZ4AxE4Cqaek
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ4NC9GODA2OTQzQzg2
QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVmYmFTdU50bmdERVRnS3Bw
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUQ4NC9GODA2OTQzQzg2QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVm
YmFTdU50bmdERVRnS3BwNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMIhuOvER8cCd7QfOISg5nDdwgYMY0qzt7uLdP+mcUwnkN1cI/yXzLfE8QQcL
0MPuMVD+SqVKz+FfT4P4rrZl+fiwI0T53O962VgycqWxqLCa0Qt5c73wtSDTi3e3
gNnQsC8E5WdfZfp0PmQD6rc8CayJMmPpNdnmVWsE6DOxLbGQhz1opa7C/Yn+XBo6
5WE1kjj5C/tXQX9xb+fhQXDY+xqqdE/jFa27bw4s8Wg30mQg2jHNSIxYcVWVuy9n
/Saf6IB97koG0Y7kuwcQek6rKFYvUTGo+80pfZ8DzZa5xHHDPzn6YYHemZwRrXau
VFEV3jpUx03S94PkdY1MXue2XQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:06 2026 by rpki-client