
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier: vrdHvsCeucs4yhZDOM33PMZ1xBN5IuzMqEpH/ujmnDs=
Subject key identifier: CD:C1:80:9F:99:20:40:52:A8:F0:7E:CB:61:7B:53:08:99:C7:1B:C9
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial: 0994
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number: 097C
Signing time: Tue 28 Jul 2026 20:26:39 +0000
Manifest this update: Tue 28 Jul 2026 20:26:38 +0000
Manifest next update: Tue 04 Aug 2026 20:26:38 +0000
Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: /dnToeCxMuXoa2FXywut4HXrFidLB4xTincvKk4qJas=)
2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: K3c5oq/qmuRX+k4/b8uhhcLi8asZQ+2HUoQXvrhiTHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Validity
Not Before: Jul 28 20:26:38 2026 GMT
Not After : Aug 4 20:26:38 2026 GMT
Subject: CN=6a69107f-4961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:1c:de:14:f0:fe:e8:c9:cd:fb:bb:49:51:
e6:79:d7:2c:95:80:d4:4d:83:8d:63:1c:07:0f:85:
a1:74:89:ae:12:d6:d1:0c:03:84:06:9e:c0:8b:a2:
65:67:ad:b1:57:7a:40:67:47:bb:ce:31:b2:b6:b2:
79:6f:9c:a2:89:ad:69:f5:90:b2:2d:00:10:77:8d:
15:c2:be:b4:18:89:08:33:ec:f5:e6:ef:27:5d:e8:
79:9b:e0:ac:61:e1:54:6c:1b:d9:2a:6b:52:9c:7c:
71:1d:30:b7:e6:5e:1c:84:92:28:f2:33:0c:7a:1b:
2a:0e:8f:ae:83:63:1c:89:50:07:c8:ea:1f:79:30:
ce:e3:ba:19:09:ff:af:e2:a2:fe:32:00:8e:cf:11:
58:ae:e1:91:18:83:89:7b:51:fa:61:06:57:1a:61:
5d:70:07:c0:0b:51:98:76:cc:d1:08:05:14:cd:05:
c3:f0:88:92:1d:46:c9:1d:e0:d9:5e:13:73:a4:e3:
35:0c:42:e7:4a:f6:72:d7:29:14:e0:3b:87:ed:ad:
66:13:ec:96:fb:cc:ee:c9:04:af:a5:9a:57:6b:dd:
d4:80:ea:5d:fd:44:4f:d7:35:f0:09:1e:1e:0e:62:
52:02:21:f3:2a:ae:07:77:53:8f:28:69:8f:4e:6c:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:80:9F:99:20:40:52:A8:F0:7E:CB:61:7B:53:08:99:C7:1B:C9
X509v3 Authority Key Identifier:
keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8f:f5:3b:fa:4a:1c:41:77:9f:5f:9f:44:f6:e4:ba:22:5a:
8e:43:30:50:10:d9:29:f2:8b:85:b1:98:07:c7:d9:34:78:c1:
fd:4e:e4:9d:ae:c8:fa:59:8a:56:40:59:6d:9d:37:cb:1b:51:
20:e1:e4:50:d8:07:5f:8f:e2:7d:7e:a1:be:1b:f0:35:f6:78:
4d:f3:5c:87:c2:f3:15:ba:9f:25:da:2a:d4:7f:d9:9e:7c:78:
a1:54:67:93:15:d9:99:2b:3c:49:d2:3f:e5:fc:fe:44:08:bd:
b6:53:01:1d:1a:10:18:14:fe:df:0c:b3:97:84:2b:93:75:38:
fd:c7:35:af:55:86:19:93:d0:ff:41:35:f3:d4:67:dd:94:36:
94:d5:84:0b:cf:e0:8b:3c:00:42:0e:fc:87:3d:88:52:cb:4c:
d8:9b:90:69:b1:98:59:06:9c:69:8b:33:18:bd:a0:5d:63:e9:
ed:f6:b8:ac:15:de:01:3d:ef:84:1e:e1:a8:42:7e:5c:5c:21:
43:94:93:ad:86:d2:0b:c1:88:e9:67:24:87:58:ca:f0:96:f4:
b8:63:e5:e1:cd:5d:4c:6a:e8:c6:09:66:9a:e2:49:9c:3b:e0:
5f:02:4b:1a:4b:8b:a8:ac:b0:e7:30:40:29:6d:3b:7b:10:33:
22:c3:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:54 2026 by rpki-client