
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier: WSuAnftwJ5S1t6AGppYOkN6ORgXVe4oRTI0ETGkMohQ=
Subject key identifier: DC:D2:BE:D2:B1:83:F3:6D:1A:E5:BD:98:91:48:63:89:0B:4F:F7:3E
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial: 0961
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number: 0949
Signing time: Sat 18 Apr 2026 20:04:09 +0000
Manifest this update: Sat 18 Apr 2026 20:04:08 +0000
Manifest next update: Sat 25 Apr 2026 20:04:08 +0000
Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: JBczfRyfOO4wAe6r6rEHDsD7/HoEGI87ZoL/pdyjSmo=)
2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: K3c5oq/qmuRX+k4/b8uhhcLi8asZQ+2HUoQXvrhiTHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Validity
Not Before: Apr 18 20:04:08 2026 GMT
Not After : Apr 25 20:04:08 2026 GMT
Subject: CN=69e3e3b9-1ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:a8:73:fc:0b:37:f8:df:ea:32:ca:29:69:
8d:f8:fd:4b:bc:29:b6:3c:57:95:87:57:db:9e:1b:
7f:f7:3f:e6:fb:cd:76:f4:68:a1:d2:70:0d:ba:ef:
3c:07:68:89:2d:0b:ff:b4:51:af:34:3b:6f:ad:80:
bd:6b:16:a7:81:7d:d0:e3:a0:b2:7a:cf:93:8b:62:
24:1a:21:60:29:3d:de:97:93:da:df:30:d2:ac:fb:
61:77:ac:b7:85:18:ea:f9:e7:33:1b:e5:74:90:50:
54:a0:c4:22:73:2f:0d:94:1a:0b:b2:af:79:7b:39:
b4:cd:0d:43:76:54:9f:ce:f1:9d:15:e5:c0:af:2e:
3b:69:c2:66:5e:b1:12:5e:e4:11:bf:94:83:10:fd:
60:fe:69:46:b6:40:2c:bb:9f:99:b4:68:31:49:72:
dd:cc:80:49:1d:d6:1f:f1:07:3f:82:5e:40:c9:15:
40:f4:92:34:bc:9c:0d:7a:a9:a3:ff:ab:3f:58:18:
23:65:00:44:e8:c1:50:9c:8c:22:ae:32:fc:da:d8:
73:3d:07:39:d7:0b:f8:f3:b2:6d:b6:e6:d7:2e:62:
13:74:6b:2f:ab:af:d1:a0:21:41:13:28:0f:ba:53:
ab:1d:63:fe:8e:39:ab:1a:d0:74:27:aa:bb:b1:b5:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D2:BE:D2:B1:83:F3:6D:1A:E5:BD:98:91:48:63:89:0B:4F:F7:3E
X509v3 Authority Key Identifier:
keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:cf:b8:f5:ac:a9:22:e8:c5:e3:7d:52:35:1f:41:e0:08:e5:
92:66:2c:83:c8:4e:03:19:8c:b2:63:12:a1:5b:15:a9:42:ee:
66:4d:35:d6:e8:52:1a:2c:c4:55:61:19:4d:85:1f:95:a4:61:
6e:b6:62:12:c4:e4:89:62:e2:ea:80:3a:6a:23:3d:d3:e5:be:
d3:37:77:8d:88:92:50:fe:bc:fa:66:17:53:8b:92:32:79:e8:
19:67:1a:53:e6:31:d3:c0:a0:52:e3:74:67:1c:cf:8a:f2:53:
47:39:88:ef:cf:06:92:e4:af:eb:56:37:7d:ac:9b:ea:b9:8d:
c3:0c:0d:b1:c9:d4:d7:f7:c9:15:50:c6:0a:76:b4:6c:cb:1e:
c2:b2:75:6c:89:59:db:22:6e:12:2d:d0:10:bf:ef:87:84:21:
a0:7d:bf:fe:5c:e0:32:d6:fb:8f:f0:0d:b2:86:82:16:36:6d:
8b:16:e5:7c:41:7d:ed:65:f7:56:4b:5f:d3:c5:9e:02:8c:aa:
d5:7e:ad:b0:f9:b9:e2:a0:5f:f4:2d:15:9b:eb:b5:4b:a6:a8:
ee:fa:75:fd:f6:ed:33:c9:00:23:20:11:d0:2b:fa:41:ff:7a:
6f:dd:49:44:93:e0:21:a5:e8:3b:a9:d7:ba:c6:d8:43:d3:5a:
14:e4:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:51 2026 by rpki-client