
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: ezqRWvwIJSrflMV/y2Mnv1Ud4QpmSHKgtRkLRs7KopI=
Subject key identifier: 61:2B:31:2B:33:ED:B0:8E:02:1C:C2:8B:F0:94:55:0F:A4:A2:2A:90
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: 0181
Signing time: Sat 17 Oct 2026 05:24:46 +0000
Manifest this update: Sat 17 Oct 2026 05:24:45 +0000
Manifest next update: Sat 24 Oct 2026 05:24:45 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: EWHMZjpOLy+jHo5x+qZD6LOiKU7XS3YwVBDhysxlV0g=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: Oct 17 05:24:45 2026 GMT
Not After : Oct 24 05:24:45 2026 GMT
Subject: CN=6ad3069e-939f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:07:93:96:83:61:74:0a:2f:36:c7:7c:64:
82:da:47:fa:6b:7f:46:cb:81:47:ed:09:45:27:4b:
3f:e8:a3:45:f4:6f:70:eb:12:51:2f:8f:fb:19:a5:
58:8b:4e:e6:19:b2:6e:c4:f7:22:13:ad:cf:d5:95:
2d:9d:c1:9e:fb:de:c8:c9:eb:db:c2:83:4e:17:ca:
24:8b:0b:d8:68:b1:40:a8:2a:38:3d:04:50:e5:41:
6c:04:df:3b:08:7b:b9:b8:b6:d7:25:a8:bf:d4:12:
78:fe:34:6b:79:b4:39:44:9d:f5:a0:c4:f1:98:98:
52:5e:81:0b:5b:eb:ec:5f:82:80:c8:e1:2c:e8:15:
f1:f0:ac:a5:86:cc:3b:d0:f2:ef:5a:83:af:40:e2:
b9:7a:83:b4:55:79:1b:b6:03:0d:24:96:04:24:47:
3d:88:fc:dd:29:d5:7e:1c:2d:23:d5:25:f6:1c:49:
71:7f:97:0d:9f:c2:90:4f:d9:e2:89:25:a8:ab:92:
85:d3:65:c0:cf:6b:be:e0:d9:26:2f:16:b3:25:f1:
58:69:d7:86:43:59:9d:2d:9d:e8:0a:91:80:af:c9:
87:be:f5:d4:b4:39:6d:5c:b1:d4:c1:7a:03:a9:5c:
d6:d7:ba:09:ff:52:65:b7:a4:c0:14:6f:8e:63:83:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:31:2B:33:ED:B0:8E:02:1C:C2:8B:F0:94:55:0F:A4:A2:2A:90
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:50:52:64:18:e4:19:9d:ad:28:d6:e6:2f:3a:d8:38:bf:ee:
86:4c:8b:ff:2b:a8:c3:75:be:cf:ec:0d:06:9b:1c:66:72:4f:
95:20:ea:a8:eb:24:50:ca:08:05:88:93:e4:07:ab:a8:ea:fc:
60:93:0d:6e:c4:b8:06:f8:60:c2:68:1d:4f:0d:f3:5e:62:69:
c4:45:32:e4:09:10:89:76:12:6f:db:a2:51:10:12:12:2d:cb:
aa:b4:29:5e:af:d7:18:97:ba:98:21:35:c0:d6:58:94:71:76:
e9:80:9c:d2:eb:a5:a7:64:78:62:e8:4e:2e:6a:4e:36:f7:5d:
62:3a:52:92:9d:34:7f:f7:be:b4:fa:47:40:86:13:c5:d6:37:
84:d3:c6:7b:77:a7:ed:46:95:01:a3:d5:1d:38:0f:c3:d2:98:
42:56:51:05:38:7c:cb:be:30:73:5e:f3:be:68:5a:ed:39:77:
f1:91:53:ad:0c:8d:b6:23:50:b3:f7:9d:d1:68:a7:50:0e:a6:
80:ea:0e:e2:33:52:48:08:69:96:69:7e:3b:24:7a:71:eb:51:
49:88:5d:d4:39:90:60:ff:28:6f:9a:b7:4a:02:50:97:d4:2c:
2e:19:38:25:a6:1d:89:23:5a:75:d0:e2:60:9a:97:b5:2a:44:
3d:26:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 11:56:04 2026 by rpki-client