
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: 5YMyaXT9T6lwkhl34SInbbk/8ibV+AKDCwkajNa+NJo=
Subject key identifier: 40:8F:A3:EE:4C:FC:B0:F0:5D:30:3F:5C:71:00:E5:AE:41:47:44:94
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: 0125
Signing time: Fri 17 Apr 2026 05:31:33 +0000
Manifest this update: Fri 17 Apr 2026 05:31:33 +0000
Manifest next update: Fri 24 Apr 2026 05:31:33 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: 5k/DmjYdJrSGsX/nXBKr2Yf2SnoACar0KMremtFsD2I=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: Apr 17 05:31:33 2026 GMT
Not After : Apr 24 05:31:33 2026 GMT
Subject: CN=69e1c5b5-565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:4a:8a:15:8c:c6:db:bf:aa:08:8b:ec:73:
5b:b6:0b:51:88:c3:c1:76:2d:05:ee:79:bb:b1:8e:
bd:bf:d1:e0:d0:2c:33:6e:62:bd:b7:c1:ac:86:20:
28:3a:41:2b:34:7c:ae:23:10:d5:8f:3d:58:18:75:
87:9f:cc:02:84:7b:fc:40:c0:2c:cb:f5:a7:71:19:
ac:46:de:91:6b:c5:c9:10:dc:08:66:0b:fd:aa:23:
e7:c5:9b:a7:8c:cf:af:12:bb:b7:15:a2:57:8a:03:
03:f5:76:fc:fa:a4:3f:b1:7b:d4:a7:73:b0:2c:4c:
9e:04:a9:c9:e9:86:46:61:36:4d:11:fe:48:71:44:
44:38:e8:74:4c:cb:49:8a:6e:c3:10:d1:a6:ea:f3:
bf:6f:0a:5d:db:1d:4c:9f:83:34:c7:aa:b8:0e:2a:
06:fb:aa:55:b2:a2:d7:16:47:ae:6c:28:9b:2e:95:
1e:03:97:a2:d4:40:cb:e9:2e:7f:fc:4b:08:f2:e6:
40:5c:c0:e1:57:02:36:ca:c5:51:31:18:77:cf:2f:
41:08:9c:3b:17:29:5f:18:84:7e:01:b1:95:24:cf:
99:62:5f:1a:a8:3d:0a:3c:8a:c1:25:71:12:e5:c7:
ff:94:a1:6a:df:1a:96:8b:99:9a:1d:86:6b:fc:ee:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:A3:EE:4C:FC:B0:F0:5D:30:3F:5C:71:00:E5:AE:41:47:44:94
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c8:53:69:80:a4:a5:0a:cf:f1:9a:a8:49:29:ff:28:c3:01:
09:0c:70:39:4d:16:2a:8e:45:ad:e8:e4:e6:eb:2e:b7:c7:b0:
a9:2d:b6:42:f7:6e:0f:f4:65:34:ae:fc:ac:18:17:f9:76:8c:
98:00:c5:37:e8:2a:b4:93:b5:42:34:0c:9c:1a:10:57:e0:cd:
d7:bd:3a:62:e3:0d:1b:aa:29:55:28:d9:17:68:30:32:66:8f:
a9:98:37:b8:6e:c1:2a:f2:5c:15:75:95:af:d1:76:4e:4c:a7:
de:4f:6f:77:f2:ca:c2:df:13:78:74:49:66:54:dc:1d:bb:ed:
8c:dc:08:10:de:51:be:b1:28:71:47:13:cb:39:0e:bd:af:74:
22:bc:45:cd:6c:74:60:e6:75:04:40:39:b0:4f:67:f3:5d:fb:
ec:a6:a6:74:a9:e1:35:17:1a:9a:43:29:53:bd:0f:63:3c:90:
bb:b5:fc:33:11:99:c7:62:5f:30:b6:04:a8:54:6b:eb:97:f1:
20:0a:6c:cc:49:2b:b0:35:24:f6:51:49:05:2e:2f:48:0d:92:
92:22:f3:c0:74:e5:22:09:ac:ba:82:1f:e0:db:50:d7:ab:33:
64:cc:20:ae:d2:c3:a8:33:a4:b8:f5:08:89:93:0a:1d:0c:e2:
d5:ea:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:24:30 2026 by rpki-client