
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
File: lslPY1zHgehZd0oRr3Nii2CmVs8.mft (raw, json)
Hash identifier: 5qBU23n6Bk3tzF9qPzz9iTT1axjrcxOijH5sCkbg48g=
Subject key identifier: F8:64:B3:3C:AC:D1:51:88:92:D1:FB:86:7E:2A:E3:06:BF:EA:FD:66
Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
Certificate issuer: /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
Manifest number: 2A
Signing time: Fri 17 Apr 2026 08:30:30 +0000
Manifest this update: Fri 17 Apr 2026 08:30:30 +0000
Manifest next update: Fri 24 Apr 2026 08:30:30 +0000
Files and hashes: 1: lslPY1zHgehZd0oRr3Nii2CmVs8.crl (hash: 3vWV8t1y/nVlLOQlJ40T8H2Ch1Rdt74RvJs8B46nzho=)
2: 38D7A57E02B311F1B5A042A33E3D8C67.roa (hash: i+cONdh4kL/zy5o+bEmmDqg3gYQAN5WXBgxD3TrRI7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Validity
Not Before: Apr 17 08:30:30 2026 GMT
Not After : Apr 24 08:30:30 2026 GMT
Subject: CN=69e1efa6-a74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:07:92:1c:5a:05:89:59:b1:2c:eb:26:c4:
6e:47:67:de:eb:a8:5a:77:73:87:d8:ff:9c:e0:78:
ab:41:5b:3e:30:17:3c:b4:53:9e:2c:77:81:dc:a4:
de:b6:76:97:8c:86:c7:a9:22:f7:78:e0:36:a9:98:
c6:ff:6c:ef:11:32:3e:b2:0c:d0:b8:fc:b0:34:b5:
3f:58:96:5f:58:f3:38:b9:dc:7f:b7:7b:5d:29:84:
4e:79:53:4a:95:1b:18:a2:e2:58:0e:b3:43:1a:45:
8d:fe:0d:ad:dd:b5:6e:96:6e:11:6f:4c:a8:00:86:
c1:72:ae:c5:81:38:77:ed:0d:35:47:99:ff:4f:06:
16:c6:9a:a1:da:40:f5:c8:60:58:97:25:0f:94:ca:
2d:a1:60:a0:54:6d:f1:a4:b6:a9:2a:be:71:0d:00:
6c:34:d6:8d:3a:66:ef:5d:c2:3e:be:52:ff:3c:b4:
f8:9d:41:5e:54:6e:fd:f2:22:0d:02:46:79:59:17:
c6:7c:bd:f8:2c:ea:69:2c:c4:a7:aa:86:94:18:21:
73:a7:a5:0d:19:1b:05:af:70:91:05:5d:e4:df:a2:
0e:d0:60:b4:a9:88:67:a4:c6:9a:22:45:79:7a:37:
b8:22:6d:40:fd:20:8c:13:1f:74:3f:22:8d:15:a9:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:B3:3C:AC:D1:51:88:92:D1:FB:86:7E:2A:E3:06:BF:EA:FD:66
X509v3 Authority Key Identifier:
keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a0:90:44:e8:5e:f0:7b:ac:ac:ae:ba:e9:3b:61:68:a2:f5:
c5:fa:17:4a:d0:b8:bc:1f:f7:96:39:0f:5e:45:85:77:0e:2d:
83:3e:3b:f9:26:51:ec:18:3f:88:f6:5f:40:72:e2:7e:6f:2d:
18:ed:25:85:d4:13:9f:af:45:9f:b4:e3:c2:f0:10:4b:ce:f4:
98:68:59:67:9a:19:42:ff:e4:b3:db:66:e2:3d:a9:0a:7f:de:
36:ab:1f:dd:33:f4:71:2d:79:59:fa:73:f6:72:5a:b9:c0:90:
46:cd:a9:d9:4d:d6:e6:46:87:3a:b8:db:b0:83:3d:ec:cd:90:
c9:01:2c:bc:c8:2e:e8:43:c7:8d:c6:13:f0:23:e9:f3:93:72:
4e:46:79:3a:eb:30:b3:7f:db:e8:ea:76:24:27:87:bd:2e:0a:
5b:aa:b8:9d:ae:8a:61:15:d4:70:18:44:ef:38:42:df:74:bd:
1a:17:2a:5a:d8:cd:7f:bb:85:04:d9:56:29:ad:6d:4d:6c:6c:
61:d0:58:9c:1d:b1:33:10:a8:16:c9:e5:d5:40:9f:67:8f:0b:
06:95:31:c9:fe:52:f1:8b:b1:c4:4a:ca:f1:04:5d:b2:55:54:
0c:9e:83:34:a9:62:8f:68:4f:e4:f7:da:75:1a:a4:ab:ae:19:
c1:05:c4:49
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTgwMzExMC8GA1UEBRMoOTZDOTRGNjM1Q0M3ODFFODU5Nzc0QTExQUY3MzYyOEI2
MEE2NTZDRjAeFw0yNjA0MTcwODMwMzBaFw0yNjA0MjQwODMwMzBaMBgxFjAUBgNV
BAMTDTY5ZTFlZmE2LWE3NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDncweSHFoFiVmxLOsmxG5HZ97rqFp3c4fY/5zgeKtBWz4wFzy0U54sd4HcpN62
dpeMhsepIvd44DapmMb/bO8RMj6yDNC4/LA0tT9Yll9Y8zi53H+3e10phE55U0qV
Gxii4lgOs0MaRY3+Da3dtW6WbhFvTKgAhsFyrsWBOHftDTVHmf9PBhbGmqHaQPXI
YFiXJQ+Uyi2hYKBUbfGktqkqvnENAGw01o06Zu9dwj6+Uv88tPidQV5Ubv3yIg0C
RnlZF8Z8vfgs6mksxKeqhpQYIXOnpQ0ZGwWvcJEFXeTfog7QYLSpiGekxpoiRXl6
N7gibUD9IIwTH3Q/Io0VqSLNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+GSzPKzR
UYiS0fuGfirjBr/q/WYwHwYDVR0jBBgwFoAUlslPY1zHgehZd0oRr3Nii2CmVs8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxODAzL0UzODYzQkRBMDJC
MjExRjFCRUZBQzdBMTNFM0Q4QzY3L2xzbFBZMXpIZ2VoWmQwb1JyM05paTJDbVZz
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvbHNsUFkxekhnZWhaZDBvUnIzTmlpMkNtVnM4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
ODAzL0UzODYzQkRBMDJCMjExRjFCRUZBQzdBMTNFM0Q4QzY3L2xzbFBZMXpIZ2Vo
WmQwb1JyM05paTJDbVZzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC8oJBE6F7we6ysrrrpO2FoovXF+hdK0Li8H/eWOQ9eRYV3Di2DPjv5JlHsGD+I
9l9AcuJ+by0Y7SWF1BOfr0WftOPC8BBLzvSYaFlnmhlC/+Sz22biPakKf942qx/d
M/RxLXlZ+nP2clq5wJBGzanZTdbmRoc6uNuwgz3szZDJASy8yC7oQ8eNxhPwI+nz
k3JORnk66zCzf9vo6nYkJ4e9LgpbqridrophFdRwGETvOELfdL0aFypa2M1/u4UE
2VYprW1NbGxh0FicHbEzEKgWyeXVQJ9njwsGlTHJ/lLxi7HESsrxBF2yVVQMnoM0
qWKPaE/k99p1GqSrrhnBBcRJ
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:10 2026 by rpki-client