
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json)
Hash identifier: GBv9N7lltOOzbtarNLBRY56WHgpjKww7hULxWpSDuLI=
Subject key identifier: 52:F8:56:39:8E:5D:BF:73:69:4D:1F:08:58:F3:20:34:95:3B:7C:CA
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
Manifest number: 0182
Signing time: Sun 01 Mar 2026 05:47:48 +0000
Manifest this update: Sun 01 Mar 2026 05:47:47 +0000
Manifest next update: Sun 08 Mar 2026 05:47:47 +0000
Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: 2Whb2ecc34qb4eprsiY4V+9HbcXVJ/AmYnet0jL0lcQ=)
2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: CQr2hobxwoFHY9a4Ev/A2yb3z142YhpnnpTJ8f2F528=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Validity
Not Before: Mar 1 05:47:47 2026 GMT
Not After : Mar 8 05:47:47 2026 GMT
Subject: CN=69a3d304-ee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:4a:64:01:57:b5:f6:1a:17:35:b0:fd:e0:
23:ad:d7:3b:41:02:6a:97:92:18:c0:09:73:87:73:
28:7f:20:04:47:ec:7c:59:7b:db:44:3c:ce:c8:6a:
69:8d:84:61:9e:83:d7:af:2a:02:27:cd:0d:e8:f8:
a9:45:ec:fb:f7:b2:8f:05:56:0c:67:d4:bb:40:b2:
93:9e:34:57:40:ac:b6:e7:c5:40:e0:59:0d:67:bc:
af:b3:fd:15:03:b0:ff:26:47:eb:11:70:ba:16:0c:
80:50:fa:97:b5:8f:e0:cf:86:2f:31:b1:b2:5c:b4:
65:e7:eb:69:c9:a3:45:62:ce:a9:d5:ea:45:90:dd:
13:3e:da:fe:5e:fa:be:c8:9a:d7:fd:04:60:3c:6e:
e5:ad:99:58:c2:7b:6f:2f:8d:0a:cf:74:88:bc:aa:
46:4c:1c:55:b8:66:4f:8b:76:1f:e1:01:0e:78:55:
96:53:03:40:c4:b9:51:e6:c1:b6:85:fe:f1:e0:57:
0a:fb:e4:98:da:02:fd:7b:d0:cd:50:ec:67:79:8c:
f9:87:76:dd:ad:b9:ba:0e:95:3b:b2:ad:a8:89:98:
f1:c3:d6:61:94:cd:09:34:a0:a8:72:23:67:04:93:
94:8a:59:35:2a:0b:b8:db:8d:fd:b6:e1:13:ea:4b:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:56:39:8E:5D:BF:73:69:4D:1F:08:58:F3:20:34:95:3B:7C:CA
X509v3 Authority Key Identifier:
keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:e3:d8:7c:f1:23:9a:c7:28:15:22:22:4f:82:2a:40:3f:2d:
c2:ef:bd:f2:a3:03:f8:d6:7d:7a:da:3c:36:4e:42:12:15:0c:
fc:8b:1f:4e:57:c4:df:39:9a:d8:87:b6:3e:b6:87:bf:17:8a:
5e:95:67:64:79:ef:fc:58:b7:0b:99:b7:c5:38:8b:3d:ef:a7:
ad:56:24:94:90:41:55:85:5b:31:3c:d0:de:32:b2:a2:d5:38:
fe:8f:e9:dc:9f:62:65:c1:53:dc:c0:c4:c8:5a:c2:14:8e:4a:
f2:06:9f:b2:f7:2c:0b:1e:25:38:ad:e4:07:36:3e:cf:52:d4:
3b:89:9b:1f:af:d7:29:e7:74:41:43:59:93:1c:04:a1:ef:91:
d3:a1:3e:e3:31:da:bb:b6:9d:be:71:ef:98:a3:b6:38:0d:83:
bd:6c:1c:eb:cb:75:f8:58:5b:8e:6f:9c:d9:a8:0b:52:82:14:
5b:81:ac:3d:d5:fd:5f:61:cf:68:7d:18:ae:16:ee:a8:f5:0e:
32:f1:56:09:58:d9:fc:78:6d:32:ea:f3:a4:da:ce:62:64:1d:
4b:d5:e8:53:63:fc:6d:8c:9d:a6:88:d4:30:8a:83:7e:31:03:
cf:41:01:37:91:ff:20:28:4d:12:b0:e5:70:12:c1:86:91:59:
bf:19:bc:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNkQxMTAvBgNVBAUTKDJERjlBMUUzNzVBMTdCOEVBNTYwMjdCNDVBOEJENjZG
OTY3NDdEODYwHhcNMjYwMzAxMDU0NzQ3WhcNMjYwMzA4MDU0NzQ3WjAYMRYwFAYD
VQQDEw02OWEzZDMwNC1lZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/BKZAFXtfYaFzWw/eAjrdc7QQJql5IYwAlzh3MofyAER+x8WXvbRDzOyGpp
jYRhnoPXryoCJ80N6PipRez797KPBVYMZ9S7QLKTnjRXQKy258VA4FkNZ7yvs/0V
A7D/JkfrEXC6FgyAUPqXtY/gz4YvMbGyXLRl5+tpyaNFYs6p1epFkN0TPtr+Xvq+
yJrX/QRgPG7lrZlYwntvL40Kz3SIvKpGTBxVuGZPi3Yf4QEOeFWWUwNAxLlR5sG2
hf7x4FcK++SY2gL9e9DNUOxneYz5h3bdrbm6DpU7sq2oiZjxw9ZhlM0JNKCociNn
BJOUilk1Kgu42439tuET6kskBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFL4VjmO
Xb9zaU0fCFjzIDSVO3zKMB8GA1UdIwQYMBaAFC35oeN1oXuOpWAntFqL1m+WdH2G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8xODFCODIyMEU3
OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0NmxZQ2UwV292V2I1WjBm
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xmbWg0M1doZTQ2bFlDZTBXb3ZXYjVaMGZZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUI2RC8xODFCODIyMEU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0
NmxZQ2UwV292V2I1WjBmWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABOPYfPEjmscoFSIiT4IqQD8twu+98qMD+NZ9eto8Nk5CEhUM/IsfTlfE3zma
2Ie2PraHvxeKXpVnZHnv/Fi3C5m3xTiLPe+nrVYklJBBVYVbMTzQ3jKyotU4/o/p
3J9iZcFT3MDEyFrCFI5K8gafsvcsCx4lOK3kBzY+z1LUO4mbH6/XKed0QUNZkxwE
oe+R06E+4zHau7advnHvmKO2OA2DvWwc68t1+Fhbjm+c2agLUoIUW4GsPdX9X2HP
aH0YrhbuqPUOMvFWCVjZ/HhtMurzpNrOYmQdS9XoU2P8bYydpojUMIqDfjEDz0EB
N5H/IChNErDlcBLBhpFZvxm8zw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:11 2026 by rpki-client