
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
File: lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json)
Hash identifier: 2L6FjEu6oHUSajcnLTn4GUsIT4DeWO7MYvmHr+zaEvI=
Subject key identifier: 54:FF:1B:3B:7F:6C:D4:CA:39:5E:B0:D9:CA:72:0A:C7:F3:B3:64:CF
Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Certificate serial: 0626
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
Manifest number: 060B
Signing time: Mon 02 Mar 2026 02:27:37 +0000
Manifest this update: Mon 02 Mar 2026 02:27:34 +0000
Manifest next update: Mon 09 Mar 2026 02:27:34 +0000
Files and hashes: 1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: CpXSbgkrmpSGdOx2hehAgp4zPOiVNzPYtfeXUaNF4yk=)
2: 368F5308A27311EFA8731822C4F9AE02.roa (hash: KBf8JxajMdMMi2+GI03db8VLySuC8cD1rgByqAKzBds=)
3: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: 8A4Wb2KJcDqzfgpVuNBZcnB+OO/NHwZAcOnGRk55RA8=)
4: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: uvL2gNEthqGV41KwTfLQpnni0nIuRN7IKI+1/XnuE+o=)
5: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: 7N+kBhMTPa/IDmaHS5j88uMau/dBXAyZziXt2IYR/Jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1574 (0x626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Validity
Not Before: Mar 2 02:27:34 2026 GMT
Not After : Mar 9 02:27:34 2026 GMT
Subject: CN=69a4f599-dec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:2d:9d:26:c7:4b:40:21:22:69:7c:12:cd:
ad:ac:6a:63:07:f0:a8:bf:59:48:33:e8:4f:ea:23:
09:3b:62:d2:12:b0:a8:f3:56:85:18:5a:6b:08:e6:
b7:b8:fc:5f:d4:9e:ed:af:0a:0e:6d:6f:19:3a:c9:
f1:89:bd:db:7e:40:51:9f:4b:65:b8:4b:a4:fd:63:
24:ec:bd:3a:6c:43:ce:f3:ce:c8:d7:89:16:17:d1:
a9:61:53:16:a6:37:a0:3d:ce:68:d5:96:a7:03:5c:
4c:01:e9:10:53:19:48:02:7e:a3:c8:31:38:d5:2c:
ce:6f:f4:cb:a5:4c:7e:19:77:b9:91:d3:bf:60:6b:
ff:02:ba:4c:1b:ca:4b:ac:0e:6f:17:af:b0:7f:8e:
c1:07:aa:19:26:2c:e5:83:13:04:8f:fc:7e:5d:19:
e1:58:2b:ec:84:3f:6f:ec:8a:48:86:5f:1e:62:72:
ff:8f:70:e1:43:dc:96:f7:2d:f3:c9:5e:4d:a1:19:
a0:1a:2b:0d:23:f1:a3:78:17:a3:9f:77:93:3a:64:
ba:b9:bb:f1:7f:e0:8d:f7:ba:50:a7:eb:76:64:b8:
ce:3b:0b:08:01:f6:43:8e:b4:e3:bc:41:04:54:78:
a3:16:db:f1:44:4f:5d:dc:79:9d:29:10:1e:72:88:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:1B:3B:7F:6C:D4:CA:39:5E:B0:D9:CA:72:0A:C7:F3:B3:64:CF
X509v3 Authority Key Identifier:
keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:c4:8d:cd:67:f7:96:eb:f3:60:80:7b:a4:d9:82:62:2a:29:
cb:49:04:98:52:3f:fa:dd:5f:42:4e:33:8b:b7:8a:c1:31:84:
7c:3b:0d:01:24:b5:80:78:5d:e3:08:26:2e:de:eb:5f:42:85:
51:51:95:43:43:23:8d:e2:e6:8a:1d:15:9a:64:1a:00:63:23:
74:08:9a:44:93:56:71:7f:1c:56:a8:62:06:b1:d8:bc:91:44:
fc:fb:89:55:20:f2:f0:ed:33:8b:36:31:c5:cc:33:ab:d8:f5:
dd:20:7a:03:97:d8:84:fd:7d:88:99:d0:23:ff:7f:68:a7:7f:
12:19:a3:e4:35:40:29:d2:7e:8b:0b:f7:eb:48:c6:83:b4:ca:
b3:02:c3:93:0f:ed:75:56:bb:6e:d5:f2:2b:33:08:c9:0f:b2:
30:c7:fc:68:f1:27:2f:11:ed:a1:64:f9:15:17:70:f4:3f:80:
d3:64:df:7d:7f:ee:4e:e8:3e:b0:74:4d:50:37:66:18:1e:c4:
2d:b4:7c:03:ec:46:b3:96:9d:04:35:ac:df:2d:ba:90:68:ae:
14:e6:32:ca:c6:6e:c1:3a:c2:ef:f7:68:d0:e9:2a:d9:f7:01:
a9:ac:98:7c:b5:b9:a0:9a:12:6a:bd:fe:15:ac:0e:b8:fa:6d:
7d:54:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:56 2026 by rpki-client