
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json)
Hash identifier: 1F84cs4X8jRSqii6QZknpLfE1CzHpjnUYcvNMC1RuoM=
Subject key identifier: 95:41:06:FC:A3:F8:5E:79:AF:C6:89:B5:8F:78:73:47:28:FF:0A:9E
Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
Manifest number: 0158
Signing time: Fri 17 Apr 2026 04:41:32 +0000
Manifest this update: Fri 17 Apr 2026 04:41:32 +0000
Manifest next update: Fri 24 Apr 2026 04:41:32 +0000
Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: 7IUh6eKzi08rU4bSQAw9rJ6DdKMRC0deBWBPe6uxGxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Validity
Not Before: Apr 17 04:41:32 2026 GMT
Not After : Apr 24 04:41:32 2026 GMT
Subject: CN=69e1b9fc-8c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:72:04:8f:ed:16:18:a6:b1:ff:42:1b:72:
4c:87:92:a0:df:ca:e7:26:6e:f5:dc:b2:9e:ff:18:
9d:e1:3f:75:9d:c2:60:cf:19:b7:06:61:ba:70:89:
4a:50:9d:5b:a3:7e:5c:a3:36:2b:c0:25:4e:23:ad:
0f:f1:16:e1:f5:62:1d:3a:c5:82:cf:c1:40:be:6b:
b8:b6:c1:a5:63:a5:3f:bf:1e:80:c7:ba:fe:2e:eb:
5c:e7:db:9c:59:5e:d7:89:cf:b4:66:5b:d4:60:f9:
3e:b2:29:61:21:69:a7:73:56:1e:88:bf:7d:49:bd:
f5:6e:5c:bb:ca:c3:c0:50:fa:40:39:6a:a1:1b:1a:
fb:1d:98:0b:8d:4f:f6:9c:25:bd:0c:05:fa:fb:fc:
46:13:ca:b2:57:45:9e:ca:84:23:1c:ab:02:94:23:
a2:79:19:d4:55:d5:06:7f:e0:09:2a:99:96:94:1b:
aa:19:8e:32:f6:60:59:e3:82:43:83:82:d8:cc:b5:
93:0e:db:77:3c:fd:8f:5a:13:02:18:b9:46:b1:10:
25:60:30:e8:61:85:10:5b:ec:5c:ff:80:50:ab:28:
3e:e6:21:b0:a6:81:0a:38:ef:6c:4e:fd:8a:d6:d6:
57:14:ec:39:b7:ae:4b:20:da:97:4d:06:cd:a3:43:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:06:FC:A3:F8:5E:79:AF:C6:89:B5:8F:78:73:47:28:FF:0A:9E
X509v3 Authority Key Identifier:
keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:31:23:29:77:eb:76:cc:bd:37:0e:5c:f3:c8:3c:08:52:
f6:5f:df:a2:58:3b:97:30:5a:ff:05:c7:81:40:11:f9:2b:cd:
91:b7:4b:48:65:08:a0:73:54:5a:26:50:22:ba:e1:4e:82:6c:
2d:e4:e3:32:0e:5a:b9:1f:d6:dc:28:6a:0b:83:e1:69:0e:c0:
7e:b2:1f:94:63:25:96:c6:30:65:4b:0a:c4:cf:69:1d:de:a4:
2e:ef:eb:92:25:cc:8c:20:56:67:0b:b8:35:90:dc:62:b5:1c:
1e:6c:b6:6a:98:a9:34:25:39:18:05:04:71:8e:1a:5b:b0:cf:
68:16:12:82:1c:59:56:bc:11:8b:2a:ef:d1:34:68:98:b7:f0:
f5:31:04:ce:58:e9:6e:6c:bc:4e:bb:8f:48:13:24:a1:83:4e:
ce:85:ab:c4:cc:51:c4:06:e6:69:94:28:2b:8c:ac:ae:a1:ad:
94:ab:a4:a4:bd:ba:6c:3f:77:a6:39:74:72:ad:ba:9a:af:fb:
43:af:15:91:a5:57:43:fe:67:90:10:e0:b1:f6:7e:64:97:61:
c7:92:fb:80:63:b2:37:ba:bb:54:79:00:fb:3f:64:09:ad:7f:
57:2c:00:2d:12:c8:f8:75:5e:93:f5:26:3b:41:6a:6b:4c:5f:
26:59:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:50 2026 by rpki-client