
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier: mSikZYByhAQxsWqhX1113Ifz5IbEfgaYYHkGdiBawgc=
Subject key identifier: 00:7A:E2:C2:A2:74:CF:40:C3:7A:9B:5B:56:2E:36:E0:F3:4E:9D:7D
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number: 01A2
Signing time: Mon 27 Jul 2026 05:58:07 +0000
Manifest this update: Mon 27 Jul 2026 05:58:07 +0000
Manifest next update: Mon 03 Aug 2026 05:58:07 +0000
Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: Daze4UmMnmp/WhcbAaxfO18S/lJaUVXOnkKIQiicvC0=)
2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: mcFF4MHBs44WNsH/vlZHse4ZiDHWvj8b3sI3TUaGzkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Validity
Not Before: Jul 27 05:58:07 2026 GMT
Not After : Aug 3 05:58:07 2026 GMT
Subject: CN=6a66f36f-8e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:e4:2d:99:a2:2d:3a:e3:8a:0b:e8:6a:ce:
cf:c5:26:bd:4a:d3:86:84:fd:3a:a5:6e:5c:71:98:
cc:6d:35:d4:f8:ad:6b:d7:8d:6f:72:48:0f:8d:01:
3c:20:cf:26:b9:e3:c1:18:6a:6e:34:28:b0:52:94:
21:d9:69:ca:54:5d:02:e5:de:b9:ad:08:61:bb:83:
05:3b:3b:2e:73:8c:49:83:9c:61:7b:0b:25:93:cb:
93:e6:29:57:f5:e8:15:52:1f:d3:29:c4:e9:be:e4:
7b:6a:97:1d:24:e4:d2:79:03:de:58:bf:50:ae:fd:
2d:81:ca:69:97:b5:72:34:d9:5d:0b:63:2d:cf:ea:
de:c7:ed:fb:48:03:dd:37:ee:16:c5:0b:61:ab:cd:
53:70:af:12:f9:63:4a:c8:40:e6:c7:b7:5b:63:29:
43:ca:0b:4d:20:a1:65:1c:7a:d4:f9:da:79:65:ea:
31:d2:66:1c:ea:bd:01:0e:75:62:89:16:14:bc:14:
02:4b:8b:3c:42:dd:9f:85:3e:73:87:63:b5:43:54:
9c:de:96:b5:59:68:f2:e9:96:d6:04:33:c0:53:80:
68:e5:4f:db:5e:33:2f:a8:9d:03:dd:95:b3:5d:f7:
a2:47:de:95:41:55:5d:90:b4:e8:e9:4a:fc:d2:ea:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7A:E2:C2:A2:74:CF:40:C3:7A:9B:5B:56:2E:36:E0:F3:4E:9D:7D
X509v3 Authority Key Identifier:
keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:1c:a8:5b:49:a1:58:a7:cd:55:02:22:31:c2:3f:52:cb:e4:
2f:81:ff:98:6b:f7:e2:32:a8:c1:b7:2c:c0:f5:d0:e6:a7:5b:
07:25:f7:37:58:e1:05:8c:2b:ab:ce:f9:c6:e1:aa:16:c4:7f:
4e:ec:41:57:89:a6:95:3a:ea:a0:6f:90:18:34:76:d0:36:c2:
e8:96:95:12:c1:c5:5a:cf:cf:e3:96:d5:2e:45:cd:98:d3:ed:
18:15:c7:dd:7d:4b:87:38:14:24:bc:9a:a8:a8:8a:b8:5a:52:
f7:fa:44:01:a7:fc:f0:84:df:6d:06:4a:a1:e3:cb:21:62:00:
6b:81:4d:79:e0:51:3e:eb:cc:d6:97:aa:d0:74:d5:e7:23:9e:
e4:2b:78:5c:99:16:0f:33:d8:e0:45:a7:d0:40:79:29:b6:ac:
1f:7c:98:66:43:ae:eb:f4:4b:bb:cc:62:da:2f:e2:af:bf:27:
66:41:b8:89:8c:7e:e0:c0:fd:c7:40:4d:7b:c5:51:90:0c:11:
88:3b:93:c7:db:72:2f:7d:18:1d:ab:0a:34:0e:62:cf:8f:74:
a2:71:41:14:84:a5:dc:6a:51:d8:b9:5b:d2:ee:2c:ed:9c:25:
ef:0e:39:a6:80:38:5c:d4:24:67:d5:27:ad:09:a8:25:a9:b3:
47:c8:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:06 2026 by rpki-client