
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier: XEG1JpQu6bxZxRN55aMsBN6zsbK00z4lLlcKdQIZkns=
Subject key identifier: 4D:7E:FB:BC:67:42:8C:3D:98:CD:36:C2:79:2E:65:1A:AB:81:B5:2B
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number: 0154
Signing time: Sun 01 Mar 2026 06:05:56 +0000
Manifest this update: Sun 01 Mar 2026 06:05:56 +0000
Manifest next update: Sun 08 Mar 2026 06:05:56 +0000
Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: 1lAmqX3h5uFoVLtSJXY/lQSc0tUogxEvULWe47OchLo=)
2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Validity
Not Before: Mar 1 06:05:56 2026 GMT
Not After : Mar 8 06:05:56 2026 GMT
Subject: CN=69a3d744-66ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:58:50:ea:16:8c:5e:bb:a7:f6:75:06:e0:e4:
d2:2d:9b:5a:52:99:47:b5:b1:7b:73:58:41:c7:70:
ec:71:d3:12:48:e1:e0:51:e1:6d:d8:5a:7b:96:05:
bb:fe:c8:4a:fd:6f:30:51:38:3a:a7:0e:39:c2:df:
e1:ff:64:59:1f:97:ff:26:44:3e:f5:6b:a3:e1:6d:
9f:df:ca:ad:d8:bc:c0:b6:7c:53:5f:e5:b5:9d:51:
39:de:cc:fa:cf:88:9f:ae:0e:6a:38:39:35:01:2d:
fb:46:16:01:c3:df:69:1b:6f:0d:e3:c7:cc:d6:3a:
cb:71:90:5d:0f:e9:f4:8e:b0:c0:1f:7f:90:44:3d:
71:56:f0:51:0c:0e:af:af:9f:cc:36:8b:0d:51:3f:
12:87:35:dc:2e:57:c2:e6:ae:b3:05:d2:19:df:0d:
5c:62:39:b4:a6:01:dc:83:10:95:e3:83:3a:62:87:
88:ab:a0:91:80:f5:5f:ce:85:41:4c:57:9e:09:07:
19:2d:57:28:f3:0a:b9:9e:28:40:de:f0:bb:1a:95:
a6:cb:b3:7d:6b:e2:4e:47:d1:7b:c9:63:2c:fd:41:
c8:91:74:c3:f0:dc:ed:57:cc:9f:f1:79:f2:e0:ee:
f3:02:97:72:43:e6:91:ee:dd:4e:df:3d:82:d6:49:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7E:FB:BC:67:42:8C:3D:98:CD:36:C2:79:2E:65:1A:AB:81:B5:2B
X509v3 Authority Key Identifier:
keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:66:66:dd:6b:93:49:db:2a:34:f7:0c:fb:de:af:be:23:
a1:0f:c4:50:b7:13:0a:8f:89:15:bc:0a:bd:6d:37:08:26:ca:
f8:f8:d7:f9:57:6b:dc:b4:4d:60:4f:f5:6f:26:14:26:1a:33:
cb:e4:11:20:c6:c2:e5:c6:db:02:49:d0:84:2b:cc:02:f3:9a:
93:ca:8d:e3:46:78:94:a5:0a:12:c4:6f:b4:04:96:36:fa:98:
c8:f8:c2:38:49:62:a9:7a:6e:0b:e6:38:ee:0b:db:fa:9b:b1:
fe:b3:08:e5:83:06:31:30:81:76:01:22:40:10:87:31:88:94:
3b:f2:36:46:c0:05:a7:b1:c6:b0:ec:2e:03:52:73:e2:97:a9:
d7:87:3a:a4:d1:e0:ea:69:eb:b5:ea:4a:a5:58:f5:96:bd:5d:
f6:be:1a:94:a6:fb:e1:4d:29:a7:c1:3f:80:e5:c2:ff:c1:6f:
71:c1:28:bb:de:fc:f7:a9:3d:b0:7a:73:98:b2:19:b7:b1:ae:
5b:72:4a:04:af:70:1d:10:65:54:7d:a4:ba:9d:9a:82:70:c2:
64:87:ca:2e:9b:e2:d8:f0:eb:0e:d5:bf:2e:d2:91:2e:2b:d1:
4d:df:09:e5:f1:66:1d:1f:ab:a4:d4:d5:7e:0e:a7:30:09:66:
16:17:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:37 2026 by rpki-client