
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
File: 0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json)
Hash identifier: sqUa9iUtB65mW9LuDJZuocNh19V/I4ptO/70kGDblRc=
Subject key identifier: D0:B8:85:BA:77:02:20:6B:00:BC:EE:0D:07:B3:B6:4F:B7:13:2F:21
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Certificate issuer: /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
Manifest number: 0A
Signing time: Sun 01 Mar 2026 10:41:20 +0000
Manifest this update: Sun 01 Mar 2026 10:41:19 +0000
Manifest next update: Sun 08 Mar 2026 10:41:19 +0000
Files and hashes: 1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: S44knBfU/AfhlKO5St2HvOddycv3q6zUFyjEHwuT3lA=)
2: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Validity
Not Before: Mar 1 10:41:19 2026 GMT
Not After : Mar 8 10:41:19 2026 GMT
Subject: CN=69a417d0-24d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:e7:6c:7b:f3:98:1f:47:44:82:d1:65:46:
02:b4:ac:b4:b4:02:b3:d0:45:9d:00:ad:38:f8:7e:
c6:8a:1c:e2:31:05:ca:82:57:d4:b8:94:35:6c:81:
f6:fa:20:6e:0b:2e:53:90:75:4d:c8:8e:bf:73:99:
f0:23:98:76:25:b2:61:b2:4a:93:a4:b5:e3:90:67:
bd:03:c4:f4:9d:58:62:d8:b7:01:69:fb:75:44:bd:
8f:dd:8b:99:1b:bb:55:54:97:73:32:dc:a0:19:2d:
81:7e:59:5e:27:db:97:28:f9:00:8b:23:9e:ef:55:
ff:26:3a:4f:3e:06:07:3f:5b:2e:54:f9:e8:da:c3:
59:22:46:c5:ae:71:cb:00:64:e8:60:68:25:d0:47:
63:ff:01:dd:15:89:0f:0f:20:c9:a6:77:6e:82:af:
3b:7b:d4:35:0b:f8:50:87:27:5d:6f:ef:bc:c1:3d:
e4:8c:bd:f1:c3:4f:75:f9:be:af:9e:02:0f:0d:1a:
b9:a9:a6:dd:52:c5:74:d5:6f:0f:65:fa:c2:20:83:
03:02:14:f0:9b:bf:49:e8:b4:e9:a8:b6:dd:bd:89:
05:96:51:35:18:8e:2a:da:88:2b:21:4c:7b:f0:a9:
a7:d0:dc:51:f2:e2:6c:42:d3:5c:b6:fb:2b:d8:dc:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:85:BA:77:02:20:6B:00:BC:EE:0D:07:B3:B6:4F:B7:13:2F:21
X509v3 Authority Key Identifier:
keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ec:02:98:32:27:d2:56:74:c9:19:28:1b:9f:0b:f6:42:06:
9b:8b:eb:99:85:11:ff:4c:18:ae:53:4d:82:a9:b2:aa:96:cd:
98:a3:2c:79:64:a1:e3:71:ad:6f:b5:94:ee:0e:b2:d4:4f:4e:
81:a1:d3:79:a7:a1:bb:f8:8f:1b:af:38:36:87:fc:1b:7d:c2:
16:0e:ef:f5:b7:a4:31:d6:f8:3d:d7:e4:ba:0e:57:8f:ae:b2:
f2:e7:59:ae:f7:a1:19:c7:88:7e:52:30:1e:88:34:87:48:68:
eb:82:ed:6c:4c:9f:9a:b0:2b:a1:d4:f2:dc:71:21:66:ee:f4:
26:86:c8:38:75:30:b3:40:cd:26:c8:7c:e4:32:4a:b7:1b:6a:
93:28:58:20:ad:be:56:98:d4:e0:10:ea:01:8a:a1:0a:99:69:
6b:28:d2:20:11:72:e5:52:9a:04:2e:fb:eb:6b:87:62:d4:d8:
f6:fc:7c:07:be:b5:a7:59:f4:92:e7:ec:db:db:98:34:b8:4f:
e1:15:0f:4d:57:75:68:2e:c5:98:58:76:75:09:86:10:15:95:
89:5d:ee:35:97:5c:76:28:ed:ab:6e:cf:ae:bc:ae:f6:47:a0:
ee:a9:8b:b0:d9:00:aa:45:11:b0:3b:05:3b:46:ad:38:55:13:
60:ee:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:42 2026 by rpki-client