
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
File: 0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json)
Hash identifier: SAJZEdHYELXhCkUEJ2Nmd9m4P2N29I9R9/3S4HUOkDI=
Subject key identifier: 89:9D:27:58:E7:2D:C8:1A:62:EC:35:F0:E0:9B:93:65:99:02:E5:F2
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Certificate issuer: /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
Manifest number: 56
Signing time: Mon 27 Jul 2026 10:34:51 +0000
Manifest this update: Mon 27 Jul 2026 10:34:50 +0000
Manifest next update: Mon 03 Aug 2026 10:34:50 +0000
Files and hashes: 1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: iF8aqkb69tz1YphPuYJY3NIOgg4w4F5/ORLhon89vCI=)
2: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=)
3: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Validity
Not Before: Jul 27 10:34:50 2026 GMT
Not After : Aug 3 10:34:50 2026 GMT
Subject: CN=6a67344a-21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:aa:26:25:29:5b:f6:24:5b:db:a0:79:dd:
ae:cd:77:4e:ca:4a:2f:7b:93:06:1b:3e:0b:66:56:
e9:fc:7e:cf:a2:33:36:af:10:b8:75:06:3b:10:4c:
0a:b0:35:10:bb:d3:ef:16:78:0a:f1:7d:90:25:1e:
5d:50:34:dd:22:14:1d:20:1f:da:30:61:ac:b6:ae:
a6:6f:d1:d7:74:d2:cc:41:9e:da:5c:c3:3d:90:26:
d2:b4:de:b7:c9:3a:d3:57:e2:4d:f4:a0:9b:0e:3d:
6a:3d:d9:90:11:03:5a:f4:93:1a:89:a0:34:8b:16:
62:e9:69:59:be:88:c0:40:74:1f:73:40:d4:7d:a6:
da:a3:75:1a:7d:bd:51:02:d9:56:ad:36:39:a0:49:
9f:70:96:02:f0:34:9a:9c:57:9f:a7:fb:10:24:3f:
77:b0:e8:4b:b2:e2:d0:c6:cb:fa:68:1b:4d:d9:4d:
e8:f4:ce:34:82:e4:fd:fd:bb:62:dd:99:8b:f2:ac:
a8:0f:37:f6:34:3f:40:22:f9:8d:96:72:13:91:34:
4f:d7:ef:01:90:85:84:e8:b5:d7:5e:a3:b2:16:23:
f9:71:27:ef:44:a7:fb:b0:f5:00:b1:a3:c7:1c:de:
9d:1d:53:24:a8:86:43:71:3e:06:d7:3a:3f:e7:27:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:27:58:E7:2D:C8:1A:62:EC:35:F0:E0:9B:93:65:99:02:E5:F2
X509v3 Authority Key Identifier:
keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e8:16:c5:46:8e:32:ed:dd:27:57:24:dc:44:c8:dd:88:ba:
e4:b0:69:59:66:67:e8:76:38:0d:c5:58:af:2c:18:59:76:56:
ce:e6:69:5c:0e:a9:9d:96:cb:d9:5c:40:a9:d1:b9:4c:9f:3e:
0d:73:79:55:58:b5:26:2e:a0:65:6d:86:1c:4e:5f:17:d1:54:
4b:33:aa:1a:d8:58:a4:60:75:f7:67:8c:67:5b:d9:fd:04:2c:
dc:d4:1c:8a:e6:49:42:b7:7d:65:42:5f:d3:74:45:1a:e6:8c:
98:75:86:d3:5b:3c:93:9d:91:93:a6:eb:b3:df:0a:90:b3:5b:
15:cf:82:2f:ca:83:bd:9b:11:3b:cd:97:6a:ae:92:6b:dc:1d:
ea:ea:d5:1e:15:3e:75:02:0a:61:2e:e2:9d:d7:74:60:d8:11:
85:6c:b0:d5:01:95:fe:9c:45:86:0d:84:67:d5:a9:b6:30:f0:
da:6a:b2:d1:d7:1f:37:7d:4e:37:37:87:53:61:c3:b6:aa:66:
65:56:b1:aa:ba:52:75:66:82:f2:bb:2a:a7:ed:3f:44:27:a5:
83:9b:a3:02:11:3b:c0:f5:2c:fc:68:03:dd:e7:fc:d7:d6:2a:
00:00:b1:01:93:5d:1a:bf:30:8f:cf:56:3f:6e:74:eb:57:bb:
f0:6f:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:30:00 2026 by rpki-client