
$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier: H52LFuRjeP1F1pH5kfPoFCrEmbQB7m667gw0HKPNkjA=
Subject key identifier: DA:4C:47:A5:F2:AF:72:C1:B3:D0:EE:ED:A2:C6:C8:BF:8B:DE:0E:D2
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 0C34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number: 0BFC
Signing time: Tue 28 Jul 2026 19:12:12 +0000
Manifest this update: Tue 28 Jul 2026 19:12:12 +0000
Manifest next update: Tue 04 Aug 2026 19:12:12 +0000
Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: B5kf5Yb0ilGzDmM/hMYGjzf4TnGxs+JVWe0chEuW4h8=)
2: 856D71DE021D11F18B736F00496F56BC.roa (hash: a/UgAx4cP23xBKUXkuXkulL3xR54CJ89nH7g3WJITWs=)
3: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: OsKpmn4d4PR+9xigCzefdFcY4eHlBHpLVwQgzWBMDnY=)
4: 86850E56021D11F18B736F00496F56BC.roa (hash: t1YOO3CTB2wqmZ9Z1apALeTPXX0rA5ab+0BE/sJrH9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3124 (0xc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: Jul 28 19:12:12 2026 GMT
Not After : Aug 4 19:12:12 2026 GMT
Subject: CN=6a68ff0c-a328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:fa:8f:4c:9a:b0:66:81:e8:99:62:ea:dc:
59:d2:68:6d:6f:d7:77:90:63:66:a7:f6:f3:94:c4:
85:0b:fc:6a:91:b6:16:28:3c:c2:f6:53:03:cf:89:
ff:52:00:df:a9:00:21:ff:7c:67:cb:26:d9:32:0c:
ba:54:03:61:e8:30:01:89:06:99:9f:b9:c5:a3:9b:
2c:e0:c9:23:f5:62:50:5e:bd:ee:d8:3f:6a:c7:8c:
91:99:27:94:f7:bf:25:6d:5c:a2:6a:8f:32:39:8b:
56:2d:73:5f:32:d6:a7:4c:68:36:70:30:10:89:6f:
99:e1:f6:72:a7:09:31:10:6f:fe:f3:ec:8c:83:4a:
92:09:2e:7b:ef:3a:4f:52:96:7d:42:cf:3d:3c:07:
d3:9d:0e:49:b5:1e:24:6b:df:a4:7b:f3:ed:c3:68:
d3:77:40:81:48:15:ff:bc:83:79:51:70:2b:fa:59:
60:6c:dc:4c:bf:3c:bf:4d:f3:c1:1c:70:22:60:d7:
fb:9c:1a:f2:e2:d9:ce:f0:b1:ea:03:ea:ef:de:5a:
a4:41:a1:da:cd:27:ed:a8:7c:a9:11:4f:c6:51:94:
43:ab:82:31:51:6f:95:15:21:6d:62:3e:a8:10:74:
35:30:76:b1:39:58:21:ff:3a:e0:75:12:db:d1:6c:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4C:47:A5:F2:AF:72:C1:B3:D0:EE:ED:A2:C6:C8:BF:8B:DE:0E:D2
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:72:38:58:51:dd:5a:26:4b:3d:30:e7:71:94:d2:6b:8d:9f:
67:db:8b:e5:42:e3:98:ad:d0:45:97:39:d1:28:f2:95:34:99:
3d:4b:1e:a9:f1:71:96:09:ad:17:4b:9f:df:8c:f4:32:85:db:
61:b3:2c:41:41:59:9c:da:f9:a9:09:66:4e:23:48:8e:6d:08:
ea:7a:a4:f4:13:cb:7e:7a:50:cd:c6:35:ca:e4:25:14:d5:06:
e3:3a:39:7b:36:1e:73:a6:d0:07:fe:7f:c3:de:f8:f7:f3:68:
a4:ee:7e:a3:42:06:1e:0d:ff:4f:1e:31:84:d0:5d:40:eb:0f:
04:43:e4:57:f4:5a:33:d7:13:3a:7c:0d:84:ae:58:39:b2:c9:
87:7e:e8:4f:de:a2:bc:bd:0a:59:2b:bc:9f:62:00:a1:b0:ca:
7c:20:36:4b:d4:27:ba:08:f4:25:5a:72:20:19:ba:2f:f4:02:
fa:1a:f6:5a:19:d6:55:bd:5d:d7:4e:82:47:47:56:33:87:fe:
7b:65:86:72:26:a1:ed:80:a9:3e:fe:63:9d:9a:54:5b:a7:b8:
95:e6:3e:c1:3f:c7:98:5c:ce:d0:0b:b5:ce:0b:84:fe:bb:d6:
0e:30:c6:11:d3:7a:3c:5d:78:79:a5:e6:77:2e:f2:09:f0:60:
3a:d0:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:32:34 2026 by rpki-client