
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
File: LVzM98MOtjzd6jS-g75guw4CehM.mft (raw, json)
Hash identifier: aQQwrdk/LgkmDSOJlziZKXpIAS0plXGmzT9K6eel6dM=
Subject key identifier: 11:7A:DB:71:89:01:BB:C8:9C:14:9A:71:D2:4C:A8:DC:E5:28:D1:B7
Authority key identifier: 2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13
Certificate issuer: /CN=A919F10A/serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13
Certificate serial: 0BA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
Manifest number: 0B98
Signing time: Mon 02 Mar 2026 01:22:27 +0000
Manifest this update: Mon 02 Mar 2026 01:22:25 +0000
Manifest next update: Mon 09 Mar 2026 01:22:25 +0000
Files and hashes: 1: LVzM98MOtjzd6jS-g75guw4CehM.crl (hash: TjIkRsl38eUT0lENii5pRHVNYFcC1syxFX130Xr56f8=)
2: AE5FD48E431911EAB8FF4125C4F9AE02.roa (hash: tggHltPVXTJjz5ngvJIFKrqer8Rn9HQv/nqVTV84M/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl
rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2979 (0xba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F10A, serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13
Validity
Not Before: Mar 2 01:22:25 2026 GMT
Not After : Mar 9 01:22:25 2026 GMT
Subject: CN=69a4e653-9557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7c:10:e0:ae:df:62:0c:e1:1a:48:f1:9e:46:
41:2f:62:32:e5:b8:be:47:df:b6:d4:86:ca:f5:ae:
c3:aa:b1:8d:8b:d9:e9:b6:a9:37:d3:dd:6d:8b:7a:
9d:c3:2a:d1:26:cd:d1:90:d2:5d:81:0f:39:41:8d:
05:70:40:b7:da:28:5b:84:23:72:59:6e:b4:a6:67:
1c:b7:55:b3:1b:a3:2d:61:3a:ef:2a:84:21:97:fb:
5d:65:7a:1c:d4:af:9c:5b:fb:81:39:09:b7:ca:17:
7c:4c:60:b9:d9:74:e7:b6:f1:f3:c9:bd:d7:0f:65:
6c:6f:ab:f7:3a:04:89:b2:0f:1a:b7:67:62:44:a7:
49:51:50:ad:c5:fd:d8:97:bf:3e:b8:65:7c:da:3b:
88:e3:a4:48:28:18:a2:25:ec:9b:43:c0:fa:36:73:
cd:ae:89:5a:df:ce:cd:06:16:0e:cb:e9:28:d4:61:
e0:d7:64:ed:4c:ae:2f:41:a0:4e:77:28:dd:3f:af:
a7:f5:d9:4e:84:77:1f:be:a5:49:42:10:bb:67:81:
a3:82:51:dc:d9:97:94:eb:a2:e7:3e:3b:c1:72:99:
79:d1:e1:dc:43:b1:a7:1e:f0:82:e9:ee:43:f7:12:
e3:e0:88:f8:04:d7:44:15:b4:46:62:b6:4f:e6:f5:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:DB:71:89:01:BB:C8:9C:14:9A:71:D2:4C:A8:DC:E5:28:D1:B7
X509v3 Authority Key Identifier:
keyid:2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:9a:1f:bd:14:03:b0:da:6c:39:f1:53:09:d3:26:7a:f5:
31:a0:fe:7e:25:f2:82:d1:d9:aa:01:f8:68:71:33:a4:8b:eb:
5f:95:ed:95:4e:b2:5c:0f:71:56:21:9a:01:2e:14:aa:61:45:
8e:bd:54:cd:60:cf:43:ea:3f:84:09:8d:a6:8d:fa:82:de:bb:
a4:4e:66:22:78:bf:58:11:50:ed:0c:35:34:46:42:f2:82:c5:
06:33:10:b5:46:de:e5:73:4e:b1:9e:d3:e7:59:bb:b8:eb:0d:
c7:2f:0c:ab:17:8f:8d:fd:5a:f3:8d:96:76:b6:9f:9f:fb:51:
bc:22:20:31:5d:16:a7:85:1b:30:63:16:03:a6:1e:07:09:ac:
c3:16:b2:1a:6d:c0:87:99:e9:1d:b6:97:69:3b:0d:0c:c7:c1:
ee:c3:24:46:1c:29:24:5f:ae:7e:32:f4:69:67:23:73:6c:61:
6d:97:cf:a1:d6:72:80:83:4a:c4:f0:c7:9c:bf:52:9c:f1:b4:
da:a3:9e:d8:78:2a:16:1c:7b:bf:07:6d:3c:d8:0b:35:b5:cf:
cc:64:61:b4:00:55:3a:83:85:54:a0:5e:d6:56:53:79:5a:1b:
29:b8:e8:8a:59:ff:ea:a5:df:eb:8e:16:ee:bf:d5:36:6e:9f:
ee:4c:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:09 2026 by rpki-client