
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
File: LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json)
Hash identifier: rzpNAkcKl+psT1m4femcwHUpYdoL+w46VhM5HXujDHo=
Subject key identifier: 39:75:B3:B4:48:35:6F:7A:DD:CA:7E:AA:6C:13:72:EB:53:83:ED:C6
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
Manifest number: 02B7
Signing time: Sun 05 Apr 2026 01:11:52 +0000
Manifest this update: Sun 05 Apr 2026 01:11:52 +0000
Manifest next update: Sun 12 Apr 2026 01:11:52 +0000
Files and hashes: 1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: szXS8R8HF6vb38RIoA0l1xF6ojbKLA/WkjWE0vbTP5Y=)
2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: FkAIc4PkSrjwjHI3WuneOyjO69joINPbfIEPkCYw/A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Validity
Not Before: Apr 5 01:11:52 2026 GMT
Not After : Apr 12 01:11:52 2026 GMT
Subject: CN=69d1b6d8-3cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:9b:f8:9b:69:b9:49:5f:24:55:30:08:8d:
77:91:05:43:19:17:dc:17:f7:19:43:6d:e4:ab:39:
81:e8:a9:43:3b:b4:63:21:24:93:e3:3f:ba:68:2a:
9d:69:be:07:fe:4f:9a:cb:66:63:e2:de:ab:0d:c8:
04:db:23:de:02:23:86:ca:53:1c:f0:29:93:86:b0:
82:51:92:af:51:91:19:1b:6f:a3:2f:3e:18:46:7f:
0f:74:93:9b:0a:05:ca:2d:42:7c:a8:db:10:c4:93:
9f:ff:09:7f:ac:43:61:42:a3:c2:4b:4b:9f:65:14:
2b:d3:69:d5:93:6a:51:7e:91:d5:42:68:b6:54:eb:
3e:6a:6e:6c:8a:84:af:63:75:05:eb:9d:a9:a1:57:
aa:70:46:e0:9a:64:70:4e:f2:b0:d9:d3:7d:18:1b:
49:97:e7:cc:2a:44:b2:18:8a:f0:f0:34:20:6c:2f:
70:d6:68:66:b4:f7:e9:61:c3:33:71:40:7b:e4:5a:
72:f8:ba:b7:5b:c9:b3:09:47:90:12:2e:b3:74:37:
35:4d:15:b1:cd:48:a1:90:78:fb:c5:37:87:60:0a:
3b:8e:ad:22:5d:da:23:ac:00:aa:2b:0e:31:c4:2a:
75:4e:b8:b0:e6:65:4d:b5:a9:b8:d7:9a:1d:8a:90:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:B3:B4:48:35:6F:7A:DD:CA:7E:AA:6C:13:72:EB:53:83:ED:C6
X509v3 Authority Key Identifier:
keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:e1:69:88:91:3a:31:1b:36:54:07:5a:36:cf:18:e6:71:
b6:5d:bd:70:d6:92:75:12:b1:11:b0:c4:7e:0e:e9:bb:19:d4:
14:52:27:4e:be:12:82:fd:f5:a8:e7:0e:48:56:33:00:f1:7c:
4f:94:c0:e5:46:db:25:88:34:f9:6f:83:dc:c8:8d:f7:dc:d5:
90:30:f8:0d:2b:b1:0f:d1:64:4a:3e:53:d8:08:59:4b:d3:46:
37:ca:db:5a:88:5d:56:46:90:19:f2:85:80:70:e4:9f:20:ac:
8d:a9:62:c9:06:82:df:40:54:d4:45:1d:54:88:d9:42:b6:1a:
82:4e:b1:71:46:c8:f1:6c:78:21:86:a3:a8:84:c9:3f:f4:c3:
e0:98:bd:93:2c:f6:f7:29:27:fc:a6:86:a2:93:d3:4f:09:bc:
f6:21:e6:da:0e:cd:61:6c:f5:a1:ea:12:fc:c4:08:27:83:9f:
0e:30:a0:15:91:d7:c6:81:cb:36:80:63:4a:54:7c:ec:37:e3:
30:df:c4:f3:e9:3f:3e:88:1d:1a:9b:b3:15:82:ba:9b:9c:dc:
8f:14:e6:67:c6:dc:1c:4d:50:ce:0f:a1:d2:7b:65:6f:6d:e2:
c6:05:ea:c2:08:53:8b:d2:71:36:7c:8d:d4:f3:53:2e:15:62:
2c:ab:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:58 2026 by rpki-client