
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json)
Hash identifier: KRb2m/K7/KhlpTSt+dzdu8PpHDcQ4RgAK2yIDz1rl6A=
Subject key identifier: 9A:41:10:D9:80:AD:58:F3:B9:C7:76:89:61:B5:6F:A8:AC:72:9E:2D
Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Certificate serial: 07B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
Manifest number: 07A3
Signing time: Fri 04 Sep 2026 21:22:45 +0000
Manifest this update: Fri 04 Sep 2026 21:22:45 +0000
Manifest next update: Fri 11 Sep 2026 21:22:45 +0000
Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: +OumKHC+PH9IRJ9LNFHoNegrbwUtyrI/ms6YBWXd480=)
2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Validity
Not Before: Sep 4 21:22:45 2026 GMT
Not After : Sep 11 21:22:45 2026 GMT
Subject: CN=6a9b36a5-022d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:02:dd:05:e7:40:08:07:ff:e4:75:e3:66:2e:
d0:17:07:bf:52:3d:ab:50:1f:0f:07:99:95:42:5a:
e7:5d:09:d3:50:34:1f:d1:7f:ed:46:c4:4e:aa:2b:
65:e7:0d:aa:7e:3b:6e:cf:d6:73:39:52:fa:11:e7:
06:de:9a:3f:d9:89:a0:5e:38:58:cf:0f:54:7b:4d:
57:99:2e:ef:ad:53:74:6a:f3:74:57:67:d9:72:67:
8d:d2:1a:f4:18:bd:c4:51:28:3a:a0:9f:83:43:36:
bc:66:fe:a3:9f:27:e2:d1:6f:23:f7:99:2d:f5:15:
44:90:bf:f3:05:02:e1:07:1c:b4:7f:ea:2d:57:ab:
69:41:b5:0e:bb:f7:46:e0:c3:5d:6b:90:ce:89:ac:
c1:6f:cb:5d:97:20:f7:cc:1c:d2:d7:0e:3f:ce:28:
57:2e:38:b9:8e:fd:9b:fc:0e:83:20:df:c1:4f:7c:
3c:d1:76:1b:ad:79:b3:4a:3a:37:a2:f5:4e:5a:25:
64:f0:db:cd:7b:5c:c3:50:e7:8c:4a:8a:f0:60:b1:
6b:45:45:3d:2e:0a:22:31:a8:85:d5:bd:e5:67:d5:
05:83:42:77:48:b2:67:3d:d9:2f:20:68:b1:f3:d0:
7f:bf:db:9b:bc:f1:78:b9:ba:ff:0a:58:ab:7d:8a:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:10:D9:80:AD:58:F3:B9:C7:76:89:61:B5:6F:A8:AC:72:9E:2D
X509v3 Authority Key Identifier:
keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:08:f1:88:95:57:d8:4d:a1:e2:78:bf:e9:f1:ad:49:c5:aa:
c8:b4:c8:9b:ed:00:fb:e1:bb:b5:91:aa:70:1c:2b:29:66:d2:
c1:db:a4:ee:fc:16:df:43:0a:df:88:67:86:eb:8a:b7:66:32:
eb:3a:8a:81:1b:bf:e3:93:f1:98:ab:88:21:43:60:f7:e8:4f:
c5:92:4e:28:b5:e3:98:1e:b2:4f:8c:91:f7:c7:62:ca:63:e9:
fd:fc:b5:6f:e7:05:51:94:32:56:a0:31:b6:19:d8:0c:53:01:
d8:6e:13:00:4e:36:0b:21:10:6d:9e:af:09:5e:0a:43:5a:0d:
72:df:2f:24:5a:71:20:88:ac:69:bd:5d:5c:b1:76:0c:30:ba:
a3:f3:1f:fc:02:de:a0:c6:f8:c0:8f:03:50:78:a6:f1:1f:97:
9e:a4:21:88:7e:1e:70:53:de:c5:de:89:18:6b:2a:12:77:59:
5a:2b:ce:d9:09:f2:e1:ad:17:11:1d:1d:15:86:85:c0:1c:af:
a0:58:52:a0:53:dc:46:62:dd:a0:93:ba:1f:a9:86:30:de:32:
c6:8e:c5:ba:b4:08:9c:d6:d7:9b:e8:01:ea:ee:dc:81:ce:8a:
6b:f9:94:23:29:2f:b5:84:df:85:ba:dc:15:75:6c:92:3f:37:
e4:8c:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:25:24 2026 by rpki-client