
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier: co8unIspTol/2O25ogZGfOtTmseN71n9axxKjoXyw54=
Subject key identifier: D8:EC:E4:AA:EF:49:62:7D:F1:BC:FA:9E:C1:9D:A9:8A:AB:42:E2:BB
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number: 0127
Signing time: Mon 31 Aug 2026 06:26:19 +0000
Manifest this update: Mon 31 Aug 2026 06:26:19 +0000
Manifest next update: Mon 07 Sep 2026 06:26:19 +0000
Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: BgbS4eJKEviOMDOliWlspSvWkRQbStHSjOs7KDI8nAM=)
2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=)
3: C8171E8EC04D11F081466417C4F9AE02.roa (hash: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=)
4: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: KaHspWR0HemZK0q9LOChU8le2zgj9l3UI0kexYlJ+/g=)
5: A679A90E6ACA11F19C5D49226847A888.roa (hash: HlE4/rCdBHaYQMrVtMYhseWs8raS1AuMlQ1WnzgrFwc=)
6: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=)
7: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: emwrRh6MHxR/MKG/kZ4kbsedosRabW/yCqw67x249ko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 06:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Validity
Not Before: Aug 31 06:26:19 2026 GMT
Not After : Sep 7 06:26:19 2026 GMT
Subject: CN=6a951e8b-80ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:32:60:f6:65:51:54:7d:f2:78:10:d7:8e:
01:8b:a5:cf:bd:43:a9:b5:4b:97:0f:39:f8:9d:43:
4b:1b:3d:a9:bb:2c:90:f3:29:98:87:6e:8d:7d:3e:
d5:7b:45:a4:0a:e0:ea:62:94:22:2a:8c:1a:6a:36:
c1:9f:b5:ee:40:7b:98:1b:a7:81:7a:ae:6c:74:cb:
a0:12:50:66:f8:aa:7c:dd:d8:5e:88:53:70:4e:41:
c8:bc:69:dd:42:7e:22:9a:08:40:01:90:7a:86:61:
db:9e:b8:fc:97:a6:f9:db:83:24:63:7a:e7:c1:19:
d3:29:b4:78:02:80:18:91:31:02:de:87:6c:fb:c4:
cb:ae:4d:ef:e4:81:b0:a1:2a:f8:30:0d:fc:18:19:
67:db:e3:9c:84:83:d7:4e:b9:eb:ad:a3:49:83:b0:
36:61:ca:c7:aa:a4:5f:04:c5:49:d3:9b:61:85:8d:
fe:ba:ca:e2:0b:0a:80:83:cd:7d:c5:d4:28:10:84:
5e:58:2c:d4:ea:e7:8f:e0:23:4c:0a:07:c7:25:ff:
4a:6d:5b:26:84:bc:4e:6b:e9:9e:c6:76:0e:40:7f:
4e:8a:44:3e:d5:aa:76:8b:52:0b:28:0e:01:87:78:
b5:d2:16:1f:35:24:b9:49:c3:06:55:46:3f:d5:3e:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:E4:AA:EF:49:62:7D:F1:BC:FA:9E:C1:9D:A9:8A:AB:42:E2:BB
X509v3 Authority Key Identifier:
keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:da:16:cf:6b:c2:7b:43:63:e2:33:59:b2:57:08:e6:4f:d3:
03:a9:0a:dc:01:0f:14:b1:13:90:c6:e7:ad:eb:6f:0f:09:28:
d9:1c:f6:61:d5:35:09:37:d2:8e:40:18:b8:32:ce:7e:fa:97:
be:6c:ab:64:87:f2:75:6a:68:12:ac:48:f9:74:9c:58:00:be:
6d:90:53:57:f8:a0:e8:5c:48:8c:06:7a:a2:ca:81:76:b8:8f:
4f:62:23:06:e5:31:97:4b:eb:91:31:d7:a1:f4:f0:d9:30:2c:
ab:69:a8:9a:18:6d:ed:c4:07:bf:7f:89:2c:1d:c9:30:54:ea:
8f:25:ca:e3:df:5d:fa:00:b4:85:e5:ca:6f:e7:3f:10:9a:fe:
a1:68:6c:cd:54:a2:be:17:a4:fd:5d:13:21:22:af:7f:cb:34:
a8:b8:36:11:a9:e9:57:ef:9b:0c:46:f8:a9:4f:58:3d:21:69:
1f:e4:1d:a4:42:58:dc:72:b0:c9:a3:76:dd:ec:54:c0:b0:37:
c4:e8:ee:77:91:c2:0c:75:0d:47:59:6a:7f:1f:8b:39:7f:f0:
9a:52:ae:cb:58:da:7d:83:4f:c0:e5:ff:64:30:23:f8:35:17:
b2:f5:e2:24:d3:c8:90:e0:9a:1e:52:0c:30:f8:3f:96:d3:5e:
5f:ec:5f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:57 2026 by rpki-client