
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier: /HNjtPEFmBhYsnX489aw5vDilxxclH76CbWrRXifDjs=
Subject key identifier: 1A:3E:4D:FF:7E:28:63:A6:91:A7:F5:60:95:98:F1:66:EB:2C:E7:58
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer: /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number: EE
Signing time: Tue 21 Apr 2026 06:15:00 +0000
Manifest this update: Tue 21 Apr 2026 06:14:59 +0000
Manifest next update: Tue 28 Apr 2026 06:14:59 +0000
Files and hashes: 1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: VByLzZqHZ3Omh4PNRV3ddIyNBIjTP6sDt385vFRjYt0=)
2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: zpf55g2EZGmJ8domoDiH0XWR0tTe31ZdyOLgVVw44Oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Validity
Not Before: Apr 21 06:14:59 2026 GMT
Not After : Apr 28 06:14:59 2026 GMT
Subject: CN=69e715e4-87fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:49:a7:e7:ef:de:df:a1:a2:0c:8b:5e:fa:
24:00:e3:36:ed:0b:2c:76:93:c4:32:d4:1b:b9:d5:
20:54:89:0a:1a:34:44:3b:34:3c:d9:8a:65:f3:cd:
4f:2e:05:45:91:71:88:35:71:11:b2:82:f6:e9:2e:
79:b8:1b:ba:87:5f:39:d8:07:94:b2:60:c5:ab:3d:
69:52:a5:82:c7:3c:a6:b0:bd:5a:c2:e8:bc:db:48:
8f:70:73:b3:f8:d7:46:d1:9a:69:25:91:8a:de:b8:
be:eb:dc:7e:76:72:46:8d:02:6f:ec:0d:16:f4:fb:
c5:eb:74:b4:ac:00:33:4b:2f:1c:f9:e0:87:57:ab:
ed:2a:24:f7:20:ba:96:88:76:db:f6:cb:ca:7f:3c:
af:aa:9f:bb:79:b5:96:2e:b9:d4:21:5a:4a:f5:63:
42:1f:37:03:f2:12:27:97:cd:13:98:35:8b:b0:4a:
8e:98:38:3e:2e:ea:8b:96:86:f2:75:bf:98:a2:c6:
c4:b0:63:57:7b:d3:07:d9:91:6f:26:bf:f6:df:4f:
d2:61:26:32:55:72:7e:dd:56:69:c9:65:68:ca:9c:
f3:54:a9:b5:b7:1a:3d:4b:e7:a3:3a:95:29:3a:41:
99:b3:2c:9a:4b:e8:c1:b2:ac:e7:c0:56:1c:89:53:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:4D:FF:7E:28:63:A6:91:A7:F5:60:95:98:F1:66:EB:2C:E7:58
X509v3 Authority Key Identifier:
keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:bf:c4:44:db:50:75:a2:68:13:8e:b6:ce:e1:06:d8:ad:
3c:03:f9:a7:fa:2e:cd:1d:c4:73:5d:ee:12:7b:8c:c5:3e:67:
80:6b:a3:5d:6b:2e:48:b0:b9:0a:ae:21:45:57:d9:b9:b2:94:
92:1e:79:fe:6a:09:b7:8c:7b:a1:4d:be:8d:76:fc:87:a6:6c:
05:19:ee:25:3b:7a:78:80:ab:ef:6c:09:16:f5:30:86:a5:79:
f5:43:9c:f8:82:27:33:3b:5a:1f:ce:ab:73:af:9d:8e:a7:4c:
2f:45:15:2d:56:ac:3f:aa:d1:67:b8:c9:1f:62:c3:17:ca:45:
e9:dc:70:f9:e6:6e:f5:e9:5a:f7:08:49:80:8f:3f:4d:41:6e:
45:89:0f:37:86:06:d9:ef:8e:53:8b:b7:f9:54:1b:34:58:a2:
bb:69:c6:4b:fb:02:5e:a7:7b:68:79:ff:d4:a3:b6:63:84:ab:
7c:c0:4b:ba:81:a6:2b:a5:2d:2b:32:ca:5a:93:9e:89:b8:7c:
38:6d:dd:00:1d:30:e5:ea:96:89:c2:97:3a:c6:9f:95:05:85:
44:a7:4b:5a:43:01:fb:ff:2d:c0:7a:61:be:82:24:7f:0a:12:
de:7f:96:bf:a6:42:3f:a5:33:28:7b:9d:55:27:42:77:69:ef:
9b:e1:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:36:55 2026 by rpki-client