
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: /2lcnmiaEwTtRfTlSrA/Edquq8brpJdnItzGP+O734M=
Subject key identifier: 12:28:B1:52:8A:61:54:EF:9A:7A:AB:F7:0B:E4:AF:FD:49:27:23:01
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: B3
Signing time: Sun 05 Apr 2026 06:28:01 +0000
Manifest this update: Sun 05 Apr 2026 06:28:00 +0000
Manifest next update: Sun 12 Apr 2026 06:28:00 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: uEnY/vh1N/P8PE0Hvc0ASDuE6FvVjmWeHfl+2Y2ONcw=)
2: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: t6ZSVMbsxuBBJVxsfnJR2/4SpjFBD9tweOs5BjzUU9w=)
3: E7930D061E6111F098E32F79C4F9AE02.roa (hash: tRzWam95vSpEscniZPqXRHQpti8KQpPkufP+tHJBdpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: Apr 5 06:28:00 2026 GMT
Not After : Apr 12 06:28:00 2026 GMT
Subject: CN=69d200f0-a405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:1c:a6:41:ed:19:39:5d:d4:17:b9:79:c1:
b6:6a:94:c3:8f:f8:a8:94:6b:45:e6:9f:2f:a1:1d:
94:6e:c4:21:9a:35:22:8d:80:d3:16:75:4f:90:a9:
1a:ad:e1:a3:70:26:72:aa:03:6e:e4:1d:21:77:4e:
4c:a5:32:43:29:4c:a3:a5:dd:0b:c3:12:56:eb:d2:
a0:7a:74:17:81:7c:25:c9:32:51:f6:7c:1b:fa:e7:
dd:05:d4:d6:af:0e:f6:b0:54:dd:80:5d:54:c4:b3:
14:b7:ba:be:5f:0a:bd:ab:00:c1:b9:83:d9:e4:bc:
a5:50:08:58:98:8e:ea:d6:8b:32:ec:eb:1f:1f:b2:
ac:a0:98:0c:37:3a:83:79:82:a2:e4:78:29:ac:3d:
30:0a:0c:7f:a8:3a:dc:00:0b:61:2c:34:36:cf:4f:
f6:7d:ba:d1:0f:41:9c:01:c5:2e:c6:a6:81:c0:aa:
cd:8d:40:a5:55:c5:fd:bd:d8:75:a4:f5:9e:94:a6:
16:e4:51:6a:07:35:a2:f6:04:10:81:31:1c:65:9a:
bc:f4:96:14:12:9f:bc:e4:51:4f:e7:ed:11:12:02:
6c:c1:b5:82:23:06:f6:09:5d:2b:1d:dc:2e:4c:4f:
b3:ff:5a:c2:42:0c:fc:2a:ad:d9:99:30:06:16:75:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:B1:52:8A:61:54:EF:9A:7A:AB:F7:0B:E4:AF:FD:49:27:23:01
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7d:08:27:4d:13:d7:b7:fa:5f:4f:48:7b:83:2b:a4:07:de:
3a:04:6a:a9:37:8a:0b:31:46:be:1f:d5:84:32:3e:1b:d7:47:
e7:21:c7:20:19:93:1b:d1:c7:e7:04:33:73:3f:73:e1:b8:67:
04:d4:11:2f:7f:c5:ca:32:cb:d7:56:13:dc:8f:25:ab:13:e2:
48:94:7a:ce:ac:b3:ba:ca:3f:38:da:3b:53:a3:7b:a4:d7:53:
36:66:3a:87:ba:34:ac:92:73:45:8b:c9:f7:ab:f0:14:09:d5:
65:74:e3:66:67:f7:02:7d:9d:d5:3d:80:5b:8d:31:b2:7f:1c:
fd:15:89:98:f0:3b:b8:51:fe:3b:94:b0:77:9d:49:c5:a2:c3:
b7:6b:83:e6:7e:d0:87:90:23:9c:d0:b6:7a:ee:a2:af:99:5d:
cf:1f:82:6c:79:18:a5:43:33:db:74:c5:fe:47:24:44:46:3f:
0f:9d:09:fc:4b:36:72:e0:78:65:fa:f7:7b:e4:69:87:fa:fd:
04:61:e6:9b:44:d1:7c:3c:15:e7:c9:9b:5c:6e:db:7b:89:13:
ff:c8:67:5a:ba:4b:ec:7d:0e:3c:76:17:98:db:77:4b:0e:65:
3a:72:c8:6f:f9:2d:48:43:01:e9:27:e3:bf:c3:5f:2d:ba:b3:
78:51:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:05 2026 by rpki-client