
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: Uhi1OaJ+d70lezxBJXL3RwyQdY+9WeVdST5jj1KiIGY=
Subject key identifier: F2:44:63:39:78:2D:16:9E:7A:E7:86:5A:D7:07:7C:9C:5C:A0:20:50
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: CC
Signing time: Thu 21 May 2026 06:53:30 +0000
Manifest this update: Thu 21 May 2026 06:53:30 +0000
Manifest next update: Thu 28 May 2026 06:53:30 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: /8Y6CGmFy7PSNXwehSr78bd22zI8tnNmiE8Ke9NYCkw=)
2: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: z9lBCM2YReTvWnOO7UOQ4Z/V5QvjzGlZ8HP+HdhlsEo=)
3: E7930D061E6111F098E32F79C4F9AE02.roa (hash: RmTfAxmFDKtRdCkYRFuzlxslcEJJ6dHJkRgwrVvJ4ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: May 21 06:53:30 2026 GMT
Not After : May 28 06:53:30 2026 GMT
Subject: CN=6a0eabea-573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:b9:e7:08:fa:c0:c0:31:64:95:8d:01:5f:
49:02:34:e1:8e:e6:77:75:84:ed:0a:03:d1:ac:e2:
74:62:3a:b8:8f:5e:77:41:c0:86:6f:b8:c3:59:d3:
a1:1f:18:c6:ff:24:29:65:bb:1a:11:0f:7f:97:69:
d9:38:13:49:29:b4:50:ad:0e:6a:18:1a:22:6e:73:
28:7c:67:73:cf:90:b8:59:3f:e0:5d:91:42:81:06:
7b:1c:5d:0c:9f:72:d9:8e:e8:1b:87:66:df:85:e2:
84:11:53:1e:4e:d4:b7:a8:db:dc:9f:66:12:ac:89:
87:34:df:5d:2e:a1:0a:d3:f3:63:58:35:72:1d:f1:
25:d5:64:65:d0:92:e8:13:d7:f1:e5:78:4d:90:c1:
70:bf:fc:b8:9f:33:7b:15:29:d5:c9:fb:ba:70:99:
bc:7d:56:61:f4:53:d3:de:2d:21:3e:d0:76:01:be:
49:58:b0:44:df:9b:4b:2a:f6:06:94:5a:fc:f8:46:
68:4c:1e:57:15:97:3e:c5:18:d0:13:75:80:04:ab:
69:f8:e4:8e:11:bd:06:0f:20:84:e4:b3:0d:74:f9:
d0:d5:7d:ba:7f:9b:a6:0d:e0:43:e8:6f:77:9b:9f:
c7:a6:cc:41:ef:de:f9:b0:15:7c:c7:75:81:03:60:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:63:39:78:2D:16:9E:7A:E7:86:5A:D7:07:7C:9C:5C:A0:20:50
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b3:27:89:14:b9:4e:bd:9f:6a:b8:a4:30:83:be:35:fc:b1:
67:47:64:d4:8d:38:12:05:24:e0:33:d1:ac:82:29:d4:47:c2:
94:e2:76:83:3f:2d:b2:e9:95:ad:14:e4:f0:ac:5e:80:c1:bc:
72:9b:0f:0e:bd:e0:f5:b8:77:c3:06:47:e6:3d:b2:74:85:a4:
9d:ea:da:45:b0:d7:7f:f2:3c:c1:23:17:e6:8b:ad:76:ad:92:
a7:e8:01:8c:c0:73:e5:a8:20:67:5a:45:c4:67:2f:f3:a3:c4:
5f:1c:d8:14:a5:a3:d5:07:47:62:43:1e:1e:ff:62:30:39:db:
47:94:02:b5:4a:1c:83:45:9f:ec:31:87:35:02:a4:a0:d2:e2:
3c:dd:52:64:b2:28:4c:00:f8:0b:2e:46:31:f7:51:97:09:20:
d6:99:fe:3e:95:e1:b1:6e:0a:e7:db:7b:13:21:75:91:37:2d:
41:59:47:a4:d2:08:d0:fc:a6:f2:66:5d:63:24:48:60:5c:49:
4d:4b:5d:71:07:07:13:a3:f4:a0:ca:c2:d0:14:65:4c:22:ab:
72:80:d8:e6:42:4e:f6:74:ed:19:7d:c0:ae:2a:91:09:59:2d:
dc:33:3c:af:c2:33:4f:db:21:4e:1e:71:e0:8a:9b:c8:74:a6:
73:94:5c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:13:00 2026 by rpki-client