
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json)
Hash identifier: wJLRT7xLP+Uo9uwsnTykrMLFydd+N24SwtoIiMgT5Lg=
Subject key identifier: B3:3D:00:6D:C0:E7:FA:73:F3:03:66:01:E6:2B:31:8E:14:40:2B:3E
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial: 082E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
Manifest number: 0822
Signing time: Sat 04 Apr 2026 20:52:10 +0000
Manifest this update: Sat 04 Apr 2026 20:52:09 +0000
Manifest next update: Sat 11 Apr 2026 20:52:09 +0000
Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: i7v1Xv/QjEXJWSQpypE754b4jWxv6/omfjME5dY2XKo=)
2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: yum8wC57OlDbLTsoFYFFmg3G0eHaYFBCQhxgQarxJdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Validity
Not Before: Apr 4 20:52:09 2026 GMT
Not After : Apr 11 20:52:09 2026 GMT
Subject: CN=69d179fa-f744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:c2:f2:3d:60:7d:18:52:a1:38:19:d9:47:
9a:fd:88:57:aa:b3:2a:df:bc:ce:d2:71:34:0c:24:
e8:73:57:ce:12:89:5b:33:fe:98:ab:5c:6f:8f:b9:
78:35:a5:7b:26:61:9f:31:c5:54:f7:43:11:18:84:
f4:7a:1f:29:28:f9:02:b5:66:50:7f:e3:7f:38:75:
d7:62:6d:be:58:aa:4e:0a:77:d4:64:8e:50:99:af:
2d:c7:63:aa:55:7c:df:4f:a9:55:0a:22:a5:21:1f:
3b:61:ed:19:5e:2d:12:fe:98:4d:10:bf:81:50:6c:
95:36:4b:b2:af:eb:64:b1:e9:22:10:c4:62:9a:c4:
99:7b:e0:2c:9f:a4:cc:69:3b:e4:b1:31:3d:0d:e7:
e1:23:28:15:21:8c:ca:82:e8:e0:08:67:ef:2d:b8:
ab:34:1d:a5:67:ff:6e:c9:c2:fb:cc:9a:69:52:80:
0d:29:19:f8:89:8c:67:34:de:dd:88:cd:90:d6:71:
a6:4d:ef:e1:da:80:14:01:65:b1:cd:b2:c9:cd:a5:
df:18:23:a0:ae:03:83:30:c5:3b:b6:6b:1c:2f:10:
0f:1f:b9:25:3a:75:83:ee:f5:22:51:d2:18:21:08:
b2:17:43:70:0b:66:0e:e1:d6:fc:a0:72:1d:d6:38:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:00:6D:C0:E7:FA:73:F3:03:66:01:E6:2B:31:8E:14:40:2B:3E
X509v3 Authority Key Identifier:
keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1c:d2:5a:5d:a4:ca:fc:42:d7:7e:6d:4b:23:68:69:f0:2a:
de:e7:b0:cb:3a:94:0e:9d:44:79:63:a5:15:89:85:eb:73:44:
e9:f8:a2:fc:3d:8b:c7:86:10:bd:91:85:83:7c:68:5b:32:d0:
8f:cb:56:5b:1f:8a:2b:87:72:30:d0:67:aa:21:5d:9c:71:ee:
38:05:50:9a:70:08:a5:11:9d:f0:fa:ea:05:d4:0c:9d:88:1b:
81:ce:af:5b:6f:06:f9:37:92:e6:95:77:df:79:fb:a6:1c:91:
1f:eb:79:b1:64:ae:3b:da:6c:7e:1b:02:93:05:fd:2d:b3:5e:
4f:e9:57:97:00:ff:12:00:0f:94:c4:0f:85:dc:ce:7c:54:cf:
25:f4:00:24:8c:e1:38:57:ee:ee:83:f7:30:1e:b8:86:9e:bf:
05:0a:bd:3b:e6:0d:5d:27:ce:2d:a7:d7:07:33:82:8f:80:00:
53:ce:5e:f6:95:2d:fb:a5:b0:ab:58:a2:7a:dd:7d:70:28:a2:
c7:59:a5:52:39:f6:5b:b3:c2:ca:4a:ac:98:73:11:c7:c4:49:
b9:0e:aa:d0:ff:18:a1:07:6f:11:22:30:11:78:b0:be:4e:4d:
44:db:d3:97:ee:6d:80:27:0c:ed:6e:a4:50:51:9a:c7:62:d0:
86:c7:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:26 2026 by rpki-client