
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: SpKZzoXo9bHr1wfNQIOxcn/NOzaK0MHfAIwU7HQAApQ=
Subject key identifier: 57:65:B9:1F:07:E3:BB:BD:78:22:99:07:19:E3:91:45:C2:9E:41:A5
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 07AB
Signing time: Thu 12 Mar 2026 22:40:45 +0000
Manifest this update: Thu 12 Mar 2026 22:40:44 +0000
Manifest next update: Thu 19 Mar 2026 22:40:44 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: Th+GsuyvTqXwFHGAryobixN336unRUatwpB3z9sjs6k=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Mar 12 22:40:44 2026 GMT
Not After : Mar 19 22:40:44 2026 GMT
Subject: CN=69b340ec-3309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:79:97:59:82:b3:36:b0:bb:4a:a4:a6:71:
3b:37:b1:a0:ff:87:46:11:fd:99:fa:17:d3:99:ac:
3f:7b:53:a3:76:eb:48:3c:5f:c3:ac:43:b3:f1:a3:
d7:dc:4b:e9:09:17:ee:d8:41:ac:93:8e:1c:a3:4c:
64:28:68:3e:da:e6:b0:23:c9:c2:3c:59:e2:ed:7b:
d3:81:f2:c9:d6:f7:33:59:d5:f2:10:65:26:3f:bc:
48:fa:24:2d:de:be:7d:b9:92:69:5b:ec:4b:29:0f:
c9:c9:95:36:70:77:15:0d:50:1a:e3:8d:29:25:ac:
cd:bb:f1:3e:fb:31:91:37:6b:96:3d:1b:34:91:f3:
f1:af:2f:8a:3c:5d:27:a3:96:ac:72:a7:5c:12:03:
63:0d:1c:21:f5:50:80:fe:bc:e7:cc:17:a6:20:08:
fc:ec:72:58:79:96:fc:c8:45:28:8f:91:06:fa:02:
1b:4a:1a:04:eb:86:4d:23:77:b4:f6:18:dc:35:41:
1d:21:e0:c3:ef:8b:5e:9f:98:ec:35:49:13:b2:f8:
f9:56:a0:8b:2d:0d:6d:aa:f4:41:10:5e:bb:0a:14:
8e:85:9b:de:92:e1:e0:01:d2:31:7f:3d:25:1b:0e:
12:94:68:2c:89:8e:56:22:d3:08:3a:30:f1:3b:fd:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:65:B9:1F:07:E3:BB:BD:78:22:99:07:19:E3:91:45:C2:9E:41:A5
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:4a:7c:ec:89:29:82:0b:48:32:98:9e:87:8a:15:ca:34:bb:
47:27:0f:e4:dd:1f:cc:5b:ff:86:f6:f0:f4:eb:a5:ea:8b:5b:
98:74:c9:1a:7e:3a:23:76:49:ea:84:44:18:9c:70:22:a0:e5:
5e:ac:e9:18:9d:2d:57:93:c8:89:e5:04:20:a2:a3:a5:95:af:
34:ef:9f:37:47:1b:50:53:8e:61:56:d6:d7:b3:e1:d1:4e:a8:
83:7f:a0:b7:c4:fa:7e:f8:fb:54:e5:57:40:fe:9b:b7:12:31:
dd:62:8a:cf:c9:bd:0a:76:6a:d2:57:00:05:64:37:88:0b:5e:
f4:4e:a5:82:7e:de:0c:74:20:94:27:4a:86:d5:40:9a:a4:cf:
ef:7b:39:36:54:f1:6a:40:3e:88:7e:ae:49:46:fc:e2:b9:b2:
e5:29:b0:bd:a1:57:07:cc:5f:dd:1a:1d:83:a8:3a:fc:4e:21:
0e:0b:63:2f:a3:1b:f0:7c:3f:c3:ca:38:5c:1a:f1:f9:4b:e5:
17:e0:c3:a6:2f:c8:46:f2:a5:11:ef:d7:4e:1f:55:ba:04:2f:
7b:f1:7d:8f:ec:a8:ce:c4:4d:ca:41:65:fb:13:d8:69:35:f7:
a7:87:a2:5d:2d:f8:fa:18:90:b6:ed:0e:85:9d:c8:09:22:09:
5d:e2:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:04:02 2026 by rpki-client