
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: q2NeDTbfEALBmDCscZjfCqTbwYRABppLapDCebTOWvw=
Subject key identifier: ED:C4:AF:95:C8:13:DE:46:7B:74:8D:8B:DD:88:B2:77:EA:5E:EE:01
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 086B
Signing time: Thu 10 Sep 2026 22:41:08 +0000
Manifest this update: Thu 10 Sep 2026 22:41:07 +0000
Manifest next update: Thu 17 Sep 2026 22:41:07 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 5ohfxw3uq4g4JMPH2jjR2707qgxBst1LjSxXryOGN60=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: ZZTRP8ZYh6abdb/gEV6kUhHlPU73mYT2fjwS4t3Y8Vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Sep 10 22:41:07 2026 GMT
Not After : Sep 17 22:41:07 2026 GMT
Subject: CN=6aa33204-2ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:ac:81:24:cd:5b:66:60:26:7d:97:c5:a0:
b2:96:81:bd:c2:7d:1b:9c:f4:bf:e0:04:37:8f:0a:
d7:3e:2c:77:31:61:f0:31:91:b8:64:de:05:f1:5e:
98:6f:80:12:ad:64:06:ec:d5:d3:7c:9d:c5:30:ca:
10:00:09:8b:c5:a7:d8:95:11:21:27:b1:19:41:7e:
24:0e:d9:d7:06:b1:04:e7:0d:b3:65:3a:d5:b2:66:
ec:05:5f:c2:41:36:c4:b5:d0:54:b5:32:63:27:55:
1d:eb:4b:17:0e:dd:a9:9f:da:89:5c:7f:71:32:30:
ad:43:b2:e6:33:21:a1:e6:67:2d:5d:82:57:50:27:
43:ea:a6:12:20:b8:24:c8:ae:ef:cd:c0:e8:f5:1d:
82:f8:3f:24:75:21:c5:3e:59:99:f1:5b:15:27:04:
d5:5c:2e:ea:27:16:6a:33:4b:42:3b:90:a6:49:ec:
67:7f:d7:eb:76:3f:b5:0b:cb:fb:77:3a:8b:e8:30:
23:6d:f9:e6:a9:f2:23:2c:fe:bd:5a:5a:5d:79:82:
47:8a:43:9d:cf:e2:8d:7c:69:35:70:08:d3:f7:d9:
8a:d8:59:6a:e7:a5:7b:80:f9:56:a3:2d:36:52:b8:
70:2a:d1:9a:1b:0c:8a:75:f1:70:3b:20:1b:89:de:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:AF:95:C8:13:DE:46:7B:74:8D:8B:DD:88:B2:77:EA:5E:EE:01
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:aa:4c:40:75:ce:82:a9:8e:e4:97:f8:90:2f:d5:cd:b6:12:
7b:08:b8:f5:26:e5:2f:d7:f1:63:8f:9d:91:cd:4a:d1:a7:a3:
13:2d:19:90:88:f0:bd:15:1c:df:bf:e5:37:6a:bc:75:cf:78:
f7:37:af:4e:5b:38:64:7d:49:3e:1b:a5:7d:6a:4d:e2:e5:b3:
f5:84:73:b7:08:3c:08:4e:90:d6:64:e2:f5:37:c4:3e:01:7a:
c6:25:54:30:3e:9f:8e:40:7e:df:4f:a8:c4:84:d2:2b:50:76:
6c:e6:fd:a9:60:e9:a0:98:50:3e:1c:27:6f:33:59:7d:f9:5b:
af:c2:ab:95:5f:cf:9e:b9:14:ed:65:49:f9:43:0b:ba:de:21:
9a:13:91:82:74:4c:a5:fd:bc:4f:ef:23:70:06:0c:b7:3f:94:
12:6b:10:02:ac:0d:e9:3a:56:96:fb:6b:5b:e1:75:24:7c:25:
8e:47:6f:2f:11:4d:ab:0d:69:d2:79:e8:6e:f6:8e:e1:4a:a6:
ba:78:be:a1:7e:ad:9b:46:3b:a3:62:50:e2:01:5c:f4:26:77:
8c:5e:84:aa:dd:e7:2b:be:02:73:8d:ff:17:46:1a:68:93:61:
83:77:ce:af:eb:b0:22:44:5a:9e:f6:c5:89:cf:0c:36:59:cf:
19:9c:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:20 2026 by rpki-client