
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: yJ12Z/S1YNqiKxF9t2ISuuvuNIDLDmae/t05YrtdRy0=
Subject key identifier: 12:6C:A0:5D:FD:77:CD:98:78:14:4E:7A:2F:EE:FD:ED:DC:08:E5:EA
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 07D9
Signing time: Sun 26 Apr 2026 22:57:13 +0000
Manifest this update: Sun 26 Apr 2026 22:57:13 +0000
Manifest next update: Sun 03 May 2026 22:57:13 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: zKKcVoSMqq2kYm1Tz40DNshgPB4xoKqz5soKVMd3jdQ=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Apr 26 22:57:13 2026 GMT
Not After : May 3 22:57:13 2026 GMT
Subject: CN=69ee9849-525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:92:50:de:ea:68:ac:39:2f:80:e0:1a:77:
c1:83:93:1c:29:0d:05:c5:b7:8f:b8:1b:1a:72:f7:
55:05:81:a3:2c:8b:06:8b:e6:0c:3b:31:aa:65:be:
f0:dd:83:cb:ec:d6:49:eb:61:54:67:71:b1:91:ef:
74:56:b9:cd:1c:f6:c1:f5:89:5b:30:7e:68:2a:06:
f6:42:2c:d9:79:7f:79:19:a8:fb:c4:d7:21:13:30:
6b:1c:ea:3c:7d:2d:79:61:3c:d8:4c:82:b0:41:b0:
b6:dd:01:8f:9c:26:6d:3e:84:28:c0:4c:63:d5:ca:
af:c4:c0:61:d0:5d:bd:f0:d7:1e:f1:31:27:40:d6:
03:41:db:f1:b7:74:1b:b0:02:7b:76:c1:ea:8d:53:
22:52:b3:2e:95:95:bf:b3:57:9b:ae:31:02:c9:b5:
09:b8:cf:ab:83:63:8a:26:b0:8b:9e:ff:0b:dd:28:
c4:88:fa:43:27:43:aa:ec:e5:67:54:9e:a2:8c:ab:
67:0b:b9:e0:dc:3f:f5:81:00:7d:46:10:59:0b:fd:
1f:e4:92:fb:ad:4c:4e:bd:b7:92:71:92:01:3f:1e:
db:e6:2d:3d:0e:18:05:71:c3:61:17:c1:71:f6:66:
36:29:63:35:27:da:8b:84:21:e4:27:6e:dd:45:ee:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:A0:5D:FD:77:CD:98:78:14:4E:7A:2F:EE:FD:ED:DC:08:E5:EA
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:0b:d8:8b:8d:0b:82:22:53:31:d6:18:62:64:5a:01:97:
c7:6a:75:fe:15:cd:a3:28:8b:36:11:4b:26:c6:c0:50:c5:82:
e1:62:3a:80:f1:1c:23:ab:c8:c4:77:17:ed:24:48:b2:36:81:
56:ba:76:c1:ba:c6:52:1f:93:b7:6c:6d:21:11:29:1f:04:95:
79:89:41:26:fa:8f:3d:d6:20:40:31:c8:e4:3b:67:2d:68:b3:
cb:24:c3:83:0b:b1:8f:64:c4:6f:40:e8:b8:fe:bd:42:9c:15:
29:08:3b:e0:2b:09:bc:cd:c6:1f:d7:90:73:e9:1b:a1:3a:59:
46:8a:4c:0f:db:a9:f5:07:9d:23:19:1b:fe:32:56:26:24:ac:
e3:b9:a3:8e:df:3d:fc:d5:e5:a4:df:cd:1d:72:bb:25:8d:b1:
29:d8:d5:ab:aa:3e:85:93:a4:15:6c:c4:a4:73:44:1d:16:d6:
b4:66:39:5b:0b:37:89:83:61:8e:9b:a4:47:9b:fe:b2:96:14:
c4:1d:95:ef:42:86:71:15:54:3f:a7:0c:8e:88:6e:1c:3d:7d:
0e:a1:59:dc:8a:46:c0:42:f7:4a:e3:91:f4:86:5b:de:47:da:
fb:c7:2c:f8:2d:4c:8c:e3:e9:cc:4d:b0:2f:32:41:46:64:22:
9b:e7:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:29:29 2026 by rpki-client