
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: Eo65CMSDHfxGTZEjGAjyO4pOOcuHp6lN+5UB+8URQYE=
Subject key identifier: 3A:97:F9:49:82:5B:21:68:48:8B:31:29:2B:00:88:27:E7:FD:FC:5F
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 08A1
Signing time: Mon 02 Nov 2026 22:55:28 +0000
Manifest this update: Mon 02 Nov 2026 22:55:27 +0000
Manifest next update: Mon 09 Nov 2026 22:55:27 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: INKSSvmaaVZqK1Wpr72PMhzxvNnUAW6SVWt5UGm6/vY=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: ZZTRP8ZYh6abdb/gEV6kUhHlPU73mYT2fjwS4t3Y8Vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 22:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Nov 2 22:55:27 2026 GMT
Not After : Nov 9 22:55:27 2026 GMT
Subject: CN=6ae914e0-53e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:84:b0:88:91:67:a5:a5:e6:28:a9:b0:ef:
02:38:38:f4:24:7c:66:a0:1c:5e:6e:31:58:e6:7e:
b1:8b:3c:91:76:19:84:6c:48:6a:99:b5:d5:9e:27:
22:09:6a:23:f3:22:7a:ae:58:f3:6d:13:7d:7e:c5:
cf:cb:cf:1b:20:60:b2:a8:27:1a:58:76:bc:b4:63:
a5:ce:94:28:4c:6f:dd:fe:ce:44:91:63:2f:d8:0f:
bc:36:74:3a:87:78:f4:19:9d:2d:93:63:37:f3:4d:
ac:31:f3:27:23:51:cd:01:f3:49:04:b3:1f:24:ca:
96:8e:af:b4:65:8a:a0:b5:42:f4:09:d6:2e:dd:e6:
31:c1:c4:1b:cb:86:c9:de:08:b3:dd:82:dd:0d:bb:
fd:29:62:49:a5:b7:93:f1:2e:1e:a9:32:6d:78:e5:
e2:15:af:75:d4:3b:f5:18:4b:9e:28:31:c1:86:52:
42:4a:b3:98:80:f7:7c:aa:05:2d:b5:84:24:c9:0f:
a9:ad:c7:36:44:07:de:a5:53:65:9d:79:f8:f9:46:
08:40:ca:3d:a4:79:54:4a:ce:70:c6:84:96:b0:61:
89:e3:35:71:18:11:ad:66:fe:3b:46:a6:5c:6f:94:
25:d7:5e:b3:c9:15:8a:4c:0c:a8:c0:f9:b0:54:1f:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:F9:49:82:5B:21:68:48:8B:31:29:2B:00:88:27:E7:FD:FC:5F
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:19:25:89:e8:6f:4a:a4:d2:1f:2e:cf:05:55:07:4e:63:
ce:54:74:76:a2:91:92:c9:bc:ea:5e:0b:b6:00:17:02:83:f8:
7e:61:01:fd:4d:ae:0e:26:7e:05:08:8b:91:96:d2:d4:e6:d2:
28:eb:7b:fb:fa:5c:cf:ba:5b:bf:f7:ac:42:ec:11:ae:61:3e:
d8:61:02:91:4b:40:aa:90:cc:35:0b:ac:98:0d:9e:4a:5b:e9:
33:da:bb:60:3d:1f:8e:0f:0a:fa:66:72:60:d3:c1:0a:d2:7f:
fa:c2:26:ce:df:58:87:ed:68:af:6c:cc:21:be:4d:68:88:6c:
28:ff:28:03:a0:1c:a7:3f:be:e9:14:7e:3a:18:22:5b:f7:1c:
39:7b:48:8f:6d:53:13:fc:48:be:10:c3:c4:00:a0:75:58:a8:
cb:4d:2a:f5:84:f0:b9:bd:93:20:e9:17:d7:28:2c:90:2e:e3:
92:51:93:0e:e8:d4:ac:06:20:91:3e:4b:3b:67:68:9f:0a:62:
de:d0:1a:e3:70:55:30:37:26:8f:6a:e0:e9:4d:1e:b3:2e:cd:
0b:65:14:bf:1e:bf:68:89:ca:f6:be:5b:63:be:64:ac:be:29:
ad:9a:e4:bc:da:63:a6:3e:59:5c:6b:ae:61:93:76:48:41:4a:
2f:55:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:42:22 2026 by rpki-client