
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: Inv6uc8smsRzpyW8bILoxumntJbUOylUdyYuEynoSGI=
Subject key identifier: D9:1B:F9:AB:8C:39:53:50:E8:95:2F:AB:3D:11:F6:09:36:75:B8:82
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 0807
Signing time: Thu 11 Jun 2026 01:03:11 +0000
Manifest this update: Thu 11 Jun 2026 01:03:11 +0000
Manifest next update: Thu 18 Jun 2026 01:03:11 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 03DMtcgThn8+vz3dwKVNWOgpoKhJARWcEKDgSbpq2jg=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Jun 11 01:03:11 2026 GMT
Not After : Jun 18 01:03:11 2026 GMT
Subject: CN=6a2a094f-4ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:9d:fd:e4:00:bd:fd:18:5a:20:a6:28:27:
bc:21:8c:7f:8a:76:de:c7:c7:78:26:23:18:4c:80:
2a:75:63:70:95:87:39:fe:e3:a1:a8:da:02:ee:3d:
41:30:83:f0:c1:30:37:7e:25:6d:62:c7:73:ca:41:
f9:ff:d7:7a:39:0d:c9:1a:9f:c3:f5:b7:8d:9e:8e:
6c:4b:33:1d:61:47:bf:ae:a5:df:90:0b:fc:8b:30:
74:9e:5a:96:80:85:aa:0c:dd:05:c1:a9:17:a7:ef:
c9:ab:2e:2d:5a:ca:77:43:ea:5c:e0:d2:53:52:c7:
42:0b:58:19:a5:f5:43:88:cb:6c:21:4d:d6:3d:84:
6b:80:c2:93:d9:82:22:0a:ad:a4:5b:de:8f:25:1a:
46:cb:6f:40:6d:f5:07:f4:b0:16:09:51:13:69:be:
60:9a:b7:8c:a9:1d:cd:79:1c:1e:32:a3:b9:49:45:
6c:6e:ec:97:e1:04:4a:5d:be:c8:37:ff:f7:68:16:
2c:fd:76:77:7f:24:1a:3c:ab:3f:29:78:ae:30:71:
0a:ee:c9:eb:af:a3:fd:eb:4f:87:84:31:88:ec:c4:
81:8f:53:e2:67:d9:13:a4:ad:07:0b:d1:04:ae:ce:
8e:bb:0d:f7:24:cb:df:dd:05:0d:f3:e1:1a:5a:d1:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:F9:AB:8C:39:53:50:E8:95:2F:AB:3D:11:F6:09:36:75:B8:82
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:14:e7:f0:3f:e1:a9:e4:90:73:97:43:e9:45:5f:85:08:
8b:52:25:3c:85:56:24:89:05:4f:e5:f0:6f:4d:54:87:fb:7e:
37:34:d1:3e:72:6a:8d:08:cf:1e:7d:0d:8f:15:c7:6f:3b:31:
28:3d:49:a8:b9:9d:60:02:55:fc:1c:9b:a5:d9:56:79:be:4e:
97:39:82:ec:94:a7:4b:6b:1c:d2:e3:4b:8a:fe:ab:4b:23:69:
13:2e:a5:3b:5d:0c:f0:9f:b2:f3:4b:ba:b7:83:64:ab:9c:c4:
15:00:85:42:42:45:38:53:43:5a:70:ca:2c:61:d7:da:ca:05:
57:89:d3:8b:35:b7:66:e1:c1:1e:1d:9c:03:9a:d0:56:f7:0c:
bf:f5:44:6b:b2:57:10:10:c5:bc:76:fe:b0:5f:02:f1:e0:b1:
42:3d:c3:c4:db:f7:2a:38:77:c4:38:06:4b:17:00:47:59:bb:
9f:f2:37:e0:67:2e:d6:e3:3c:09:ff:56:60:ca:28:dd:07:23:
dc:e4:70:e0:51:13:9d:4f:1f:e9:77:8f:61:d7:35:d6:cb:85:
9e:9a:b4:45:6a:6b:a5:49:31:d2:b9:de:2e:ff:41:ad:92:9f:
c6:e5:69:8b:5c:87:bf:4b:ac:41:fc:e3:bf:39:2c:c7:f1:23:
98:5b:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:26:06 2026 by rpki-client