
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
File: LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json)
Hash identifier: BTe+Z4tgMV2nDK+86XLPh+0TtzYlGiWagejJuOQyrG4=
Subject key identifier: 2C:2B:0B:5E:2D:54:FE:D0:9B:4C:DE:72:E5:A0:5A:F0:12:20:B6:FE
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
Manifest number: 0124
Signing time: Tue 21 Jul 2026 07:40:45 +0000
Manifest this update: Tue 21 Jul 2026 07:40:44 +0000
Manifest next update: Tue 28 Jul 2026 07:40:44 +0000
Files and hashes: 1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: ecdaCshlTz0qrvPoEM5us6UrbtrUfDYFl6rgnBbi484=)
2: 2719F6E88BA311F0A0D19E2CC4F9AE02.roa (hash: JRxe6WQ5i8FSwSqbtx1T3zxfQy2HORxOSSN4JwBWN5k=)
3: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: BPkxT9PJbOIgNrspZOoDgDO33hVHTRKGqGy183wMITk=)
4: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: dbuZmNGm++g8muXahSZhdDCEu8MGAKIyX1z0wQbDzqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 07:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Validity
Not Before: Jul 21 07:40:44 2026 GMT
Not After : Jul 28 07:40:44 2026 GMT
Subject: CN=6a5f227d-66cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:ee:b8:18:df:3d:5a:3e:e8:61:54:3c:57:
b5:aa:ed:84:3e:1b:8f:e4:8c:03:53:78:3e:e5:31:
4b:a6:9e:3a:2f:b6:e1:2c:16:4a:cc:9e:52:71:5c:
1d:a5:1f:af:1b:12:00:49:07:1a:c3:bf:37:c2:7c:
75:10:08:c1:e4:9a:5f:df:52:ea:70:75:22:75:41:
cd:2e:20:41:59:49:0a:af:f0:d5:0d:84:4d:ea:85:
16:08:d2:1b:12:80:2c:fd:1d:88:99:62:79:99:74:
27:be:b1:b3:b1:06:20:2c:dd:e3:8e:69:f2:ef:d9:
20:b9:6f:1d:71:8e:74:1f:98:ca:c0:46:eb:0d:5e:
2f:6e:78:99:cb:59:a7:73:00:91:3f:31:cc:f3:a5:
13:36:d7:61:59:5d:1c:9e:8e:96:35:37:9e:1d:b8:
8e:2b:11:15:cb:81:75:ff:a4:5d:f2:16:ba:8d:54:
7e:27:16:e3:f9:aa:d6:b1:b9:bf:4b:63:08:1d:d8:
f3:f8:46:c7:22:89:09:ef:1c:89:35:1b:5f:60:f8:
ff:83:e2:28:12:6e:2a:95:5f:d2:70:11:36:af:b6:
bb:0b:e5:0b:f7:41:13:e0:54:8b:56:81:69:8d:b5:
06:d1:00:9b:fd:eb:c6:8e:12:98:a8:e9:a2:b5:a8:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:0B:5E:2D:54:FE:D0:9B:4C:DE:72:E5:A0:5A:F0:12:20:B6:FE
X509v3 Authority Key Identifier:
keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:60:0b:a5:47:bb:50:76:7b:a1:37:84:e4:ed:bf:68:25:
82:0d:f2:d3:3a:45:2d:60:06:0e:c1:bc:8f:27:19:d6:67:de:
fb:8f:c3:1d:3d:a0:12:b8:70:d3:7b:b9:90:83:2b:63:59:c1:
b6:57:34:f9:b7:43:d1:c4:45:a5:d3:f2:6d:04:ee:d4:3d:aa:
4b:0c:68:46:00:bd:f2:1b:30:6d:75:28:e6:89:8d:49:ef:2a:
db:d5:ea:f3:f6:72:f9:25:ed:6c:53:ad:99:96:43:c5:e3:5e:
d6:d7:2c:7f:26:ce:fb:bc:06:de:90:c7:d6:11:c3:3d:84:fb:
47:84:3e:6a:85:cc:bc:79:d1:90:75:96:f4:bb:8e:0f:3d:49:
84:6a:c3:52:22:78:aa:6a:37:e9:0c:9f:e3:c3:94:91:bb:8c:
d0:9d:68:db:c1:e8:b3:3c:cc:2a:40:f6:a9:26:5b:81:57:a7:
00:7c:4a:71:c3:bf:eb:a6:bd:90:79:cc:0c:96:31:2b:af:7b:
e2:bb:d8:c4:aa:83:56:e4:d5:f5:e6:f6:ba:fe:4f:3d:15:88:
fa:32:47:62:c9:5a:b3:26:2a:4f:68:6d:9d:d5:09:47:b6:f9:
52:36:ce:bb:1c:f4:0d:27:57:20:59:93:70:ef:83:81:31:e3:
73:27:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:05 2026 by rpki-client