
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier: 9nYoAS3vr6w2Z7rgwY39bn5HtMTAMRwXG//bNEKhOYY=
Subject key identifier: 10:ED:C6:2C:3C:C3:E1:0F:56:FB:5A:48:01:F8:AA:A1:A5:AE:A6:A2
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number: 04D7
Signing time: Wed 20 May 2026 23:55:12 +0000
Manifest this update: Wed 20 May 2026 23:55:12 +0000
Manifest next update: Wed 27 May 2026 23:55:12 +0000
Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: pzA65K4ROYJv3ccPV4KFXVpUYQdiDuUMQrw7jo3KUWg=)
2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: Cnel+OeT3oP8Ba57DN2AfJdE9d8ywFeBBz6sL8SdLcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Validity
Not Before: May 20 23:55:12 2026 GMT
Not After : May 27 23:55:12 2026 GMT
Subject: CN=6a0e49e0-8078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:51:04:37:79:9e:e9:b5:ba:92:0d:c5:52:
08:5b:56:dc:6e:a8:29:0e:dd:39:a3:42:2b:2c:ee:
0e:f5:b2:49:7c:81:44:81:c7:ea:8c:99:15:29:62:
3d:2e:dd:c4:e7:20:06:2c:66:19:17:68:4a:15:02:
53:07:9b:41:7d:83:87:f7:7a:cf:e5:eb:e3:37:6f:
01:c1:4a:0a:7c:2b:7f:f6:4e:5a:a2:6f:5d:01:c1:
e3:e6:25:d8:d9:0c:5b:b1:19:b1:e1:bf:b0:f2:dc:
08:d1:0b:fa:dd:00:b4:8c:3e:cf:d8:f5:3e:e6:e1:
72:9e:35:ce:88:5c:56:e4:a3:19:a3:1d:e2:e2:51:
6f:a2:94:6b:78:04:ad:d2:22:3e:af:8d:b6:d5:c4:
d2:1f:f8:3e:cc:c0:6f:31:b9:dd:79:09:98:be:f2:
1b:6e:33:72:df:c5:9a:6b:25:a1:2a:51:17:80:88:
15:19:3b:b0:7e:70:38:76:3b:b5:68:08:da:22:e3:
4d:49:a2:e7:b6:c4:33:25:c2:f8:52:0c:37:28:ce:
8f:6f:44:9a:87:6f:71:90:30:58:b9:ca:31:0a:fe:
0b:e5:a6:5d:c4:da:d9:88:56:d8:5b:ac:4f:5c:00:
c8:8d:a1:28:82:6b:38:94:e6:95:d3:1b:5e:f9:02:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:ED:C6:2C:3C:C3:E1:0F:56:FB:5A:48:01:F8:AA:A1:A5:AE:A6:A2
X509v3 Authority Key Identifier:
keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:5d:f0:de:c0:61:7b:f6:bf:70:1e:c2:86:53:29:cc:93:
4e:40:ea:b6:2c:24:3c:a8:d0:83:3e:a3:c3:eb:b5:df:a1:2b:
c9:de:aa:db:da:f9:79:27:a4:31:64:e3:38:12:33:f0:8f:8d:
69:f8:dd:82:55:65:e5:d0:8b:c4:37:01:91:95:ca:3f:e8:19:
26:01:06:4a:13:e2:cb:ad:59:2e:ca:23:04:5d:f0:49:74:eb:
2b:d7:61:e3:03:60:b8:d2:a0:39:da:00:93:c0:c7:45:87:ca:
63:bb:c8:d1:2e:cd:96:e7:af:33:88:98:e1:5b:f3:ef:52:86:
8e:4e:53:94:60:63:45:e5:23:96:78:cd:7d:15:9a:33:c2:73:
d3:51:2c:62:7f:db:a5:ea:a9:c1:b1:20:b7:81:c8:7f:e3:b4:
f1:f8:89:10:fd:74:ae:5f:f5:48:34:17:5e:a0:f8:da:ad:73:
07:7d:5a:29:23:1d:36:95:de:82:0e:bf:a2:44:da:b3:89:25:
40:7a:94:a3:1e:4e:dc:d1:5a:99:3d:97:20:3e:9a:c4:0b:45:
cb:62:7d:8c:05:d3:b3:8f:f0:90:96:5f:26:0c:be:44:fe:ac:
89:10:51:2e:9e:0f:af:fc:80:c9:c5:e9:85:a4:3a:48:a9:a1:
4f:10:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:49 2026 by rpki-client