
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft
File: lFwg-9B2Q_0GLCpQroE0vOVb06E.mft (raw, json)
Hash identifier: fxA8Z8PgUbW16d6Gu/RsjwQzByPnCB+xUXjyS+kxV5o=
Subject key identifier: CC:F5:72:5E:D0:0F:EA:2A:8E:DC:57:CF:9C:97:33:B2:AB:9B:AD:36
Authority key identifier: 94:5C:20:FB:D0:76:43:FD:06:2C:2A:50:AE:81:34:BC:E5:5B:D3:A1
Certificate issuer: /CN=A915AEB5/serialNumber=945C20FBD07643FD062C2A50AE8134BCE55BD3A1
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft
Manifest number: 10
Signing time: Sat 03 Oct 2026 09:54:23 +0000
Manifest this update: Sat 03 Oct 2026 09:54:23 +0000
Manifest next update: Sat 10 Oct 2026 09:54:23 +0000
Files and hashes: 1: lFwg-9B2Q_0GLCpQroE0vOVb06E.crl (hash: /9vLbOG8hJEthvsWD9uog4R96q7oDvvWMy/BjOlUlvc=)
2: 00B5B2CAAE1211F1954733B94E11F970.roa (hash: BPjtbNqMSVFm7GMmktha8r/KyoyUmgzAgYzGdPTKU30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.crl
rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AEB5, serialNumber=945C20FBD07643FD062C2A50AE8134BCE55BD3A1
Validity
Not Before: Oct 3 09:54:23 2026 GMT
Not After : Oct 10 09:54:23 2026 GMT
Subject: CN=6ac0d0cf-af4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:d6:d0:d3:b1:85:c6:24:08:13:75:07:ae:
4f:c4:24:52:86:df:14:81:21:16:2f:0d:7e:1f:4d:
35:a2:09:f3:01:0b:c4:7f:2e:8a:e0:1b:c5:d0:1e:
47:1c:8d:91:dc:46:3b:0a:e3:2e:ba:60:67:ac:c5:
7c:ef:a3:74:18:97:be:49:64:ba:5b:f3:5c:e1:25:
f0:73:d2:0d:64:cf:3f:f7:ab:bd:b1:77:d9:c5:b0:
ff:92:76:b7:05:d1:32:41:49:3f:9d:16:fc:e0:d4:
2d:47:6e:0b:45:dd:c8:ea:81:34:3f:19:c4:8d:92:
9f:f9:c5:b6:4f:c8:93:c8:03:fa:17:e0:d5:16:c1:
8a:13:d2:9c:87:5e:ca:dc:79:f2:83:66:43:8c:32:
d8:10:39:fc:9f:a7:35:fc:9f:f1:74:70:a1:85:57:
06:3c:ad:51:83:c4:22:fe:3f:d9:49:95:e5:f3:b8:
5b:7f:4d:74:03:3c:c2:ab:2b:98:2e:0b:94:ae:16:
55:cf:e2:5e:b3:93:51:85:c6:27:9e:ba:a8:f7:7b:
ea:89:a5:ff:18:02:87:3d:b4:c3:25:87:23:5f:67:
d5:9a:a1:26:36:19:cb:ad:75:64:81:c2:1b:e0:89:
ca:97:43:6d:32:50:bf:42:35:55:9b:3f:53:24:7e:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:72:5E:D0:0F:EA:2A:8E:DC:57:CF:9C:97:33:B2:AB:9B:AD:36
X509v3 Authority Key Identifier:
keyid:94:5C:20:FB:D0:76:43:FD:06:2C:2A:50:AE:81:34:BC:E5:5B:D3:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:11:0f:12:2d:46:1c:70:b9:93:4f:ed:83:51:c2:f2:36:ad:
4e:37:2d:1a:d0:12:6c:7d:ae:66:5f:e6:b9:6a:e9:b3:fc:6c:
79:61:46:fe:af:7d:dc:47:5d:80:ac:98:fb:ae:a5:24:fc:80:
a9:c2:3f:6d:3e:4a:aa:f1:52:17:ef:82:36:ea:5e:41:29:5e:
2d:ab:11:07:0c:d8:b5:16:53:c6:6a:ca:97:19:c0:c0:88:c3:
f2:49:f8:68:2c:95:b1:6f:fc:3b:90:d1:76:03:ba:cc:db:90:
ff:a5:98:cd:23:06:92:7e:1b:95:c6:5e:15:5b:82:b6:bf:a3:
3c:78:ea:64:74:57:a9:61:70:38:dd:2a:dd:de:85:d0:34:17:
9a:8a:a0:39:9a:d0:63:4c:90:19:1a:c0:66:0f:3a:0b:29:d3:
9d:4c:64:4b:d5:b4:05:ba:16:35:48:47:33:66:ca:36:24:17:
03:ca:29:e8:5d:80:b7:7f:9c:72:4a:a0:7f:2a:f0:35:76:12:
c8:f3:0f:f5:4e:28:56:c2:7a:73:ca:c2:f5:0d:80:10:0b:a6:
b0:6b:a0:8e:53:26:f4:c1:42:5c:b0:fc:b1:8c:80:d3:a4:87:
76:75:f9:08:4f:8c:e2:1a:04:47:3a:80:83:e0:5b:17:b5:8a:
65:76:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:42:11 2026 by rpki-client