
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json)
Hash identifier: Bi7QlGvnR5FpS1Oh4TsjAzp9iDZKIc+Luma8myq5qs4=
Subject key identifier: 2E:AD:73:09:EC:30:10:18:23:1C:DF:41:E9:B1:E6:EC:8C:D2:9A:E3
Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Certificate serial: 02EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
Manifest number: 02E5
Signing time: Tue 21 Apr 2026 01:14:13 +0000
Manifest this update: Tue 21 Apr 2026 01:14:12 +0000
Manifest next update: Tue 28 Apr 2026 01:14:12 +0000
Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: ZCrUMaKPwlnLYWgf8aZvnoshbWT2n0R3uzcv24MqGMY=)
2: 028640A8242B11ED9547B486C4F9AE02.roa (hash: poxNxsh/NQ9flBZ/dpDG7diY6MRCWombqXzCSooH5oY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 01:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Validity
Not Before: Apr 21 01:14:12 2026 GMT
Not After : Apr 28 01:14:12 2026 GMT
Subject: CN=69e6cf64-cb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:fc:be:4e:62:6e:03:be:26:29:61:c0:00:
e5:94:11:2a:4b:d3:51:74:9b:7f:47:15:51:77:a1:
8c:94:36:fe:13:3d:42:34:2c:55:da:63:bb:8c:e8:
8d:d7:93:df:d6:bb:3b:8a:d5:08:32:1e:7c:7a:a2:
ff:9f:17:12:cc:7d:d9:ee:98:ed:bc:07:98:17:2a:
2f:87:e3:98:db:32:28:0e:54:dd:68:4d:f5:2b:5b:
14:41:0f:6a:df:c4:9e:86:d3:76:18:64:3f:b8:9f:
ff:34:f8:72:bb:ad:78:c6:db:71:0d:0f:44:3e:aa:
64:10:36:dc:0c:06:8f:9e:84:a8:09:81:09:d6:56:
89:1d:fd:6d:52:ac:ae:6c:e5:6b:13:4d:76:61:78:
f7:7e:73:13:5b:a0:e4:5f:02:d9:32:18:06:4e:e5:
4a:b8:3a:3f:68:f4:67:ef:77:ac:fd:5f:ab:1b:e2:
a5:79:89:76:15:95:e7:6b:8b:f5:7e:d2:0b:3e:ed:
c8:8f:25:f6:57:1d:6b:34:49:45:07:b2:49:bc:92:
f7:fd:22:58:bc:84:ce:00:c1:8b:4b:68:b7:2f:64:
4d:98:64:80:8d:46:9c:7b:15:9d:a5:c8:e5:f8:c3:
9a:bb:c4:dd:17:1a:6b:97:26:52:27:b8:49:49:57:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:73:09:EC:30:10:18:23:1C:DF:41:E9:B1:E6:EC:8C:D2:9A:E3
X509v3 Authority Key Identifier:
keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:1c:d8:1c:63:65:28:a5:1e:fb:fd:27:e1:a8:ee:14:91:
a8:4c:6a:81:fa:56:a6:8b:fd:6e:dc:97:89:2a:90:03:3b:b0:
08:bf:e6:93:d9:8c:48:38:eb:0e:8b:ad:79:0f:c1:23:19:c6:
5e:a8:6d:e6:3b:9c:7f:21:e8:d1:53:22:a6:75:33:e6:8c:5e:
dd:fd:dc:f9:a8:85:9f:e3:b0:b5:3d:32:60:34:67:e6:ee:bc:
6a:71:32:e6:20:5c:7c:8e:0b:70:9e:fa:ec:d0:ac:21:00:b1:
7e:b7:00:5f:e2:6d:bc:d4:ec:cb:88:8a:ab:58:53:13:5a:d1:
36:77:26:bf:42:aa:d9:82:bb:d3:9b:4d:cc:8a:b1:22:c3:a0:
88:e9:90:57:dc:80:91:60:bd:32:0c:99:08:c5:1f:e6:96:6f:
02:4e:65:51:98:0a:c0:53:e5:ca:e9:24:be:d1:fa:0a:74:90:
8d:b2:d3:1b:3f:18:7f:9c:a4:52:a2:dc:cd:5b:98:b6:15:2e:
25:90:94:20:58:bb:58:de:d6:8f:ff:9c:32:ae:ca:5d:d0:33:
0b:32:bf:cf:b5:a0:98:a6:b3:21:b9:45:e5:5c:30:83:a3:02:
c5:bf:9f:92:94:35:ee:20:4d:ce:f2:f9:96:01:5d:f9:3e:c2:
60:6a:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:33:01 2026 by rpki-client