
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json)
Hash identifier: AJwz127o/j2fo1xqrQ2rQFK42LXYsQ19BS5zXmWejmM=
Subject key identifier: A2:4D:C7:52:02:70:AC:1D:A1:AD:D7:BF:DB:55:16:04:56:2A:B1:93
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
Manifest number: 0102
Signing time: Tue 03 Mar 2026 06:17:12 +0000
Manifest this update: Tue 03 Mar 2026 06:17:12 +0000
Manifest next update: Tue 10 Mar 2026 06:17:12 +0000
Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: B7xbBKJeq4rCgcTbHQ4GDDow8dtbBSn2NbVFgZ6Kpd0=)
2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: rv9K2z3jLDHYayjuD/ofwi0jQtAT/5qT98rJ5cSCRIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Validity
Not Before: Mar 3 06:17:12 2026 GMT
Not After : Mar 10 06:17:12 2026 GMT
Subject: CN=69a67ce8-86a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:1a:1c:90:cb:17:a7:8a:38:11:fe:2d:a1:
87:ea:77:4d:d8:36:38:c1:ba:80:cc:22:ed:db:25:
24:16:40:f2:a1:f8:22:6a:b5:cd:3c:a6:87:bc:87:
47:c6:f7:21:86:ef:78:12:ef:e3:9e:99:a4:fb:a0:
e4:d6:8c:28:03:3d:73:d7:3d:bd:96:68:67:3f:83:
97:38:a8:df:22:37:45:43:d2:6d:39:c7:32:41:ad:
73:b4:56:41:5a:b7:ef:99:0d:0f:19:18:3e:7e:38:
36:aa:24:43:9a:5a:3a:d0:55:76:cb:41:e4:9e:52:
25:7d:d5:74:b2:50:9e:26:80:77:e0:1f:6e:45:c5:
bd:3f:24:a9:53:68:86:62:69:e5:57:87:ff:9a:62:
fa:3b:e2:c6:45:57:34:48:a5:8c:29:da:3d:32:14:
8d:87:ed:97:11:c4:ab:96:6d:60:1d:58:bc:c6:d5:
cd:66:e8:ce:de:15:f1:8e:94:7c:3e:f3:0b:58:b9:
3e:cd:c0:08:3a:10:69:b3:fa:db:69:25:a1:1b:7a:
3e:a9:b8:2d:08:92:d3:98:bb:87:6c:23:0d:ab:cd:
92:bc:eb:bc:03:41:0d:99:ec:c2:af:9a:73:c1:87:
cd:62:f8:8b:74:ce:3d:50:d6:b7:b9:dd:aa:b8:44:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:C7:52:02:70:AC:1D:A1:AD:D7:BF:DB:55:16:04:56:2A:B1:93
X509v3 Authority Key Identifier:
keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:85:45:d8:22:a0:0c:42:be:81:bc:92:0a:d7:b6:cf:bd:45:
23:e8:e6:7e:8b:1c:f1:66:50:79:b7:13:18:ec:14:27:e5:7b:
5a:8e:68:20:a4:a8:59:24:54:27:ed:8f:9f:a5:9c:d7:7d:bc:
d6:8f:6e:19:4f:24:42:de:43:ae:53:53:82:07:a6:86:cd:31:
a7:27:50:62:45:cb:93:19:30:68:0f:79:b7:9c:7e:ff:f8:4a:
77:93:f5:08:47:1c:3d:01:87:04:a6:75:21:1d:23:4e:92:98:
ab:8d:3f:90:30:f4:0d:2b:21:b2:95:f5:7f:cd:4a:5f:55:15:
f2:6a:7b:5d:be:25:a0:cc:ff:6f:2b:d4:8c:25:30:0f:52:9d:
d3:31:9c:11:e6:0b:a5:75:e8:4d:96:96:31:1a:6c:da:26:23:
51:52:c0:41:1d:ef:02:de:3e:83:bd:fc:bb:0f:52:33:1a:27:
15:65:05:51:51:cc:60:41:c4:bd:a3:db:ea:12:5b:0c:ff:17:
95:f2:7d:d0:9b:f3:51:2c:d5:c5:b2:08:9b:03:8e:83:26:fb:
20:7e:57:60:40:94:32:d3:59:ab:df:64:9e:fb:7e:50:bc:c4:
1e:bb:99:45:78:3a:da:fe:9a:86:3f:b4:6a:04:ab:92:25:9a:
c1:7e:51:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE
OTgxMzgwNTgwHhcNMjYwMzAzMDYxNzEyWhcNMjYwMzEwMDYxNzEyWjAYMRYwFAYD
VQQDEw02OWE2N2NlOC04NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmj0aHJDLF6eKOBH+LaGH6ndN2DY4wbqAzCLt2yUkFkDyofgiarXNPKaHvIdH
xvchhu94Eu/jnpmk+6Dk1owoAz1z1z29lmhnP4OXOKjfIjdFQ9JtOccyQa1ztFZB
WrfvmQ0PGRg+fjg2qiRDmlo60FV2y0HknlIlfdV0slCeJoB34B9uRcW9PySpU2iG
YmnlV4f/mmL6O+LGRVc0SKWMKdo9MhSNh+2XEcSrlm1gHVi8xtXNZujO3hXxjpR8
PvMLWLk+zcAIOhBps/rbaSWhG3o+qbgtCJLTmLuHbCMNq82SvOu8A0ENmezCr5pz
wYfNYviLdM49UNa3ud2quEQOQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJNx1IC
cKwdoa3Xv9tVFgRWKrGTMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2
REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR
MkNsQzBuNU1YNURaZ1RnRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYoVF2CKgDEK+gbySCte2z71FI+jmfosc8WZQebcTGOwUJ+V7Wo5oIKSoWSRU
J+2Pn6Wc13281o9uGU8kQt5DrlNTggemhs0xpydQYkXLkxkwaA95t5x+//hKd5P1
CEccPQGHBKZ1IR0jTpKYq40/kDD0DSshspX1f81KX1UV8mp7Xb4loMz/byvUjCUw
D1Kd0zGcEeYLpXXoTZaWMRps2iYjUVLAQR3vAt4+g738uw9SMxonFWUFUVHMYEHE
vaPb6hJbDP8XlfJ90JvzUSzVxbIImwOOgyb7IH5XYECUMtNZq99knvt+ULzEHruZ
RXg62v6ahj+0agSrkiWawX5RMg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:24:09 2026 by rpki-client