
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier: BTHrmza40pGuvn+fmTGGarDWqbD53mvRMhOWLXNlQu8=
Subject key identifier: 67:CB:BF:8E:1C:B7:27:E5:8C:2E:D9:F7:52:CD:13:5E:FA:20:75:38
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number: A4
Signing time: Tue 03 Mar 2026 04:19:24 +0000
Manifest this update: Tue 03 Mar 2026 04:19:23 +0000
Manifest next update: Tue 10 Mar 2026 04:19:23 +0000
Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: 2VfVIjeKG0AjL8/jipOsVjJIxqfGL6FykWxCcQcugAs=)
2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: OU+mhLZle+EP1xDm2dufdCPvv2y3/vJOiy9NfS4fNUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Validity
Not Before: Mar 3 04:19:23 2026 GMT
Not After : Mar 10 04:19:23 2026 GMT
Subject: CN=69a6614b-33ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:4c:6a:5b:02:0d:a1:35:34:b6:17:8a:e5:
99:59:cb:03:b2:e2:0b:8b:6e:d5:d4:ea:e5:85:5f:
fd:ee:b8:15:e7:da:97:50:a4:26:d3:df:14:3c:e4:
e0:68:29:e7:a1:c2:c7:7f:c2:38:3a:4c:7c:5e:15:
46:02:f8:83:c8:5b:13:55:33:6e:66:f5:c3:38:35:
86:33:c1:71:10:a9:b1:c6:9b:9c:5e:16:40:45:40:
b7:53:6d:26:1a:8c:df:49:f1:19:db:89:ca:64:c9:
80:d8:61:1d:8a:b4:06:e4:f2:96:09:39:42:e6:55:
2a:6a:25:d9:06:ab:bb:3c:5b:2f:4f:2a:39:bd:3f:
cc:14:8c:1c:65:19:d3:2d:c8:bf:4d:f3:b0:99:03:
1b:7b:2f:21:35:4b:33:6a:1f:45:c8:f0:f3:58:70:
18:0a:61:ce:23:3c:b8:b5:71:ee:41:77:59:28:48:
bf:12:d4:a7:e9:a4:7e:e1:c6:bb:c1:bf:9b:1a:8c:
27:55:00:64:e2:d6:32:6d:d8:f2:75:79:93:c0:7f:
f2:f0:b0:9f:21:60:33:0f:f8:ac:1f:bf:f5:26:f2:
6b:9c:c8:cd:6f:99:43:18:6a:a0:25:b0:d5:55:03:
1e:72:c6:a1:2f:ac:78:c0:2b:b0:16:66:2c:2b:0b:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:BF:8E:1C:B7:27:E5:8C:2E:D9:F7:52:CD:13:5E:FA:20:75:38
X509v3 Authority Key Identifier:
keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2c:ce:4c:46:25:61:75:c4:3e:97:c4:dd:95:33:16:fd:34:
1b:e7:a8:b2:c8:03:3c:2e:69:76:10:b9:94:60:46:4e:63:28:
d0:f4:a3:19:47:29:11:b4:95:86:d5:7e:cb:f7:4f:ff:02:a1:
3b:de:5f:48:f4:f7:2e:01:51:21:c1:97:62:cd:36:8c:75:f3:
8d:e8:13:f8:88:5a:27:26:f1:73:00:17:af:0f:ea:0c:dc:37:
20:fc:5a:95:cc:81:88:c2:67:a3:bb:8a:ab:b6:8f:14:a3:e0:
8c:bc:55:a7:b2:ad:5d:dc:2b:bc:33:48:92:fb:76:00:e2:f4:
da:4d:06:b4:c2:db:8f:46:44:b9:e2:70:4d:28:90:3f:c4:8c:
28:80:14:fa:7d:3e:7c:47:91:17:c2:ed:72:bb:5a:7e:c7:f2:
3d:34:cb:c1:40:20:a0:c4:c7:0d:ef:7d:96:6c:2a:0c:e4:fa:
88:90:56:e7:ac:c1:33:79:da:dd:8f:c4:69:d7:ab:8a:ea:ae:
69:e5:3d:dc:10:75:a3:97:63:27:92:fe:2a:1e:ec:71:1e:0f:
c5:c3:ff:81:b3:37:6a:4c:05:e8:33:cb:0c:ad:a6:ee:d2:c4:
33:21:0b:00:81:a0:71:36:e7:10:8b:4c:a5:1f:c6:6e:bb:9e:
49:6a:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:32:25 2026 by rpki-client