
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier: sLJk97CRJmNrlHeu+fkWGgtgvv88tdkx2Ucw+u5tsjs=
Subject key identifier: F4:7F:70:C7:E8:11:A6:99:4C:53:CA:4A:F7:99:E3:11:D5:3B:38:96
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number: 011A
Signing time: Mon 19 Oct 2026 03:59:31 +0000
Manifest this update: Mon 19 Oct 2026 03:59:30 +0000
Manifest next update: Mon 26 Oct 2026 03:59:30 +0000
Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: bGlUdEhoRDu3nJYAPBt/05//BfBaRs5FYylleXtWr74=)
2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: x0lQmzxaHQ2KjFQfdwH7Bd9KOXdy+vF4ix2AJe32Cio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Validity
Not Before: Oct 19 03:59:30 2026 GMT
Not After : Oct 26 03:59:30 2026 GMT
Subject: CN=6ad595a3-b374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:41:0f:5d:c6:0a:38:c9:28:e5:b1:07:7a:
27:6e:b9:6b:7d:1b:b0:7c:67:14:83:6d:74:df:48:
bf:de:25:f2:02:e3:bf:ed:84:39:f5:02:81:97:67:
99:ff:35:52:e2:89:a8:a5:51:34:0a:e9:28:5f:cc:
8e:6b:78:0c:f1:e7:af:5b:7d:fc:97:49:b4:ed:ca:
12:eb:12:06:75:0b:1d:d8:b4:34:20:15:97:4e:c6:
a2:38:4f:3e:a0:3b:a0:f5:8f:6d:b8:7f:3e:66:b0:
9e:70:26:fe:72:09:d1:31:7b:04:20:49:a3:6c:aa:
5d:da:5b:f4:b6:4e:9b:ff:89:b4:0e:18:07:e4:9f:
f1:23:90:d6:f6:f9:7a:ae:a7:3a:0b:54:96:ce:bf:
07:36:96:f6:73:7b:f4:ce:73:aa:c4:ca:7c:86:ee:
5d:70:c8:52:df:c6:0c:45:c5:ab:6b:bd:a5:38:eb:
9b:f5:16:b0:e7:35:f6:e0:01:f4:b0:45:ed:53:50:
41:56:fb:06:1e:3e:aa:76:d6:eb:b3:03:7c:2d:11:
82:b3:4a:e8:53:1a:c9:7f:98:cb:7e:de:19:bd:ff:
f3:31:b3:ad:4c:b1:93:48:cc:20:42:06:53:56:2a:
9f:9d:86:23:eb:35:e2:2d:8a:9a:38:d5:99:6b:50:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:70:C7:E8:11:A6:99:4C:53:CA:4A:F7:99:E3:11:D5:3B:38:96
X509v3 Authority Key Identifier:
keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:de:4f:39:88:39:b3:85:e8:db:30:96:35:f7:9d:bd:98:0c:
42:b9:97:dc:7a:22:ff:97:a1:3f:80:a8:13:38:53:bb:b8:18:
38:bc:db:c8:bc:86:ef:b3:3d:52:0f:08:45:0a:ed:46:dc:74:
51:6a:69:8f:01:4a:13:fc:c1:a9:04:24:a5:31:06:4a:1d:8f:
c2:c4:e5:05:53:f7:f0:8f:67:34:71:ca:3f:1b:a1:ed:1a:81:
20:b9:04:65:88:5e:7b:dc:7b:ca:15:26:52:d9:20:42:75:47:
aa:57:02:33:0e:6b:7f:00:57:1d:c3:ae:3e:72:0b:2a:8a:4b:
29:9d:ef:51:6e:1d:00:72:40:3a:ac:90:25:c0:04:16:b9:8c:
b8:04:f1:44:ef:87:1d:d4:9e:e3:1a:b9:fa:aa:9a:ba:f8:9f:
21:0d:36:2d:03:84:31:2b:08:97:5e:c0:3f:81:49:17:b6:38:
72:93:d1:bc:a8:b1:a9:da:36:fd:71:7e:c8:2a:6d:9d:b3:26:
77:15:2a:db:48:56:07:2d:e3:39:fb:10:69:79:3a:df:b8:fe:
13:d3:55:ea:5c:d5:65:36:b9:8d:6b:98:65:23:f7:ca:71:67:
6f:7f:61:44:31:1e:83:46:41:aa:59:91:b5:1b:f7:d5:9d:a1:
2b:68:53:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdBNzIxMTAvBgNVBAUTKDJFRjQ2OTU0NDNBNEMwQzdCMzRFQTkxQjYyQTNEOEY4
RTQxNDUxN0UwHhcNMjYxMDE5MDM1OTMwWhcNMjYxMDI2MDM1OTMwWjAYMRYwFAYD
VQQDEw02YWQ1OTVhMy1iMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1bxBD13GCjjJKOWxB3onbrlrfRuwfGcUg21030i/3iXyAuO/7YQ59QKBl2eZ
/zVS4omopVE0CukoX8yOa3gM8eevW338l0m07coS6xIGdQsd2LQ0IBWXTsaiOE8+
oDug9Y9tuH8+ZrCecCb+cgnRMXsEIEmjbKpd2lv0tk6b/4m0DhgH5J/xI5DW9vl6
rqc6C1SWzr8HNpb2c3v0znOqxMp8hu5dcMhS38YMRcWra72lOOub9Raw5zX24AH0
sEXtU1BBVvsGHj6qdtbrswN8LRGCs0roUxrJf5jLft4Zvf/zMbOtTLGTSMwgQgZT
ViqfnYYj6zXiLYqaONWZa1Di6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPR/cMfo
EaaZTFPKSveZ4xHVOziWMB8GA1UdIwQYMBaAFC70aVRDpMDHs06pG2Kj2PjkFFF+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi80NERFNjlDRTJC
MTQxMUYwODUyM0YyNkJDNEY5QUUwMi9MdlJwVkVPa3dNZXpUcWtiWXFQWS1PUVVV
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0x2UnBWRU9rd01lelRxa2JZcVBZLU9RVVVYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0E3Mi80NERFNjlDRTJCMTQxMUYwODUyM0YyNkJDNEY5QUUwMi9MdlJwVkVPa3dN
ZXpUcWtiWXFQWS1PUVVVWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdN5POYg5s4Xo2zCWNfedvZgMQrmX3Hoi/5ehP4CoEzhTu7gYOLzbyLyG77M9
Ug8IRQrtRtx0UWppjwFKE/zBqQQkpTEGSh2PwsTlBVP38I9nNHHKPxuh7RqBILkE
ZYhee9x7yhUmUtkgQnVHqlcCMw5rfwBXHcOuPnILKopLKZ3vUW4dAHJAOqyQJcAE
FrmMuATxRO+HHdSe4xq5+qqauvifIQ02LQOEMSsIl17AP4FJF7Y4cpPRvKixqdo2
/XF+yCptnbMmdxUq20hWBy3jOfsQaXk637j+E9NV6lzVZTa5jWuYZSP3ynFnb39h
RDEeg0ZBqlmRtRv31Z2hK2hTkA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:29:11 2026 by rpki-client