
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier: JqXOYPeYeVq5OYIAqMY/G3KaGInYaSqJKq/jn2VxTto=
Subject key identifier: A4:E9:E2:7A:C5:88:4C:AF:36:F2:3B:0F:07:42:8E:06:34:3F:4E:A8
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number: 01CF
Signing time: Mon 01 Jun 2026 04:29:17 +0000
Manifest this update: Mon 01 Jun 2026 04:29:16 +0000
Manifest next update: Mon 08 Jun 2026 04:29:16 +0000
Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: XGopf7+GuATgalNHDozz6UpL9tFFigUIIItI6/HET6o=)
2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Validity
Not Before: Jun 1 04:29:16 2026 GMT
Not After : Jun 8 04:29:16 2026 GMT
Subject: CN=6a1d0a9d-15b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:2c:0c:f3:27:b7:69:53:b6:33:56:a4:f4:
d3:c5:f5:ec:50:db:ea:8e:a7:fb:d5:c9:0b:50:1d:
05:77:4f:0e:8b:fc:4a:97:94:da:b7:cd:bb:f6:ba:
20:41:32:04:13:73:95:78:a9:8f:cf:5e:6b:6e:52:
02:38:a4:18:f3:b0:d5:16:56:3b:ed:42:d4:af:cc:
c6:75:e4:c2:8d:62:9f:49:39:88:8d:f5:10:ee:5e:
17:49:2f:16:9c:01:97:50:6e:17:1c:93:32:e1:fe:
e6:7e:27:67:e3:29:2f:23:80:77:7f:2f:8e:19:1c:
e8:55:4a:ff:83:2f:80:67:1a:52:07:c2:e7:c2:fc:
f8:20:72:18:c9:ea:91:3f:40:16:38:5a:15:7b:58:
d2:56:9f:6d:23:51:4e:26:50:5d:b0:ce:ac:97:b1:
96:bf:7b:ab:82:cd:a1:8a:b1:df:0a:b3:04:0c:70:
da:d2:7a:78:98:79:b6:b5:5a:2f:49:f9:0f:b0:43:
e5:f8:4e:32:41:fd:2c:aa:98:f0:1c:f1:c4:38:0e:
04:2c:5e:29:1f:b0:a6:2d:24:01:03:15:47:d9:2e:
3d:86:05:e8:af:d4:f1:82:31:62:cf:7a:2a:a2:01:
c7:d4:16:bf:70:65:01:1c:74:6d:9b:5a:e2:b8:3f:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:E2:7A:C5:88:4C:AF:36:F2:3B:0F:07:42:8E:06:34:3F:4E:A8
X509v3 Authority Key Identifier:
keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b8:54:53:fb:72:42:91:18:4d:3a:96:90:10:19:6f:df:08:
43:a2:e4:a5:73:23:de:dd:10:c0:66:96:d6:71:4d:c3:e6:a9:
7d:71:94:bf:fc:34:f7:71:dd:e6:f9:d6:ab:f7:0c:bf:bf:bb:
8c:fe:cf:d9:eb:45:82:e8:f7:31:f4:e7:ab:48:69:f5:27:45:
2e:ae:00:45:38:48:d7:34:ba:d0:a4:df:75:64:ba:94:fe:3c:
db:8a:29:f7:bc:69:2a:55:e8:38:b2:97:54:d7:f1:e4:13:8c:
94:f1:c0:37:61:b0:80:22:10:7a:f7:54:3e:0a:34:67:fc:20:
19:d3:48:8b:00:f5:35:4c:5b:4f:4a:0a:e7:93:f0:1f:2a:70:
aa:f7:ca:57:f2:87:ed:d7:73:48:c1:ec:68:c1:e0:50:f6:b3:
ba:be:0f:a5:d1:57:93:e2:21:3b:02:64:64:a1:d4:9f:56:56:
c5:a5:11:ea:da:02:f6:b2:7f:50:b1:c9:50:8b:cf:1b:85:e6:
96:e6:16:c5:35:cf:c8:58:52:4b:68:af:ca:cd:08:24:8f:00:
51:88:ca:bd:1d:ba:4a:6d:e5:eb:91:c5:a8:ee:e1:36:49:9e:
f4:f1:1f:70:4f:43:dd:38:57:71:5d:c3:4a:df:f4:bd:93:5f:
b9:79:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:04 2026 by rpki-client