
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier: T3lUXA60rhvIC3FOsa8fMzp+dIeTVXSzSZ734L5CaMg=
Subject key identifier: 9E:24:05:43:7B:F0:71:41:B9:B0:16:93:FB:E6:E7:8A:DA:E1:39:F6
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number: 0206
Signing time: Wed 19 Aug 2026 03:43:06 +0000
Manifest this update: Wed 19 Aug 2026 03:43:06 +0000
Manifest next update: Wed 26 Aug 2026 03:43:06 +0000
Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: rksbANg7op47o3snn3od9BFKb0ikwPGljfKlavlZM3s=)
2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: LSGqnHSpVE6t1VnR1CP7MXHTDo/gjQidyC59lrbruAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Validity
Not Before: Aug 19 03:43:06 2026 GMT
Not After : Aug 26 03:43:06 2026 GMT
Subject: CN=6a85264a-a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:cb:b6:e1:05:22:ea:73:4f:4a:f4:65:24:
8a:d5:23:25:b8:54:f5:03:16:b9:57:20:f4:4f:f0:
a2:fb:d5:4f:08:cd:76:89:83:9c:65:2a:eb:da:9d:
4d:d9:f6:07:bc:c9:1f:52:c3:74:d1:d8:ed:31:25:
9f:ed:2c:c0:23:32:a1:13:54:53:cd:33:3a:e7:c3:
b3:2f:e3:48:5a:25:9a:87:18:57:09:7e:ea:c9:4c:
d5:96:00:64:76:0d:1d:71:b4:a5:30:1d:04:e4:b7:
54:cb:29:71:42:2f:b6:68:2c:89:46:19:6e:09:7f:
79:49:f3:49:8b:17:1f:5f:3a:f9:2c:14:a4:6f:98:
c2:9e:fc:83:62:da:9d:2a:36:9a:64:9b:bd:00:12:
de:9c:95:7a:8c:b6:4c:91:d2:2b:92:a4:e9:0b:c0:
13:0f:e3:50:cc:ef:31:b5:58:67:d1:4a:d9:35:e1:
f4:f1:ed:f7:94:48:66:2f:56:a8:c4:d0:9a:18:f6:
82:7e:b2:18:7b:09:62:08:89:a6:7a:d6:a2:3c:b0:
d2:89:2f:ca:6c:47:8d:e6:4b:fa:b5:3a:83:2c:de:
8c:ab:99:20:37:84:bb:dc:6f:27:28:7b:83:be:d6:
2f:41:5d:99:ef:f7:2c:fa:62:f4:8f:89:4d:34:8b:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:05:43:7B:F0:71:41:B9:B0:16:93:FB:E6:E7:8A:DA:E1:39:F6
X509v3 Authority Key Identifier:
keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:57:ce:86:d6:cd:cf:88:71:cb:5d:79:b2:0f:09:63:f8:49:
dd:52:72:9b:fe:a0:a1:f0:d7:9a:a9:72:e7:f6:a1:99:46:39:
48:f7:04:d3:b0:cc:26:3e:58:f9:8a:ff:70:d7:32:cc:0b:9a:
e2:14:7f:f7:8e:ae:82:a9:65:b3:47:76:28:9a:1f:cf:6c:66:
f6:f4:cc:65:93:41:64:bb:56:fc:b7:ae:20:72:de:a5:31:55:
43:a8:25:b4:64:af:b8:0e:ee:33:6b:59:a2:aa:a5:07:a6:25:
93:2f:05:71:29:10:5a:e8:89:2b:cd:9f:73:6a:4e:84:3d:bd:
8f:f7:8a:dd:43:54:7e:7e:b4:db:c3:5c:71:9d:6c:ca:d0:85:
f3:c0:b3:8f:8f:ac:9f:f4:ad:fb:ae:75:a1:8a:6c:0b:5d:70:
11:c0:9d:88:0e:6f:5a:63:bb:73:72:fb:0c:42:cd:e7:9b:84:
67:88:6f:c0:14:83:83:6f:5c:e7:26:76:0d:38:3a:5a:bf:cc:
8f:a7:46:0a:32:2a:32:db:e3:33:86:f7:b9:f2:5c:94:03:fc:
79:ac:07:77:c4:86:83:2f:e4:85:4a:7d:68:12:f9:1e:00:98:
50:ca:2b:b6:cd:a7:65:09:07:d1:49:8b:ef:d9:32:bd:27:18:
9c:33:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:35 2026 by rpki-client