
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier: cy8FZDh7ZsJOElE7mSpBXLFoTHJKh2lp6mA0ZkJDZuE=
Subject key identifier: 74:F6:D1:C9:C6:84:F4:62:C5:FD:D2:1D:16:5A:37:E3:A5:90:34:67
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial: 0982
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number: 096A
Signing time: Mon 22 Jun 2026 20:09:33 +0000
Manifest this update: Mon 22 Jun 2026 20:09:32 +0000
Manifest next update: Mon 29 Jun 2026 20:09:32 +0000
Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: hdPHRCtyfq1IvW0BIiFr54lADowNm6+5fRZdkKVVShw=)
2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: K3c5oq/qmuRX+k4/b8uhhcLi8asZQ+2HUoQXvrhiTHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2434 (0x982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Validity
Not Before: Jun 22 20:09:32 2026 GMT
Not After : Jun 29 20:09:32 2026 GMT
Subject: CN=6a39967d-988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:bc:86:bb:2e:c4:1a:71:24:06:c2:06:bd:
78:c5:6a:87:7b:0a:4e:ad:f7:32:b7:fe:a5:8a:18:
bf:c9:ae:23:4a:15:e6:70:ae:1f:17:cc:29:66:4e:
26:df:e9:3f:d2:3f:de:ed:a9:48:ec:fa:26:91:77:
ce:91:79:26:ee:f5:5a:91:8a:82:29:04:f9:de:5b:
0d:6a:c2:e0:aa:a5:bc:f3:9f:4a:40:21:a8:34:3f:
26:70:0d:67:81:ff:2b:c0:f5:66:d6:40:59:7b:9b:
b9:07:bb:12:a0:54:e6:e3:d4:91:ff:48:0d:82:d2:
a8:eb:8a:ea:54:f0:80:46:33:70:e5:90:ec:73:30:
00:13:eb:48:9b:22:54:7f:ae:29:98:84:95:07:e4:
62:8e:4f:f4:e0:74:9f:9c:44:5d:1e:9e:96:a7:01:
33:6b:45:1c:a6:e7:d4:4b:72:a7:11:99:1c:23:5b:
a5:63:d2:08:5a:71:f4:12:d1:de:89:77:e2:1b:79:
ae:46:9c:d7:49:35:88:56:f6:e2:26:b1:1f:c0:b5:
c1:95:93:a9:7e:bd:6a:12:c8:70:c2:8d:9a:fc:24:
df:c2:c8:65:42:e2:a6:5d:52:67:25:10:34:3e:e1:
f7:84:e5:86:1b:e7:fe:48:b7:e1:9a:cb:10:cb:61:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:D1:C9:C6:84:F4:62:C5:FD:D2:1D:16:5A:37:E3:A5:90:34:67
X509v3 Authority Key Identifier:
keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:61:0b:74:0f:36:df:23:8f:fd:8a:27:f6:57:f9:bb:9e:83:
6e:38:95:9d:65:0f:70:01:bf:8e:0b:6f:11:44:cf:3e:31:32:
44:f5:26:82:77:49:83:18:82:5f:9c:3f:c1:1d:a0:b5:52:ca:
93:59:01:90:30:42:9b:d5:83:a6:da:37:75:aa:ba:ee:dc:ae:
9f:05:e5:46:70:c6:ef:4e:ea:76:66:68:79:65:5f:dd:ca:bc:
32:15:d5:26:0c:d7:40:cd:d9:71:1a:ed:bc:ae:48:8a:a0:5b:
07:88:c5:b7:d3:ad:9a:7a:7f:be:53:19:79:5b:64:b4:40:98:
9f:75:02:49:66:b8:3d:73:b9:0b:47:b9:cf:69:f8:21:1e:25:
f4:f4:d3:bb:19:2c:e6:eb:89:fb:fa:7e:cc:55:f6:c0:30:b5:
11:14:42:81:90:2d:5c:32:34:78:6c:58:cf:a6:fd:21:3b:50:
6c:a6:f9:b9:6d:44:9d:e9:40:f5:41:6c:7b:58:f0:41:15:a7:
68:2d:df:3e:a5:24:8c:4d:8f:ec:1a:23:4b:73:27:5f:7e:33:
08:07:93:28:32:d7:9b:34:7e:d0:ce:8d:b2:07:0f:7b:14:d9:
9a:f5:c3:e9:ee:5f:12:68:c0:25:92:db:a0:0e:e1:f4:d2:21:
4d:66:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:22 2026 by rpki-client