
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier: rmAFVIjRAW72bPRnK0XQhyq12MCc15lKLIAIGVcF7Ak=
Subject key identifier: BB:35:00:0C:AC:FC:90:1F:54:31:CF:74:CF:93:9B:18:36:89:00:92
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial: 095A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number: 0942
Signing time: Sat 04 Apr 2026 20:00:14 +0000
Manifest this update: Sat 04 Apr 2026 20:00:13 +0000
Manifest next update: Sat 11 Apr 2026 20:00:13 +0000
Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: sJrqSIlASu6aH7xFict2WQbecxAnZakmLVp1/p/wX3s=)
2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: K3c5oq/qmuRX+k4/b8uhhcLi8asZQ+2HUoQXvrhiTHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Validity
Not Before: Apr 4 20:00:13 2026 GMT
Not After : Apr 11 20:00:13 2026 GMT
Subject: CN=69d16dce-36de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:16:17:1d:c4:1c:28:b8:21:4d:e9:43:83:
09:6f:7e:b0:a2:ba:ee:85:af:a2:8d:8b:38:f1:95:
2b:5c:d1:39:97:22:b1:e0:03:7b:99:f2:22:a6:67:
53:5e:73:0b:f0:69:61:a2:85:da:14:04:0a:c2:71:
57:16:44:df:b0:06:87:60:4e:f4:e3:7a:8d:ea:6b:
c3:16:fa:d9:45:c7:c1:ea:0a:67:8c:43:8c:77:06:
14:16:30:d5:7d:ee:8a:9c:49:50:91:d4:26:13:f7:
a2:1b:6f:81:37:af:63:bd:e2:de:dc:57:1c:d4:be:
a2:ad:41:d0:88:f4:20:81:54:63:21:9e:f6:85:e7:
17:be:f2:17:1f:95:43:f1:24:5f:9a:1c:54:b6:87:
4c:da:1c:0b:02:cd:db:84:d3:1e:ab:5f:cd:f7:dd:
6f:a4:0c:8b:ea:d0:31:54:e5:2e:7d:ed:96:fe:e9:
7c:f2:39:d8:6a:5a:5f:45:01:b0:7f:aa:8a:9e:7f:
0f:f7:00:a8:2c:d1:bc:11:4f:17:36:0c:0d:8b:26:
9c:96:30:02:80:f6:6f:ba:c5:aa:65:ba:0d:5f:b8:
d7:f9:af:6b:48:88:b9:b9:87:47:01:5e:10:22:7c:
ec:d3:92:ff:a5:cc:15:97:25:2c:e8:d9:66:e4:b8:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:00:0C:AC:FC:90:1F:54:31:CF:74:CF:93:9B:18:36:89:00:92
X509v3 Authority Key Identifier:
keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:98:16:fe:73:08:de:7d:7f:8f:5c:b8:36:de:51:fc:2e:
05:c5:c8:88:c0:d7:bb:b4:e3:13:99:10:ae:72:05:45:8a:12:
40:02:83:32:03:f0:55:19:ff:c6:61:89:2a:f8:64:2c:bd:ce:
5b:a5:57:f6:5a:4e:73:93:db:99:aa:07:91:10:d8:56:73:75:
f8:ec:0f:bb:9d:78:3c:61:62:39:c0:57:54:bc:3c:a1:0b:da:
d5:d4:75:ab:a9:d6:f5:53:de:70:58:54:c4:04:c0:38:8d:a6:
69:01:8c:06:b5:0d:1a:d9:95:67:1c:82:1c:89:94:15:3e:9a:
f6:ad:94:33:df:fe:62:2f:66:0b:a3:ac:0e:45:cb:c1:2c:96:
ed:52:8c:9e:f6:10:43:2e:d0:10:33:82:f4:09:c2:f8:7b:1b:
95:99:07:7c:9f:c6:8a:ad:da:c0:f0:ef:02:0c:60:72:38:24:
e1:78:88:f5:72:3b:2c:c6:f9:56:ce:10:0b:75:62:02:32:e4:
5e:2c:99:13:59:63:61:93:7c:3b:ca:5a:73:5f:29:e5:f5:65:
cf:61:87:77:69:d0:eb:c8:6a:42:61:97:be:38:61:00:4f:15:
be:05:a3:4f:5e:e8:06:65:7c:1b:19:8a:5a:eb:88:16:83:ee:
4a:d3:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client