
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: MpklbWTVXlRwvswp+WPkqm/cSzWG4ekKqQnVUuAkbeQ=
Subject key identifier: 2C:B8:84:F0:06:A2:8D:DA:97:10:07:52:40:73:2B:F3:BA:AA:08:B8
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: 0152
Signing time: Fri 17 Jul 2026 06:24:30 +0000
Manifest this update: Fri 17 Jul 2026 06:24:29 +0000
Manifest next update: Fri 24 Jul 2026 06:24:29 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: lMp6eXja/mOhHpGGwmDJ2LlDhpO6Z21wjZMGIYoawqg=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: Jul 17 06:24:29 2026 GMT
Not After : Jul 24 06:24:29 2026 GMT
Subject: CN=6a59ca9e-72e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:0d:3c:60:36:90:8a:b0:20:44:ab:d1:30:
c2:40:20:84:df:76:3a:e9:9e:46:37:70:4e:16:2b:
9b:fa:a9:46:14:b0:fc:83:e1:7a:8f:e3:56:12:f8:
d1:48:ec:8c:82:ae:2a:c9:5a:77:9d:b2:32:fb:b2:
19:55:1b:d1:7a:87:a1:94:47:8a:b0:10:00:8f:f8:
e2:7c:3a:31:0c:be:3d:53:56:31:e8:db:2a:a6:f2:
7e:5b:f9:23:fe:db:5d:36:f3:4c:43:86:cc:e8:7d:
3a:00:dc:30:cb:49:1b:6b:04:9b:19:28:30:3c:ab:
cc:7b:bc:32:8a:ec:05:0a:77:18:73:d1:06:77:0a:
db:ca:60:c6:7d:0d:50:d1:48:54:17:a0:54:a3:fe:
9c:b5:e2:e5:df:50:f7:4d:56:37:07:a0:2e:85:bb:
0e:9e:a3:94:fa:7f:08:33:08:61:67:e2:ea:01:fc:
75:3b:1a:7e:45:2d:db:6f:44:2f:c2:41:50:98:a5:
ba:e2:fb:78:c3:73:ec:87:0e:42:21:9e:0d:60:c8:
63:68:f4:d6:f1:44:f3:bf:db:54:b5:5b:77:b1:8d:
c7:3d:50:65:d0:77:cd:5d:67:3d:8b:21:f8:15:41:
db:a7:52:d4:8e:ee:eb:c9:69:1d:c2:6a:10:b2:68:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:84:F0:06:A2:8D:DA:97:10:07:52:40:73:2B:F3:BA:AA:08:B8
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:8e:87:62:34:1c:b7:7a:c4:18:4a:e0:8c:43:7b:42:3f:73:
15:ef:33:50:36:c5:c4:da:33:ca:48:f9:f0:2e:40:a8:6d:07:
bc:6e:c9:f1:2f:6d:d8:0a:8c:e8:5d:87:78:ae:90:8a:14:a0:
f0:8d:7a:57:0a:90:ba:27:9a:51:88:14:51:69:92:09:63:7d:
d6:2c:58:8f:01:5c:3a:57:fc:66:36:c8:f4:54:7f:06:7e:7e:
2f:93:fc:d9:1e:bd:30:30:9d:e0:36:f9:8f:0a:70:74:33:eb:
6c:95:af:31:cb:cc:bd:77:5e:5e:e5:2f:5d:4e:6f:41:00:7c:
cc:82:4f:ed:60:3c:b3:a4:ec:40:09:c7:d8:77:51:47:3a:6b:
ce:e1:d2:39:bb:80:cf:b1:68:bc:17:11:49:62:d0:13:0c:2b:
0b:b3:35:b4:c1:b0:b8:44:07:0a:d1:b3:36:06:42:0e:c1:75:
68:12:f0:04:59:78:7e:90:0d:c3:ef:60:c7:ef:71:9c:b2:a9:
23:1e:46:83:96:67:90:58:e1:39:7f:b1:b2:19:1e:46:9d:e3:
d5:29:e6:e1:b1:47:b9:36:78:9b:64:01:28:35:36:94:a1:f0:
35:33:66:fe:29:bf:8a:0b:f9:e3:14:e8:7f:38:ce:c6:9b:8d:
64:be:bf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:01 2026 by rpki-client