
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
File: LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft (raw, json)
Hash identifier: FJhAQpxllalunLYgsZ2bdxLnCfPfOxA4A9tEaLy6Pw8=
Subject key identifier: 8D:46:A6:C9:D5:2D:2A:E7:2B:2A:59:3A:EC:33:A7:2A:F4:0F:88:F4
Authority key identifier: 2D:64:A9:DD:2E:32:16:F1:C5:C6:2E:59:1F:43:9D:85:FE:C9:60:7D
Certificate issuer: /CN=A9180197/serialNumber=2D64A9DD2E3216F1C5C62E591F439D85FEC9607D
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
Manifest number: 36
Signing time: Wed 19 Aug 2026 09:20:51 +0000
Manifest this update: Wed 19 Aug 2026 09:20:51 +0000
Manifest next update: Wed 26 Aug 2026 09:20:51 +0000
Files and hashes: 1: LWSp3S4yFvHFxi5ZH0Odhf7JYH0.crl (hash: UUfbXO8lXTCrl4oniCsUAraP0UrE1QHryUb5Cjb+G28=)
2: 035845B2490711F1A7FD9D6D96833773.roa (hash: rWIJGpFTinoty58g7bsS/yk9wUFci1J+bvQ0C07OdeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.crl
rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180197, serialNumber=2D64A9DD2E3216F1C5C62E591F439D85FEC9607D
Validity
Not Before: Aug 19 09:20:51 2026 GMT
Not After : Aug 26 09:20:51 2026 GMT
Subject: CN=6a857573-f862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:2e:8f:4e:cd:00:1e:a2:ea:41:a9:c0:48:
c1:c7:66:75:19:da:99:a8:c5:e6:5a:ab:7e:ca:9f:
7d:76:12:f6:8c:7f:76:f3:d3:05:92:7e:40:79:b5:
7a:e8:97:7c:8d:b8:b5:bb:2c:6c:62:08:41:51:a2:
ed:80:13:60:54:5d:ce:04:fc:e8:8a:a6:35:b3:e8:
56:6f:b9:ab:57:ae:8d:aa:a0:82:e9:95:a7:09:31:
6c:f1:7c:b4:7b:ba:f6:5c:de:af:8b:3d:2e:91:8f:
32:9d:b8:5b:00:57:dd:ad:d3:4f:9a:2a:9e:d8:e7:
8e:a8:73:c6:ce:ac:61:ef:db:b1:1e:7e:fd:27:49:
e2:35:7c:b3:e4:45:99:8f:16:51:49:f8:74:01:4a:
3f:11:d7:e9:8d:4b:2c:1b:db:be:b6:c0:56:1e:31:
75:b3:fc:c3:9c:11:14:53:6f:f9:2f:21:7d:a4:04:
3f:e2:fd:a7:ea:1f:36:72:f9:ad:39:d4:bd:5d:33:
40:8c:fe:a6:7f:a0:0d:d9:cd:6e:44:f6:3f:58:db:
f3:ba:6a:e3:f9:e2:44:07:63:2c:39:35:ac:3f:6f:
dd:e1:34:ff:f2:47:20:63:e8:48:70:0e:73:53:45:
f6:3f:d6:ec:b5:fc:b2:53:72:68:52:1c:79:43:08:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:A6:C9:D5:2D:2A:E7:2B:2A:59:3A:EC:33:A7:2A:F4:0F:88:F4
X509v3 Authority Key Identifier:
keyid:2D:64:A9:DD:2E:32:16:F1:C5:C6:2E:59:1F:43:9D:85:FE:C9:60:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:0d:db:28:5c:6c:e2:09:c1:f8:89:ab:78:4d:6c:a2:4b:be:
94:b6:3a:96:9c:3e:6b:47:61:69:f8:45:b5:a0:7d:fc:eb:9b:
97:1a:1c:42:4a:94:81:85:a4:f9:65:ee:58:96:ad:8a:df:ce:
65:f3:20:2a:20:47:58:41:e4:a0:20:a6:0a:ee:a9:1e:00:2f:
db:c1:ad:07:a0:88:d6:18:07:f5:2d:68:24:6f:2c:78:4b:e6:
63:28:c3:e0:fd:60:90:c9:42:67:a3:15:e9:b3:25:bb:df:46:
6d:9c:cf:4b:8c:7a:ee:5b:6b:27:fc:fe:22:f9:1c:77:15:13:
8a:d3:cc:d5:2d:a2:5e:06:47:3d:36:c2:ec:39:66:05:22:55:
ef:76:c2:7b:77:5a:ce:4e:1f:3f:9d:c6:ea:ef:31:d3:20:85:
15:80:2f:90:4d:ee:c2:6c:ee:c5:43:22:ad:dd:c6:34:1f:bb:
85:01:5f:30:11:07:84:3c:8e:30:da:3e:76:f6:ae:8e:63:b1:
5b:e2:5e:d8:1f:81:7f:0e:96:ad:20:32:d4:33:ee:4d:39:65:
d8:56:10:e1:c0:65:d8:7e:ad:2c:4e:4e:10:f1:95:60:12:83:
4d:56:7d:f9:fd:54:b7:2f:09:22:88:07:fe:1f:43:d9:2c:bf:
b6:e6:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:08 2026 by rpki-client