
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
File: LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft (raw, json)
Hash identifier: CJHPtZ6nB9wnbahICiBx6E3ChTzn1yWbcdVs6avWy5E=
Subject key identifier: 42:2D:50:B1:52:69:6C:C4:04:63:94:00:BA:55:BE:1F:30:23:01:A3
Authority key identifier: 2D:64:A9:DD:2E:32:16:F1:C5:C6:2E:59:1F:43:9D:85:FE:C9:60:7D
Certificate issuer: /CN=A9180197/serialNumber=2D64A9DD2E3216F1C5C62E591F439D85FEC9607D
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
Manifest number: 09
Signing time: Tue 19 May 2026 09:03:26 +0000
Manifest this update: Tue 19 May 2026 09:03:26 +0000
Manifest next update: Tue 26 May 2026 09:03:26 +0000
Files and hashes: 1: LWSp3S4yFvHFxi5ZH0Odhf7JYH0.crl (hash: kB7b4Qi4NGqeTBkhvDxhfqc1FC2k2NxiOYV4wGuBV+0=)
2: 035845B2490711F1A7FD9D6D96833773.roa (hash: rWIJGpFTinoty58g7bsS/yk9wUFci1J+bvQ0C07OdeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.crl
rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 09:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180197, serialNumber=2D64A9DD2E3216F1C5C62E591F439D85FEC9607D
Validity
Not Before: May 19 09:03:26 2026 GMT
Not After : May 26 09:03:26 2026 GMT
Subject: CN=6a0c275e-709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:1a:e7:57:7a:aa:95:49:cc:92:32:d6:da:
39:6b:c5:65:4e:95:56:8d:23:c1:47:06:a5:e7:14:
32:1c:2a:8d:fb:25:b6:00:7c:eb:3e:fb:1e:a4:86:
27:66:8f:89:bf:80:93:cb:6d:85:7f:73:f4:c5:26:
5c:48:85:1f:16:21:c9:9d:79:85:8d:27:f7:8d:ef:
77:80:d7:01:e0:20:21:df:fe:88:42:61:45:cc:1f:
3a:69:85:25:35:49:e9:56:bb:42:b0:ee:bf:38:52:
b1:ae:fb:00:ab:08:b5:b7:c8:d1:a4:05:4e:53:04:
52:a8:89:51:e3:ae:eb:33:a2:c5:e9:35:bf:59:85:
9b:02:c6:9d:e8:ee:bf:57:c4:10:0b:c4:ac:00:fa:
3c:37:ba:c7:57:4f:1d:2d:8f:3d:71:d8:a7:19:51:
de:9f:b9:62:05:0d:1d:46:7d:b2:10:b6:dc:a4:ac:
e3:3c:61:fb:3b:13:31:98:74:cd:61:07:84:39:91:
65:02:9a:17:c4:db:6b:6d:de:41:42:65:49:65:a3:
a6:b2:9e:15:a7:68:65:f1:94:67:22:7f:95:88:06:
c0:0c:4d:ce:49:b7:34:d7:75:58:f0:d2:af:f4:a4:
f4:94:70:ad:7b:38:2b:46:45:8f:ba:54:7b:59:7d:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:50:B1:52:69:6C:C4:04:63:94:00:BA:55:BE:1F:30:23:01:A3
X509v3 Authority Key Identifier:
keyid:2D:64:A9:DD:2E:32:16:F1:C5:C6:2E:59:1F:43:9D:85:FE:C9:60:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180197/E33EB776490511F1B2A4255C96833773/LWSp3S4yFvHFxi5ZH0Odhf7JYH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:57:70:9f:51:c3:97:7a:ab:91:9e:bb:82:0a:47:ff:0d:84:
2f:56:a3:ee:42:d8:76:f8:c8:6b:08:18:c1:24:ce:f9:fb:5e:
6f:95:f8:a0:c9:b7:1e:c3:5f:9f:63:04:40:2a:04:9a:eb:61:
e6:9e:82:cc:36:19:70:ac:1c:9c:23:20:23:e6:5c:81:20:54:
91:fd:6f:c6:cb:ea:79:80:a1:b6:fd:9a:37:86:9c:a2:d4:8d:
53:3c:c5:0f:85:51:7f:cc:ef:4a:75:aa:8c:db:53:1a:b5:13:
1d:bc:a8:03:a5:40:26:5a:55:68:f4:8f:1e:41:cd:d6:7e:76:
37:f1:7d:fe:71:e6:20:19:ac:a7:96:01:81:43:c2:7c:6b:e2:
e6:d2:06:b2:58:09:7c:17:11:7a:d6:af:2b:75:0c:51:3b:99:
ce:eb:9c:03:43:fc:43:9e:70:ab:36:df:f6:55:b0:c4:d4:59:
f7:94:ca:37:77:7c:d1:ea:87:be:ed:cf:53:2e:79:8f:e1:da:
99:6f:e3:da:33:15:73:b0:14:0d:a7:2a:77:c1:24:2d:37:b2:
d9:45:58:02:3a:0a:af:5c:c9:0a:92:bf:cf:08:4a:9d:9d:aa:
d2:9a:45:f5:e4:0e:5f:0a:d0:c6:8c:1a:ee:b6:f1:92:d9:ed:
f1:3c:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:20 2026 by rpki-client