
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json)
Hash identifier: LlYBqyjWez/ilM/DM7wsv/kqgKFA5Euuwo6LCF2ayto=
Subject key identifier: 7D:5F:01:1B:5F:3B:5B:BC:AD:27:01:2A:BD:6B:24:F3:C8:3B:86:BC
Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
Manifest number: 0180
Signing time: Sun 05 Jul 2026 05:09:04 +0000
Manifest this update: Sun 05 Jul 2026 05:09:03 +0000
Manifest next update: Sun 12 Jul 2026 05:09:03 +0000
Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: kyT0P90+eVT7Krm4QN71FHT/9SJ39XEsnqqaF0x6PSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Validity
Not Before: Jul 5 05:09:03 2026 GMT
Not After : Jul 12 05:09:03 2026 GMT
Subject: CN=6a49e6f0-1344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:60:b7:90:d5:e1:32:74:15:58:42:70:98:
77:34:12:1e:8f:0c:c9:3b:cd:2b:fa:bd:33:35:f2:
88:48:01:02:37:1e:78:2c:62:30:bd:e5:37:fb:94:
20:b4:7c:e1:8e:eb:51:de:5e:22:e3:1b:2a:8f:b8:
4d:8f:1d:ce:92:93:be:eb:b0:fb:2a:02:7c:52:a9:
60:50:bb:45:ed:2a:ae:33:e8:f5:df:21:b6:9d:24:
2f:f7:be:f8:62:e2:9d:a2:61:ba:d1:49:c2:50:b9:
44:a1:01:25:9b:55:31:69:aa:50:48:0d:af:5c:1e:
d3:3f:5a:27:15:95:c5:27:4a:3d:a8:c1:85:03:3a:
b6:bc:60:28:22:6f:d8:ff:a6:8e:8c:02:6b:b6:9c:
fe:06:1d:68:c2:a8:49:fc:0b:ac:25:a0:93:76:a7:
b5:b1:51:eb:4a:f8:c8:de:4c:22:23:68:84:46:05:
99:cc:8d:b2:5d:c7:8f:50:77:17:e6:e8:e1:8c:4b:
cf:29:15:d2:f2:67:b9:1d:b7:89:9e:4c:46:86:74:
5d:9e:fa:f4:04:da:aa:46:27:11:ef:00:67:a0:fa:
4c:0e:03:a8:19:d1:ab:c4:63:16:04:dc:e9:09:4a:
a8:2b:b2:6b:ea:3e:31:9b:5d:8d:ef:cd:d8:30:06:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:01:1B:5F:3B:5B:BC:AD:27:01:2A:BD:6B:24:F3:C8:3B:86:BC
X509v3 Authority Key Identifier:
keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:5a:0e:26:af:ec:7c:9c:8a:00:e1:77:1e:16:be:1d:26:dd:
7f:55:87:76:81:7a:94:53:45:d0:d8:91:44:d4:ae:72:23:37:
d3:75:ae:1b:89:97:e7:1b:95:47:98:32:87:f9:26:6d:36:e1:
11:3d:4e:db:c1:f1:08:6e:0d:7f:a3:23:ab:91:7c:bf:d3:ab:
de:08:3a:4d:6b:89:68:97:98:ce:5d:89:f6:38:d8:b5:2d:86:
40:e1:4b:a3:a7:c1:61:72:70:95:2a:19:37:c4:83:ae:bd:37:
55:e2:22:d0:98:e2:80:a8:cf:9b:1a:82:9c:71:d3:ce:b2:61:
e7:67:ab:d4:c6:da:a3:48:4d:b5:61:15:3e:5d:8a:29:17:4c:
cf:eb:4a:ff:32:e9:31:68:26:89:14:20:51:bc:c7:54:ef:93:
17:5f:a0:2f:fb:bf:bf:44:fa:2d:7b:c5:1c:51:64:85:e6:24:
0a:12:be:e6:6d:24:5b:8d:b3:29:07:d5:dd:fa:0f:38:c7:f4:
a1:f1:79:75:9b:ca:f2:ae:f4:87:12:a0:ea:d2:05:2b:44:af:
7b:94:11:49:bc:b0:44:76:96:e6:8d:a2:4e:3c:57:99:96:c7:
af:bc:1c:ff:f6:5a:fc:05:e6:d3:dc:36:09:a8:70:82:9e:ac:
38:fb:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:37:26 2026 by rpki-client