
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier: IL8ZbYb05XALe4ZsGKvdZbeJzdLVQCEjPjHB9aadpGc=
Subject key identifier: 92:8B:0B:49:E0:CA:3F:97:54:58:4D:CA:F1:6E:98:F7:AC:23:1F:5A
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 0C65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number: 0C2D
Signing time: Sat 31 Oct 2026 19:10:20 +0000
Manifest this update: Sat 31 Oct 2026 19:10:19 +0000
Manifest next update: Sat 07 Nov 2026 19:10:19 +0000
Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: RJmOkl6f+aL0inJhk7NhPyptscY/KinMC7XkocnS2Lk=)
2: 86850E56021D11F18B736F00496F56BC.roa (hash: t1YOO3CTB2wqmZ9Z1apALeTPXX0rA5ab+0BE/sJrH9E=)
3: 856D71DE021D11F18B736F00496F56BC.roa (hash: a/UgAx4cP23xBKUXkuXkulL3xR54CJ89nH7g3WJITWs=)
4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: OsKpmn4d4PR+9xigCzefdFcY4eHlBHpLVwQgzWBMDnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 19:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: Oct 31 19:10:19 2026 GMT
Not After : Nov 7 19:10:19 2026 GMT
Subject: CN=6ae63d1c-9b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:e8:a7:9a:5f:a5:2e:25:01:02:01:f9:24:
79:9b:6b:4b:8b:99:5d:6f:67:a2:3d:48:79:90:20:
80:94:cc:44:55:28:d0:2c:2a:54:65:4a:64:55:9c:
ca:08:e7:79:a3:67:b9:4a:b3:08:04:c9:5a:c0:b6:
fd:c5:e5:eb:cd:32:16:ee:94:86:50:1f:cd:c5:d0:
cf:d7:52:ca:d1:16:30:c7:00:a0:9c:a4:1d:2b:1e:
f2:ec:cf:ca:04:36:9e:dd:05:23:51:8a:29:54:c8:
f2:24:3a:c9:8b:ec:b4:e2:ba:09:dc:40:ca:31:7a:
df:93:b8:d3:0a:64:89:56:67:10:4e:0b:7d:8e:c5:
c8:0e:56:4c:25:28:82:16:20:60:ec:80:a0:41:1a:
c2:fb:65:ce:86:85:28:af:19:c2:55:82:20:de:b0:
fc:9b:91:8e:8e:d2:57:9d:77:b2:00:7e:a5:77:ce:
45:71:01:39:e7:77:ab:8b:46:31:15:34:3d:5e:b5:
bc:21:af:36:fe:4f:de:7f:2c:37:15:13:c7:e6:d0:
bf:8b:f1:78:b0:5c:39:9e:40:64:a0:58:31:cf:e5:
4e:97:3d:9e:05:97:55:21:15:12:a4:4c:45:aa:f1:
91:0d:d4:7b:06:df:b3:c4:7e:24:af:4f:6a:db:11:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8B:0B:49:E0:CA:3F:97:54:58:4D:CA:F1:6E:98:F7:AC:23:1F:5A
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d2:fa:c4:02:bc:16:15:ae:bd:bf:f1:11:10:8e:42:a1:d9:
fd:97:6c:c1:ee:16:b1:1a:b2:88:7f:f0:75:1f:70:57:0e:88:
4e:a7:3f:c8:28:1b:66:9b:5d:ba:7a:04:7f:d1:34:5a:17:e3:
0f:ee:37:f4:14:bc:bc:3d:98:82:db:4a:e0:4c:39:77:54:59:
66:7e:02:18:5c:0d:46:dd:75:4e:b9:0d:2b:f5:dc:f3:29:f7:
46:fc:b2:8b:98:6c:dc:64:a6:29:35:fa:f6:ac:be:4d:67:bf:
3e:e6:56:08:8e:1d:97:28:e3:e8:af:a8:2c:1a:b9:6d:ca:a3:
a9:4f:d6:4d:24:76:e6:a0:81:2c:4f:f3:2a:77:07:30:92:16:
af:36:b5:ca:49:8f:3c:d2:6a:45:c3:4c:d4:7a:90:0d:6e:e5:
0e:5b:f8:84:b1:c9:cf:d5:9c:05:8f:71:84:05:74:06:7c:15:
3f:6b:1b:1f:30:aa:f4:97:47:2a:ab:1c:cb:b2:f6:4c:c0:33:
9c:6b:6e:d7:65:63:14:fb:47:c6:e4:94:37:22:23:2f:d2:ae:
af:33:4b:57:ac:a8:69:c5:1e:29:c1:69:46:75:df:2e:46:44:
ff:ec:53:35:3c:c0:96:62:f2:79:78:2b:f4:cc:a7:a1:07:75:
97:d8:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:11:31 2026 by rpki-client