
$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier: T8sKbs86PhBGvDlm+zlvYfiPrOXnX890VvYYZQAi7zw=
Subject key identifier: F0:8E:B5:B1:67:61:69:24:68:F5:54:5D:80:CB:77:6C:D7:C4:19:22
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 0C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number: 0BFD
Signing time: Thu 30 Jul 2026 19:12:42 +0000
Manifest this update: Thu 30 Jul 2026 19:12:41 +0000
Manifest next update: Thu 06 Aug 2026 19:12:41 +0000
Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: 4GIk4OYAPr66F6B6A3tu49Fiuf8u9HOalz9KMNt4lkg=)
2: 856D71DE021D11F18B736F00496F56BC.roa (hash: a/UgAx4cP23xBKUXkuXkulL3xR54CJ89nH7g3WJITWs=)
3: 86850E56021D11F18B736F00496F56BC.roa (hash: t1YOO3CTB2wqmZ9Z1apALeTPXX0rA5ab+0BE/sJrH9E=)
4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: OsKpmn4d4PR+9xigCzefdFcY4eHlBHpLVwQgzWBMDnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Aug 2026 19:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: Jul 30 19:12:41 2026 GMT
Not After : Aug 6 19:12:41 2026 GMT
Subject: CN=6a6ba229-49ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:bc:3e:4b:41:3e:3d:b5:05:d1:8e:ed:1b:
0f:97:db:9b:a6:35:cd:7a:28:c7:89:23:e2:5f:cb:
10:6a:5e:f0:15:b5:f4:71:c9:f6:93:92:66:8a:ed:
c4:b3:38:19:47:85:64:2b:4c:8b:f6:17:ec:39:61:
06:f6:49:f0:07:0a:ed:bf:bb:de:c3:94:a7:e4:a7:
be:ca:bb:9d:bc:b3:18:a3:e7:b2:76:76:ad:6e:88:
65:68:07:47:bc:c1:92:be:09:b6:90:0d:39:1c:cd:
c5:6e:86:c9:e2:0c:77:31:0e:60:82:a7:51:b3:af:
01:11:41:d8:60:80:b7:49:76:37:fe:96:b7:e2:0c:
b1:54:1a:35:c2:ff:b6:d1:07:9e:0e:82:db:26:b5:
37:95:bd:dc:a1:67:15:de:13:bf:38:50:17:0c:7a:
f9:f4:94:77:68:0e:e7:c1:47:7e:cd:b4:f7:1b:b3:
ae:f9:d1:81:3a:c5:37:bf:9f:41:71:36:f4:fd:76:
b2:dc:e4:34:be:f2:e1:f5:c6:ce:9b:fe:7f:3f:53:
35:f1:25:3e:bb:00:d8:79:62:24:ce:f1:71:0b:1c:
e9:b0:99:6d:02:72:c8:86:87:d4:ee:bc:bb:7b:fb:
5a:3f:27:e1:c5:10:44:d4:a8:fd:2a:95:d8:1e:f6:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:B5:B1:67:61:69:24:68:F5:54:5D:80:CB:77:6C:D7:C4:19:22
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:60:bb:54:11:68:ff:41:bd:b3:b7:88:77:82:4c:eb:10:
bd:39:13:0e:49:7c:99:d4:98:e9:f8:7a:52:01:01:a1:cc:48:
e3:f3:62:64:3d:d7:83:69:fd:0b:8f:bd:4f:42:42:2d:18:2d:
5f:9b:1b:87:19:08:90:78:43:76:ba:47:40:fd:33:c9:ba:70:
a2:23:33:b5:9b:d4:5b:b4:70:9e:d3:7d:ed:b9:b7:c1:d4:43:
44:ed:7e:b7:ab:fb:e6:5d:fb:b9:5b:15:f2:ab:5b:cd:2d:22:
b8:cc:8d:94:e6:51:86:6c:93:08:2b:8d:cd:03:9a:f9:63:4a:
b0:a5:36:42:5d:89:2d:f3:f4:28:f3:dd:4a:fc:e2:41:55:80:
2e:ad:d5:2f:dd:5d:bf:51:5d:d7:79:d5:1a:63:2e:d7:6b:b1:
cd:48:52:21:ef:29:9a:af:2a:90:40:f5:a3:51:da:69:ef:07:
90:22:6f:16:01:59:ba:a5:b1:11:57:a4:14:1d:e5:7c:5f:4a:
06:a0:17:1b:fa:34:e5:d0:b9:31:11:11:2b:48:11:36:e9:af:
e2:09:35:44:c4:15:86:15:69:9e:7c:30:54:f7:db:29:ab:19:
f1:4e:56:92:dc:6c:fd:71:51:2c:08:0c:42:67:eb:6a:0c:c4:
e4:ea:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 05:50:59 2026 by rpki-client