
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: tTENhz1adKRhajl50jlHzK+zFP2skt7wtvcngAUpMq0=
Subject key identifier: FC:C5:39:C4:B6:37:91:97:FC:1F:CF:A9:92:C5:A5:6B:17:3E:BA:4C
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 35
Signing time: Wed 13 May 2026 08:49:03 +0000
Manifest this update: Wed 13 May 2026 08:49:02 +0000
Manifest next update: Wed 20 May 2026 08:49:02 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: mDtMBnVPtfYUfH2trzZHBeZP+EXsTlO6ZUqmgGhxwOM=)
2: 783957EA31BF11F1BC4C9C57C1833773.roa (hash: DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: May 13 08:49:02 2026 GMT
Not After : May 20 08:49:02 2026 GMT
Subject: CN=6a043aff-b9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:e9:a5:47:0e:f1:ca:ed:19:87:cc:77:73:
51:7e:70:26:db:74:9d:2e:ca:3d:2e:42:fc:b0:20:
f6:c0:8e:44:d9:0b:16:2c:f7:43:67:b3:5c:c9:b7:
b8:e7:44:4f:6d:da:20:2b:63:33:52:20:1f:7e:0a:
83:d5:a7:d0:ae:e0:b0:fa:30:7c:c5:ca:12:ce:4b:
ad:2f:cf:e9:5a:2c:48:a9:39:54:91:09:8e:73:1c:
14:65:55:20:40:6e:3f:45:ae:df:a3:93:cd:8b:1f:
f3:ac:67:44:ff:07:be:c4:7f:ea:8e:68:d6:74:3a:
4b:10:55:69:39:8f:7c:93:37:de:bf:a1:a1:f3:04:
50:fa:6e:15:6e:a5:76:c7:5a:b6:77:68:8f:b4:b1:
69:21:16:e3:7e:0a:7f:3b:03:d3:a5:c2:a5:7f:d3:
15:a9:6e:8f:4b:85:a3:f3:d3:75:72:fa:7e:30:10:
f1:48:f6:99:ac:27:29:d5:66:a6:41:45:06:46:31:
69:d0:15:eb:a5:d6:80:ab:85:29:6e:6b:4a:d7:fc:
39:b7:51:a5:26:79:c7:56:49:50:e9:f4:7a:f1:6d:
f1:de:e4:5a:bc:4f:19:5a:73:8f:3d:d6:82:c0:b2:
3b:1a:16:74:0b:12:95:45:08:4c:ee:54:a1:dc:41:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:39:C4:B6:37:91:97:FC:1F:CF:A9:92:C5:A5:6B:17:3E:BA:4C
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:1a:db:1c:b2:5c:95:72:ea:2f:2c:ca:e7:9d:a3:67:8f:
09:30:cb:2f:60:5d:48:44:47:51:49:35:45:bc:14:53:26:36:
e6:43:2c:bf:7b:cb:2d:8e:63:21:bb:00:59:83:c9:76:63:7c:
dd:67:f6:bb:68:19:de:03:6f:d4:cb:f5:eb:e3:1a:d2:6c:f6:
9c:50:20:af:75:7b:9c:37:ad:e4:d2:4f:48:d4:e9:2a:ef:96:
8d:3f:9a:fb:37:1e:4f:77:c8:0c:d4:88:d6:c5:0e:15:e9:e9:
6e:ca:99:e9:87:e4:c4:1e:48:91:7c:b2:cc:bb:62:3a:4e:b9:
6c:3e:12:cb:5f:ce:84:fc:06:17:7b:f3:88:4a:45:d6:e5:95:
98:7c:d3:13:ae:d2:42:40:7c:eb:0c:f3:74:4b:d9:04:c2:d8:
e3:38:91:9f:e9:db:96:2e:f5:2f:96:a0:a7:8f:c4:e2:43:09:
99:21:a6:36:bf:23:27:61:9a:d2:f0:f7:ea:fd:cc:c8:2f:91:
38:c8:08:d2:75:24:46:f3:4b:d8:24:0f:87:a4:24:a8:04:81:
87:14:a5:11:ca:db:5d:28:7d:72:0d:41:fe:1e:8f:45:25:86:
50:95:38:37:13:57:e2:f6:71:72:c5:9b:46:81:b3:52:45:1f:
5e:3b:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:23:19 2026 by rpki-client