
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: RW/Uuanr9TR9eMfChclEXr5E29satpixO4+BYqkadtQ=
Subject key identifier: 2D:A0:04:7A:C4:B3:F2:37:EB:F2:A1:FE:49:AA:21:00:81:1D:D7:F8
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 1B
Signing time: Wed 25 Mar 2026 08:09:56 +0000
Manifest this update: Wed 25 Mar 2026 08:09:55 +0000
Manifest next update: Wed 01 Apr 2026 08:09:55 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: sYN5b3XfbUavjMxzm0sztQB8gqrhhklEhNbcBNra8iw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: Mar 25 08:09:55 2026 GMT
Not After : Apr 1 08:09:55 2026 GMT
Subject: CN=69c39853-d6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:f1:60:4d:5f:83:cf:f5:20:2e:1e:a7:50:
54:13:7c:8d:5e:b0:2f:18:28:a6:46:9e:2e:f0:5c:
fa:04:1e:66:6e:50:48:3c:c7:f6:12:1e:a8:bc:56:
dd:49:b1:31:bc:ff:99:89:9b:5c:8c:88:5f:a6:62:
d4:8e:63:e5:e1:1b:90:7a:3d:17:73:2b:e1:fe:3b:
66:1f:13:a6:d7:b6:65:27:e0:99:04:13:42:86:cc:
d0:b0:0f:b7:26:27:a3:53:92:d4:cd:c5:4e:2f:e8:
6d:1f:86:22:32:cd:28:36:6f:ff:61:96:d2:7e:12:
02:bf:fc:07:fe:e0:ce:05:cd:c1:98:f0:99:82:72:
63:c8:38:bb:dd:80:f3:42:57:d8:90:08:ed:78:98:
22:9b:60:16:37:7f:e8:1a:5a:60:be:2f:91:09:53:
30:fd:db:17:69:9b:5c:ca:3b:60:71:bb:e7:ea:7b:
68:a7:64:c7:e0:bf:c4:f7:03:be:8c:b2:ac:1b:0f:
e5:23:4f:b3:f9:92:fe:9b:c6:a3:3a:4b:6a:ff:11:
cb:df:86:39:9b:79:cc:77:32:6d:03:db:eb:d1:0b:
10:44:7f:39:15:ca:d6:17:2b:1c:e1:1a:15:06:76:
c6:74:6d:80:c6:b5:3e:ca:92:1c:50:b5:fe:d2:eb:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:04:7A:C4:B3:F2:37:EB:F2:A1:FE:49:AA:21:00:81:1D:D7:F8
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:9d:0c:d6:9b:a5:0a:0b:15:fb:85:2d:98:52:f6:60:d8:52:
91:5c:0d:1f:bc:53:89:06:26:73:4d:b6:bd:81:88:2d:8e:95:
bf:70:4f:0d:ee:70:26:cc:86:60:3f:c8:69:f4:38:b5:f5:56:
93:0d:05:7e:ee:cd:3a:ac:16:d5:4c:cf:05:dc:c6:80:2c:86:
15:c3:3d:d2:c4:3f:c5:0b:c3:fe:81:86:26:82:ec:88:fc:59:
ed:28:0a:d4:6e:79:f1:0c:eb:2a:0b:e3:51:43:05:fc:56:3b:
85:28:54:64:8f:b9:18:6f:80:24:48:14:9b:68:b1:d3:e0:9f:
47:6f:69:8e:52:b7:3d:bb:b8:83:16:0a:67:b9:16:1b:98:79:
7b:85:55:33:ba:b1:97:93:4b:64:e3:52:6d:2f:16:1c:2d:33:
67:44:0b:62:c6:8b:dc:24:23:35:85:11:9c:83:81:1f:c1:4b:
36:1b:0b:64:83:66:0d:ab:fe:cb:86:9f:93:0c:5f:49:ed:ef:
37:e1:ad:9e:ab:4c:64:ce:58:bf:04:b9:fa:d0:62:e1:4e:c7:
41:a0:d4:fe:34:60:71:a3:10:c8:73:3d:44:43:16:67:2d:09:
69:22:c8:f7:ae:81:dd:7c:ef:0c:da:a5:cb:da:1c:ed:21:49:
d8:27:70:0b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MUI0QzExMC8GA1UEBRMoMkQ3N0IzMzFEODMyOTEyQjYxQkUwQTUwQTZEODYzNEI4
RTJBQTc5QzAeFw0yNjAzMjUwODA5NTVaFw0yNjA0MDEwODA5NTVaMBgxFjAUBgNV
BAMTDTY5YzM5ODUzLWQ2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcq/FgTV+Dz/UgLh6nUFQTfI1esC8YKKZGni7wXPoEHmZuUEg8x/YSHqi8Vt1J
sTG8/5mJm1yMiF+mYtSOY+XhG5B6PRdzK+H+O2YfE6bXtmUn4JkEE0KGzNCwD7cm
J6NTktTNxU4v6G0fhiIyzSg2b/9hltJ+EgK//Af+4M4FzcGY8JmCcmPIOLvdgPNC
V9iQCO14mCKbYBY3f+gaWmC+L5EJUzD92xdpm1zKO2Bxu+fqe2inZMfgv8T3A76M
sqwbD+UjT7P5kv6bxqM6S2r/Ecvfhjmbecx3Mm0D2+vRCxBEfzkVytYXKxzhGhUG
dsZ0bYDGtT7KkhxQtf7S64O3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULaAEesSz
8jfr8qH+SaohAIEd1/gwHwYDVR0jBBgwFoAULXezMdgykSthvgpQpthjS44qp5ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQjRDL0E5NDJCMTYyMDdF
MjExRjE4QzU2MjU2OTIxM0Q4QzY3L0xYZXpNZGd5a1N0aHZncFFwdGhqUzQ0cXA1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTFhlek1kZ3lrU3RodmdwUXB0aGpTNDRxcDV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx
QjRDL0E5NDJCMTYyMDdFMjExRjE4QzU2MjU2OTIxM0Q4QzY3L0xYZXpNZGd5a1N0
aHZncFFwdGhqUzQ0cXA1dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBhnQzWm6UKCxX7hS2YUvZg2FKRXA0fvFOJBiZzTba9gYgtjpW/cE8N7nAmzIZg
P8hp9Di19VaTDQV+7s06rBbVTM8F3MaALIYVwz3SxD/FC8P+gYYmguyI/FntKArU
bnnxDOsqC+NRQwX8VjuFKFRkj7kYb4AkSBSbaLHT4J9Hb2mOUrc9u7iDFgpnuRYb
mHl7hVUzurGXk0tk41JtLxYcLTNnRAtixovcJCM1hRGcg4EfwUs2Gwtkg2YNq/7L
hp+TDF9J7e834a2eq0xkzli/BLn60GLhTsdBoNT+NGBxoxDIcz1EQxZnLQlpIsj3
roHdfO8M2qXL2hztIUnYJ3AL
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:12 2026 by rpki-client