
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: Xu9xz/xLiVKEKkcjt2KWJu+J5NAsSFRCO5PLZWzgj+c=
Subject key identifier: E2:74:DA:BA:E9:45:E8:78:88:48:1A:01:91:7A:F3:83:2D:B3:10:A4
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 84
Signing time: Sat 17 Oct 2026 08:26:25 +0000
Manifest this update: Sat 17 Oct 2026 08:26:25 +0000
Manifest next update: Sat 24 Oct 2026 08:26:25 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: Ko/2OQ+TAY5uYh4GJZPKE75ackTb/gZdW+VVZ9ncUZ8=)
2: 783957EA31BF11F1BC4C9C57C1833773.roa (hash: DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: Oct 17 08:26:25 2026 GMT
Not After : Oct 24 08:26:25 2026 GMT
Subject: CN=6ad33131-f80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:8b:f6:4a:dc:cb:c1:33:03:fb:ac:a6:52:
da:7f:a3:c4:02:da:1f:4f:8a:ab:12:f3:e8:7b:5c:
83:1b:44:0d:99:0f:ea:55:da:ba:26:71:f5:99:8a:
8d:62:8a:f5:d5:3e:07:44:88:da:4f:52:f2:7b:3b:
d9:fd:f7:5f:d2:5c:4d:65:5f:cb:eb:e0:b5:de:f5:
d5:5e:f9:01:94:a8:3b:77:16:85:56:12:8f:8f:b1:
60:00:a9:65:fa:ef:70:4f:1b:1f:88:38:8e:ef:b3:
fa:2f:36:ca:ad:d1:1a:68:1f:38:d6:40:ea:31:a4:
2b:6e:72:d2:de:ce:cf:92:db:99:96:1c:d6:52:1f:
26:51:32:d9:04:5b:11:88:54:7a:cc:a0:b1:db:4a:
10:8f:f3:b3:a0:2f:fb:e7:19:8e:84:4d:68:07:96:
b7:ad:98:4f:6e:9d:fd:ca:43:e4:19:a5:ef:0b:4b:
58:7e:8c:e8:20:68:d7:2d:34:6c:aa:3e:6a:9e:d0:
86:e5:d5:79:02:cf:cf:48:c1:c0:38:d1:06:a1:a2:
2e:6b:13:69:d3:1d:a1:c2:dd:da:fa:27:25:98:9a:
cb:c2:6c:df:f4:96:31:61:2d:3a:e4:25:22:bb:d7:
1c:f5:08:09:48:f5:5a:86:9a:76:17:91:75:b6:51:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:74:DA:BA:E9:45:E8:78:88:48:1A:01:91:7A:F3:83:2D:B3:10:A4
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:2e:3f:93:d3:d8:0d:6e:8e:89:c2:ac:65:8f:1e:fb:d3:54:
db:9b:4b:2a:8e:c1:b5:bb:72:6b:8b:a7:c9:b9:95:f3:cd:bc:
ef:3a:13:26:90:b2:b3:52:1b:0f:01:18:c7:29:ce:aa:5b:26:
15:90:d3:52:4f:50:6f:b1:8a:34:02:6c:01:80:55:3e:31:56:
0a:a1:a3:b8:16:93:7d:25:cd:00:a9:51:54:4e:2d:5a:41:fe:
81:bf:1b:9d:f5:68:f9:e6:6d:66:20:86:ee:24:f8:d9:5f:ba:
8d:db:62:0c:2e:db:c1:17:25:a4:6e:70:1a:80:43:b5:58:6e:
36:0d:ca:bb:67:c3:67:13:14:e7:7a:d6:a1:45:8e:bf:9a:51:
57:b0:6b:f9:d7:44:43:64:21:ad:90:23:18:52:5a:c5:99:0e:
3c:90:2f:eb:11:e8:c3:4c:5e:d3:7b:d0:de:1c:fd:80:6a:74:
43:6b:8c:17:ae:d3:51:22:b1:fa:5b:23:5e:33:db:02:07:75:
8b:eb:ce:64:1a:ca:4c:45:f4:38:c8:81:47:a9:8a:7d:0c:f4:
96:dc:a4:1e:8b:67:a7:b1:f2:0a:be:fe:c8:3b:87:b1:04:2c:
5b:26:a5:70:21:48:cf:5d:e0:7b:6e:e3:64:17:45:85:b9:c5:
18:ee:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:56:19 2026 by rpki-client