
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier: EUwasY0zyxyZULYkCAgpqtg7mSyiMG6wD+77VLS7tMg=
Subject key identifier: 5C:96:7E:22:B7:16:E3:0E:24:62:08:E8:20:2B:3F:4A:50:51:48:51
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number: BA
Signing time: Mon 11 May 2026 07:09:28 +0000
Manifest this update: Mon 11 May 2026 07:09:27 +0000
Manifest next update: Mon 18 May 2026 07:09:27 +0000
Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: 1Hcgg4T+0NavXxnTuHGzUJcDktV+s7uIeyf00tUjg20=)
2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: May 11 07:09:27 2026 GMT
Not After : May 18 07:09:27 2026 GMT
Subject: CN=6a0180a8-7e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:b8:ad:58:70:4b:59:28:07:3c:69:48:6b:
66:cc:98:78:de:26:91:4a:47:f0:36:da:37:c3:57:
ea:72:15:15:fa:d6:b0:72:63:aa:83:3f:ce:41:16:
1d:3d:f2:54:a1:53:74:74:09:e0:b2:93:e2:88:bc:
46:56:a9:46:10:72:64:70:bb:f0:d6:74:e9:78:21:
24:fd:05:ef:ef:5a:2a:82:72:28:e4:79:24:3a:76:
81:23:98:93:77:0b:cd:f8:68:7e:46:e5:7f:59:0b:
60:b4:4e:36:22:e9:74:42:2b:ca:31:67:3a:c6:a4:
87:dc:92:48:ad:50:fe:c7:70:db:f2:8a:30:f3:34:
4d:ec:ea:1e:3b:2a:0b:4b:2d:fe:12:ed:37:68:13:
69:90:79:f1:9e:ba:d7:d0:b7:00:48:8e:be:de:c5:
34:be:cb:18:bd:40:f4:e5:4b:ff:c5:b2:22:75:af:
ea:3c:f0:b1:d9:0c:2a:da:27:ff:74:e5:2c:9c:c5:
b3:c0:6d:9b:ca:6b:9b:8b:f3:67:4f:0f:fe:27:1b:
55:ac:26:6a:4f:d7:e6:bc:db:ca:f5:13:6e:c3:6b:
37:70:38:66:26:f5:40:49:f7:e5:04:71:19:c9:11:
70:e6:2d:98:f5:fe:4b:e6:c0:44:33:ca:ba:7a:0d:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:7E:22:B7:16:E3:0E:24:62:08:E8:20:2B:3F:4A:50:51:48:51
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:74:02:66:8f:80:b6:3e:35:be:a1:9a:7b:0f:42:18:1f:
d6:92:44:7b:81:1b:09:2f:7c:01:45:19:f5:26:d6:d6:6c:a6:
e2:a4:bd:c3:6e:20:e0:9a:0f:25:68:3b:6f:9d:80:b8:5c:ce:
0d:b2:b3:b2:2e:a0:9e:6f:23:93:67:91:25:e1:df:2e:e9:85:
a8:b9:8b:79:dc:f7:ea:89:2a:0c:90:66:e7:1e:b6:a2:6b:94:
03:52:83:8f:c0:9f:96:4d:96:c3:ef:07:a3:1e:0e:f4:42:8a:
a6:66:47:aa:a4:d1:66:b6:46:ce:ac:47:d6:ad:7c:b9:9e:d3:
e5:6d:2f:7d:7a:b0:75:18:96:26:0c:0f:b1:a0:0e:a6:1b:00:
3c:c2:d6:cb:26:e2:89:70:8f:77:68:68:7c:22:df:cd:c3:d1:
d6:90:e4:8c:8b:9c:86:54:7e:9c:4d:e1:f2:85:c1:f5:e8:6f:
d1:58:65:70:02:92:27:3c:62:e9:78:7a:26:75:a9:f1:55:4c:
9c:7a:50:fe:f6:be:69:d1:dd:14:64:ca:a6:7a:65:98:c6:d1:
75:d9:eb:71:21:39:18:a6:56:16:39:fe:8e:17:f1:ea:95:c2:
f9:ed:b6:eb:18:11:c0:30:96:84:90:33:ba:66:de:ee:33:fc:
bd:ed:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:59 2026 by rpki-client