
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier: LpR6jxbq3ZX4cM4d8zBV//efKmGHXwqjqUXTLy2IyzE=
Subject key identifier: BF:D2:62:C4:1F:DA:66:9D:1C:E2:14:A9:D8:27:1C:E9:25:6A:F5:77
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number: A2
Signing time: Wed 25 Mar 2026 06:31:24 +0000
Manifest this update: Wed 25 Mar 2026 06:31:23 +0000
Manifest next update: Wed 01 Apr 2026 06:31:23 +0000
Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: QcKaO3C6EiN8Sza+yP4EwKAAu8JtaoEf9o9wW+8/bog=)
2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: Mar 25 06:31:23 2026 GMT
Not After : Apr 1 06:31:23 2026 GMT
Subject: CN=69c3813c-9305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:07:17:31:19:74:a5:47:46:50:94:db:e4:
a0:4a:17:ed:a7:33:b2:58:16:b2:db:7a:3d:98:90:
fb:c9:39:bd:e6:fd:19:03:3d:e9:96:4c:e6:e4:77:
92:2c:f3:a3:f7:fe:ed:65:ac:a3:20:a5:fb:70:08:
fb:47:2f:32:4e:32:af:55:b5:a4:a2:ab:0f:e2:c7:
85:ca:fb:ca:a6:c3:3c:40:df:df:20:3f:7c:ae:d0:
54:51:08:26:a3:63:aa:de:ca:b9:ec:2b:8f:60:79:
12:51:f3:4b:d1:07:ee:d8:70:bb:45:4f:57:d1:93:
f7:e5:f9:22:39:87:d2:7c:1f:3b:92:63:9f:bc:b9:
f4:b6:36:71:36:c4:a5:38:92:59:73:f5:8d:d0:41:
75:96:e6:ac:78:4a:bf:79:d3:6d:f2:7e:c6:45:6e:
1a:72:ba:64:6f:ba:4d:6c:fb:03:d7:5b:c4:4d:88:
51:57:68:70:e5:cc:f2:dd:1a:a2:51:fe:f2:2c:3e:
9b:eb:a3:03:bb:b6:70:02:6d:ba:f6:68:3f:9e:2c:
dd:ad:66:85:b5:c4:10:b1:88:07:41:05:66:82:82:
f4:39:a8:d0:61:99:ff:f0:4a:e4:0e:17:7b:0a:9b:
37:45:56:36:ba:6b:d6:ad:7c:ad:5a:21:43:f2:a6:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:62:C4:1F:DA:66:9D:1C:E2:14:A9:D8:27:1C:E9:25:6A:F5:77
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:d9:4a:7e:08:3d:9e:ce:fa:d6:b6:75:da:eb:b3:ed:b6:b4:
13:23:73:c5:7a:e8:2b:e9:e7:e8:c2:3c:cd:34:d5:1b:93:b9:
60:ab:a2:18:41:6d:88:e7:4b:d8:f9:8b:7b:38:c1:31:50:22:
de:ef:1c:e6:69:68:95:51:f0:01:4d:dc:ca:ba:74:31:09:4c:
6d:69:5c:72:1b:2d:68:8f:32:55:8f:09:a7:e6:28:67:82:16:
56:d9:96:4a:6a:17:90:2e:7e:d7:a4:d0:0e:ac:cf:ba:93:8f:
33:42:ed:59:af:aa:e4:ab:14:40:4c:ce:38:c5:b2:5c:cf:e4:
6a:85:ed:28:ac:ba:34:a6:00:a0:3d:e1:9b:da:5a:5d:75:d4:
14:7b:49:74:db:6a:7e:93:4a:0c:bc:fc:10:3a:b9:8f:3d:d8:
3e:6a:3b:64:b8:03:fd:c0:a3:30:ae:02:58:0e:75:9f:f6:b8:
65:e8:7a:98:1b:0e:a0:dc:db:fd:d6:4e:cd:8b:2a:80:a1:97:
86:30:8e:e3:8a:ae:90:f6:7e:df:dc:ea:8f:16:ea:63:7e:d5:
d6:69:79:0f:36:c0:84:95:9a:f8:b8:db:96:c0:50:16:ec:da:
97:7a:5f:1d:69:bb:39:44:d5:ef:c7:9e:c1:2f:de:fc:70:bc:
0e:58:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:08 2026 by rpki-client