
$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json)
Hash identifier: 5k0ilbfipRpOGfpY4Re+olRNG3QwPMfBBdCGZuX3ZdQ=
Subject key identifier: B8:C8:4F:64:36:75:41:B6:64:24:CB:E7:B8:D9:35:A5:20:88:E6:BC
Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Certificate serial: 2624
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
Manifest number: 2613
Signing time: Tue 12 May 2026 15:43:23 +0000
Manifest this update: Tue 12 May 2026 15:43:22 +0000
Manifest next update: Tue 19 May 2026 15:43:22 +0000
Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: UdLauSViepz1o+1Ya2Jq1lfFEMqn5SPpEMsQ3ZXx8sQ=)
2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: KRl8ea3V85bmsmtzGvJljwpOXv+hiqOfQdmXTFhqfM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9764 (0x2624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Validity
Not Before: May 12 15:43:22 2026 GMT
Not After : May 19 15:43:22 2026 GMT
Subject: CN=6a034a9b-2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:d9:41:31:89:5a:05:92:48:8a:fa:e2:c4:
20:1a:76:ac:e2:20:74:37:c0:5c:e7:c0:f5:9c:d5:
ca:e6:bb:2f:98:80:26:eb:df:d8:b8:f4:91:ec:10:
ec:95:1f:43:2f:25:ef:54:1b:a1:73:68:86:4a:d1:
1d:b8:04:7e:37:b5:4b:d8:2c:c6:e5:0a:80:8e:0c:
bf:9f:a0:b6:c4:33:08:bc:66:67:89:a4:1e:da:2e:
76:66:3b:4c:9e:74:00:e7:e9:8c:ef:88:1b:6c:c8:
a5:30:7f:0d:eb:f2:dc:da:47:bf:8a:d3:22:13:63:
b2:6c:28:b4:01:83:bd:db:bc:03:1d:84:b2:fa:9d:
44:cc:7d:a8:4b:d0:06:ef:df:7e:f6:0f:81:40:e0:
c3:d2:74:4a:55:1f:63:e3:f6:ce:81:7a:87:50:01:
7e:77:60:86:17:24:be:94:20:f5:96:b8:47:19:6d:
98:85:77:fd:cf:82:5b:72:f5:4a:ee:52:5c:83:9b:
e6:65:e4:cf:13:91:3c:b0:08:66:f0:0b:b6:4f:d4:
01:dd:47:8a:47:91:83:f1:f0:7a:0d:ef:5f:50:98:
3e:83:50:15:ab:f3:95:55:0f:af:07:81:47:03:96:
4f:bf:61:99:ec:e5:d0:a6:e7:d2:4e:69:7b:9f:65:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:4F:64:36:75:41:B6:64:24:CB:E7:B8:D9:35:A5:20:88:E6:BC
X509v3 Authority Key Identifier:
keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:c4:37:ef:90:0a:2d:e3:a0:7e:9c:d0:ae:69:38:76:2c:
d7:f5:7c:a0:51:5b:47:0c:bb:65:b7:d3:6d:71:2c:40:f4:e2:
08:9a:02:28:5c:0a:7f:f0:4f:96:77:66:35:4f:0e:89:f3:a5:
2f:e8:91:09:be:6d:42:f3:4c:23:4c:e0:df:6c:48:b7:32:7e:
bf:79:84:5e:26:64:a3:e1:58:67:de:a1:ae:cd:1d:ed:fd:56:
d1:ba:26:58:97:8e:f0:09:ca:a8:fe:8d:27:fe:3a:6f:43:a8:
93:8e:43:2f:d8:0d:75:e8:46:e0:6a:8c:97:43:5a:22:23:a0:
9f:9f:14:1f:84:04:94:c1:de:66:d3:52:4a:1d:00:ca:57:b5:
fb:c0:45:e0:ce:f5:29:cb:53:f0:d1:a0:f4:1e:ce:95:b1:7f:
c8:00:1f:c0:ce:03:b5:4a:70:ee:9f:6f:a8:19:16:81:b7:83:
de:61:af:1d:c3:09:bd:69:fd:02:b1:13:82:01:f4:28:f0:ba:
b7:90:ed:37:91:03:fc:eb:48:66:23:ac:38:d8:b6:96:f4:e6:
1f:57:62:a2:f9:d4:fe:08:1b:4f:42:b6:fb:9d:d2:c0:ff:f9:
7f:6b:90:0d:de:34:38:79:98:c7:2c:3d:a7:ff:f0:a4:cc:59:
23:e4:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:19 2026 by rpki-client