
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json)
Hash identifier: PGcSmnMLLDnLrSDuPxyJnpea1/QepZ3QX1tpFsnHxYM=
Subject key identifier: D7:59:25:A2:DF:53:CC:AB:B2:AE:08:0C:99:18:99:44:22:55:EA:84
Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
Manifest number: 0133
Signing time: Wed 13 May 2026 05:35:33 +0000
Manifest this update: Wed 13 May 2026 05:35:33 +0000
Manifest next update: Wed 20 May 2026 05:35:33 +0000
Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: /ZFKvAvkCxgXy8ASG9CkFxgG5YTHeP+/9dYniXCUxrk=)
2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: BOLBqg6HB+WZgDmASuick5DSh+pZdhSvC9fPbTzN5P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Validity
Not Before: May 13 05:35:33 2026 GMT
Not After : May 20 05:35:33 2026 GMT
Subject: CN=6a040da5-7a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:97:b8:bb:6e:65:03:77:3c:bd:53:03:df:
e3:72:60:e3:1a:8d:01:79:5a:c5:c2:fd:47:fd:5f:
57:b6:ea:58:ce:c2:9f:fa:25:61:79:7b:8d:28:f1:
99:6f:89:ec:40:b8:ca:80:7c:20:30:25:39:62:3b:
57:53:6a:03:e3:b9:a9:a0:9d:ce:a6:fb:2c:53:42:
d0:df:eb:db:f4:39:1a:da:b1:e3:87:ad:c3:3e:3c:
48:c2:a6:85:d3:c2:36:5e:3b:b7:40:0f:6a:21:d6:
40:83:26:ed:df:09:6e:3d:2f:7a:1a:1a:d2:ab:4b:
3e:e0:79:c5:31:7a:45:6a:3a:5d:04:05:d6:36:df:
b8:fe:55:18:93:0a:14:e3:74:e0:10:94:99:35:d7:
02:b8:52:f8:69:f0:e7:8c:b7:5b:fa:7a:7e:45:fc:
83:fc:3b:70:f0:63:09:e8:ed:b6:0a:23:af:c0:78:
83:0e:ea:43:4f:52:a6:22:19:8e:8b:cb:ed:f2:08:
14:47:6f:01:b6:4d:6a:40:c9:41:85:22:74:6e:a8:
34:b3:71:b8:f9:81:4f:d6:61:d8:ff:05:e8:5a:23:
f5:e7:88:f6:aa:b4:2e:cc:16:3c:bc:b5:01:d8:02:
a9:c4:b7:9e:5f:53:ec:4b:d9:87:27:e8:fa:0a:58:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:25:A2:DF:53:CC:AB:B2:AE:08:0C:99:18:99:44:22:55:EA:84
X509v3 Authority Key Identifier:
keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:62:87:c6:08:f0:b6:ed:3b:f5:5f:4c:0d:db:c9:b1:5b:47:
63:ee:bd:fa:47:40:5f:cd:96:2f:e0:61:28:75:6c:64:8c:ab:
1a:ff:44:2a:21:6d:8c:fa:fe:0b:32:b4:0a:b9:11:f5:89:f7:
2b:fe:dd:c0:a0:0b:fd:52:7e:e3:5e:c1:20:69:b5:4e:42:77:
7d:1b:62:cc:51:df:1f:d5:1e:99:16:c6:54:6e:d5:8b:70:96:
84:c2:8c:ab:1f:c4:e8:57:58:2e:56:d9:8e:ba:3d:02:f7:dd:
61:23:97:26:f9:e5:73:28:32:d3:fa:83:bc:5f:b1:87:e4:31:
e4:08:37:d8:48:b4:79:33:09:12:46:b5:c8:b6:23:b6:b4:86:
ed:51:e1:52:01:02:a6:9a:3d:01:18:c5:2f:de:31:b9:a7:46:
a6:d0:e3:87:88:d4:83:b8:94:20:a0:ac:5b:46:4e:08:90:28:
b5:43:9e:79:36:ac:f0:73:4b:37:2b:8c:fb:4e:92:6d:04:7a:
af:5d:78:42:35:fa:cd:f3:64:c5:66:d9:fd:d7:bc:27:f6:11:
da:73:08:32:c1:c0:dd:8a:27:0d:a5:3a:c4:ba:e9:1d:a7:8d:
0e:66:53:4b:f9:d0:07:82:a3:5a:4a:da:d2:d2:84:b7:57:64:
ec:aa:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:59:05 2026 by rpki-client