
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: juyvU8JYy5omIAPsNF1tdaersZfNc0mhX7TUeGF+ibo=
Subject key identifier: 1D:98:1F:CC:28:D0:CC:6F:86:48:25:F1:C3:8E:3D:08:AD:5A:93:F6
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 027C
Signing time: Wed 13 May 2026 02:00:34 +0000
Manifest this update: Wed 13 May 2026 02:00:33 +0000
Manifest next update: Wed 20 May 2026 02:00:33 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: pF5rK3PuzMmMG6g5XFwuKLjO0MBLFJ/Qhsf+PWIMPKo=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: May 13 02:00:33 2026 GMT
Not After : May 20 02:00:33 2026 GMT
Subject: CN=6a03db41-e410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:57:e4:c1:30:44:88:83:1e:11:72:c3:8e:
c3:5e:e6:09:b6:1d:a5:90:9c:e7:da:78:aa:2a:11:
9c:4c:cb:54:05:da:e9:f1:54:08:4c:4f:a4:0e:e3:
c1:e2:f0:5e:83:12:58:16:b4:71:c9:42:89:47:07:
02:19:67:ec:e8:c9:f4:c6:13:76:a6:a1:af:bd:ac:
d6:d3:2f:a2:1a:82:f3:08:f3:12:cd:05:a9:21:eb:
58:39:87:5b:c5:b4:2e:22:41:e6:fd:0c:0b:09:35:
1b:1a:cd:11:84:a5:cb:6b:3c:21:0e:56:1c:a6:87:
49:55:56:1c:56:82:56:ec:b6:87:68:93:46:f7:51:
6f:c0:15:b6:b8:1a:ca:52:da:73:aa:28:4e:4c:fa:
6c:cf:77:3a:49:f4:00:6d:f1:d6:24:72:4c:8b:ed:
68:2f:64:ae:60:33:14:14:e6:e5:11:77:77:7b:9d:
8a:fd:0b:c1:30:39:70:0e:e3:9a:96:b7:99:6d:6d:
b7:02:f5:76:a5:f4:f1:61:dd:cc:90:28:7a:33:3a:
97:20:7c:12:f5:79:af:22:c6:d1:02:e8:25:d0:34:
ee:c2:39:6b:8a:5b:96:a0:45:e8:74:ea:5a:30:5a:
06:a3:ae:f5:4a:ef:8c:23:80:d8:36:53:b0:f9:e5:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:98:1F:CC:28:D0:CC:6F:86:48:25:F1:C3:8E:3D:08:AD:5A:93:F6
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cc:8b:88:46:d9:4e:d5:a4:e1:4f:42:0b:d7:d2:3d:a4:6e:
3c:e0:33:d4:dc:26:0a:04:7f:c3:fa:ae:97:ce:a7:f5:48:c8:
d4:d5:b2:03:a5:3c:42:a0:2a:85:5f:7c:b8:9e:2b:f3:4a:89:
e4:95:1c:86:fa:57:a8:32:88:16:e6:f4:0d:82:d7:fa:67:da:
e1:c9:0d:ec:bc:8e:9e:ca:11:99:8e:1d:35:83:4e:00:04:92:
9c:39:e3:b4:43:10:1e:b8:2e:ff:03:de:0b:1e:f9:3e:0b:a6:
5a:6b:f4:86:c9:ca:7d:bd:dc:78:4b:ca:17:cd:74:b1:3c:03:
a9:7d:90:f8:3d:69:d2:4f:5f:0f:3a:f3:05:0e:be:82:88:10:
b7:7d:92:c4:82:ef:36:92:d5:37:8f:f2:32:bf:cc:a7:44:4f:
7b:d2:4b:bc:fd:fd:5d:41:ca:f0:ee:05:9d:33:0b:b8:35:60:
11:b5:50:35:8a:9e:a8:7a:5c:b2:70:8f:0c:6c:0f:87:b5:91:
97:e9:bc:5d:ea:13:9b:cf:f3:e8:c2:bb:35:5a:2f:ab:ea:1d:
f3:0d:66:45:21:bb:95:4d:84:ab:b5:01:68:fe:eb:05:4c:f4:
f8:5d:ea:e2:b4:8e:65:dd:ca:96:d7:b2:c2:6c:0d:d1:ff:71:
6b:57:3a:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB
Q0Y2RDIyQjYwHhcNMjYwNTEzMDIwMDMzWhcNMjYwNTIwMDIwMDMzWjAYMRYwFAYD
VQQDEw02YTAzZGI0MS1lNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25ZX5MEwRIiDHhFyw47DXuYJth2lkJzn2niqKhGcTMtUBdrp8VQITE+kDuPB
4vBegxJYFrRxyUKJRwcCGWfs6Mn0xhN2pqGvvazW0y+iGoLzCPMSzQWpIetYOYdb
xbQuIkHm/QwLCTUbGs0RhKXLazwhDlYcpodJVVYcVoJW7LaHaJNG91FvwBW2uBrK
UtpzqihOTPpsz3c6SfQAbfHWJHJMi+1oL2SuYDMUFOblEXd3e52K/QvBMDlwDuOa
lreZbW23AvV2pfTxYd3MkCh6MzqXIHwS9XmvIsbRAugl0DTuwjlriluWoEXodOpa
MFoGo671Su+MI4DYNlOw+eWxywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2YH8wo
0Mxvhkgl8cOOPQitWpP2MB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0
RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUQ1Mi82MTJCNjdBQzg0RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85
U01FeDBJWUs4c0dzOXRJclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfMyLiEbZTtWk4U9CC9fSPaRuPOAz1NwmCgR/w/qul86n9UjI1NWyA6U8QqAq
hV98uJ4r80qJ5JUchvpXqDKIFub0DYLX+mfa4ckN7LyOnsoRmY4dNYNOAASSnDnj
tEMQHrgu/wPeCx75PgumWmv0hsnKfb3ceEvKF810sTwDqX2Q+D1p0k9fDzrzBQ6+
gogQt32SxILvNpLVN4/yMr/Mp0RPe9JLvP39XUHK8O4FnTMLuDVgEbVQNYqeqHpc
snCPDGwPh7WRl+m8XeoTm8/z6MK7NVovq+od8w1mRSG7lU2Eq7UBaP7rBUz0+F3q
4rSOZd3KlteywmwN0f9xa1c6Hg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:34:38 2026 by rpki-client