
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json)
Hash identifier: JBRYzTQxFqtgP0AUBr3YG6BkxZ/Dpoo9mPqU3zmBu74=
Subject key identifier: 17:28:13:1B:30:2B:C9:E5:FA:95:F6:6A:C8:E5:51:85:5C:CB:13:99
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
Manifest number: AD
Signing time: Fri 25 Sep 2026 07:22:57 +0000
Manifest this update: Fri 25 Sep 2026 07:22:56 +0000
Manifest next update: Fri 02 Oct 2026 07:22:56 +0000
Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: up1EBwNaN+F4kx3mFT25o7L5+OH0rQu+RhuD943xGZo=)
2: 4AFCDA0C78ED11F1980AFA215CA30FBC.roa (hash: Do7+mJUxysj0mc936QuMgOA9wfEKa8mYiumIGnIuwu8=)
3: 921935A27F2D11F1886CE3C28DA30FBC.roa (hash: vtLEoqPGykODmNwJqfTaMIZyx7FncJ7Zotaqf3xPNUc=)
4: FB35C486750C11F18888C9906EA30FBC.roa (hash: iMmKrEFx5UWvTQKlHWJsW0wGqQTgwuqR+AggRviRcjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Validity
Not Before: Sep 25 07:22:56 2026 GMT
Not After : Oct 2 07:22:56 2026 GMT
Subject: CN=6ab62151-ccc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:da:5d:b8:76:d3:09:22:89:b9:57:98:38:
33:16:5e:f6:14:55:88:94:c4:52:de:ca:43:e0:91:
a0:3c:2d:e5:34:7e:4a:4f:f1:4f:c9:47:48:a7:df:
da:d3:1b:08:e4:71:ee:f3:a1:04:13:33:fa:47:19:
9d:c9:f1:ea:37:26:76:87:e7:f3:6b:7a:2d:35:09:
e6:1d:76:5d:8d:2a:a1:a4:9b:35:67:59:3c:01:06:
62:23:8d:99:46:f6:a5:8b:78:4c:c9:27:58:b3:b8:
fa:f8:38:30:5c:0a:82:7c:e6:e8:37:3f:94:dd:ca:
b9:82:4e:80:c9:b6:b4:b1:de:96:3f:32:b8:c9:26:
73:c2:9d:ea:ef:4b:dc:3c:11:46:73:4d:d3:0c:af:
ac:d0:b0:29:d2:41:58:7e:d3:f9:3a:39:2d:1d:6b:
ed:5b:cb:da:cf:89:ad:de:3d:05:f0:d2:89:d6:40:
ec:93:b0:0e:1d:11:b1:9a:39:be:8e:95:69:fe:3d:
bb:58:94:74:aa:65:3a:30:e2:a9:61:b2:35:1b:40:
af:b4:e6:c4:70:77:43:47:e7:35:59:dc:72:e0:b0:
7f:74:e6:0b:6d:cf:d7:cf:d3:57:c7:ab:7e:cf:c2:
72:bb:d8:50:bb:b8:ef:c3:df:ac:d7:0d:54:ea:e6:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:28:13:1B:30:2B:C9:E5:FA:95:F6:6A:C8:E5:51:85:5C:CB:13:99
X509v3 Authority Key Identifier:
keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1f:4b:d2:9d:87:83:4d:8a:b4:1d:8b:26:53:53:b5:f3:62:
cc:4d:f5:ac:7f:2a:ac:1b:27:f9:39:6d:85:73:84:cc:47:15:
e5:1f:1f:ee:63:65:6c:82:43:6f:e9:f6:13:50:b1:98:3d:53:
50:f1:01:3c:b4:5f:69:0e:48:27:98:d8:8e:6c:40:c6:04:66:
ed:89:02:1d:f9:ea:35:35:66:a1:c2:81:52:69:69:db:f1:3b:
09:1d:cd:b3:88:7a:b7:36:b0:5c:8e:11:d1:2c:2a:0d:56:eb:
92:3f:3f:53:2e:ed:03:fd:f9:85:b6:e2:0d:03:dd:79:2f:98:
2a:55:76:37:c6:ef:97:f2:54:1f:11:a5:64:5e:d7:86:73:6a:
be:2a:89:b3:2f:bc:7a:6e:2a:52:23:84:73:33:72:22:af:2d:
7e:5b:fc:ca:61:66:e2:dd:d7:4e:4e:06:a9:98:fc:ea:16:ef:
b9:a2:3b:af:cd:7d:ad:60:91:dd:09:64:8f:8a:df:44:87:7d:
4c:41:42:5c:9b:b0:bb:b7:9e:9d:8a:3d:95:30:55:a7:3f:ee:
8e:55:10:9f:a5:32:41:f4:30:4a:c6:fa:bc:46:d4:3f:56:fa:
73:9e:f0:82:28:17:9a:33:41:5d:cd:13:ce:fe:9a:6c:0f:4c:
8b:93:2a:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQwOTMxMTAvBgNVBAUTKDJENzM1NkRBMTcxQkZENjQwM0NEOUYzM0UzREI5NUI0
NENCNEJGMUQwHhcNMjYwOTI1MDcyMjU2WhcNMjYxMDAyMDcyMjU2WjAYMRYwFAYD
VQQDEw02YWI2MjE1MS1jY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6naXbh20wkiiblXmDgzFl72FFWIlMRS3spD4JGgPC3lNH5KT/FPyUdIp9/a
0xsI5HHu86EEEzP6RxmdyfHqNyZ2h+fza3otNQnmHXZdjSqhpJs1Z1k8AQZiI42Z
Rvali3hMySdYs7j6+DgwXAqCfOboNz+U3cq5gk6Ayba0sd6WPzK4ySZzwp3q70vc
PBFGc03TDK+s0LAp0kFYftP5OjktHWvtW8vaz4mt3j0F8NKJ1kDsk7AOHRGxmjm+
jpVp/j27WJR0qmU6MOKpYbI1G0CvtObEcHdDR+c1Wdxy4LB/dOYLbc/Xz9NXx6t+
z8Jyu9hQu7jvw9+s1w1U6uYaZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBcoExsw
K8nl+pX2asjlUYVcyxOZMB8GA1UdIwQYMBaAFC1zVtoXG/1kA82fM+PblbRMtL8d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDA5My9DRkEwRjk5MkM3
QTMxMUYwODcxOTAxMjJDNEY5QUUwMi9MWE5XMmhjYl9XUUR6Wjh6NDl1VnRFeTB2
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xYTlcyaGNiX1dRRHpaOHo0OXVWdEV5MHZ4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDA5My9DRkEwRjk5MkM3QTMxMUYwODcxOTAxMjJDNEY5QUUwMi9MWE5XMmhjYl9X
UUR6Wjh6NDl1VnRFeTB2eDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzB9L0p2Hg02KtB2LJlNTtfNizE31rH8qrBsn+TlthXOEzEcV5R8f7mNlbIJD
b+n2E1CxmD1TUPEBPLRfaQ5IJ5jYjmxAxgRm7YkCHfnqNTVmocKBUmlp2/E7CR3N
s4h6tzawXI4R0SwqDVbrkj8/Uy7tA/35hbbiDQPdeS+YKlV2N8bvl/JUHxGlZF7X
hnNqviqJsy+8em4qUiOEczNyIq8tflv8ymFm4t3XTk4GqZj86hbvuaI7r819rWCR
3Qlkj4rfRId9TEFCXJuwu7eenYo9lTBVpz/ujlUQn6UyQfQwSsb6vEbUP1b6c57w
gigXmjNBXc0Tzv6abA9Mi5MqhA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:20:53 2026 by rpki-client