
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json)
Hash identifier: cxBukNvFzkUyJosLaMb79ZjSaxKYQ/BkMTIUaKvbsYk=
Subject key identifier: DA:79:AB:EC:26:FB:C3:2C:A5:86:BE:77:DE:96:D7:98:53:EA:67:E6
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
Manifest number: 5D
Signing time: Mon 11 May 2026 08:16:18 +0000
Manifest this update: Mon 11 May 2026 08:16:17 +0000
Manifest next update: Mon 18 May 2026 08:16:17 +0000
Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: 9O6+Cf31twk1X7t1ezniP+qh/99bKyNtBz86Be5zoTA=)
2: 3102D984C7A511F0AB2B8524C4F9AE02.roa (hash: Tul75lPWRtkLUQpE4kJeQR++0ieheSLP1KNAU3JiUWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Validity
Not Before: May 11 08:16:17 2026 GMT
Not After : May 18 08:16:17 2026 GMT
Subject: CN=6a019052-636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:f1:fc:52:f0:89:ec:d6:0b:9d:51:7b:8c:
cd:c9:a1:58:ea:be:45:5c:f8:ae:bf:98:57:8d:cd:
79:7c:c5:8d:02:f0:89:85:67:58:10:a6:10:38:d0:
eb:b9:f6:04:43:70:c6:8c:02:c5:c1:b0:31:46:90:
bd:0c:9b:8f:da:0f:13:b0:e4:9b:e5:0a:86:2a:58:
0a:c6:e2:98:ce:1e:8f:f3:54:c3:c6:79:a8:8b:84:
6b:d7:71:3a:85:be:7d:63:0f:70:93:3e:b6:29:ee:
6c:3f:56:70:9a:f5:b6:cc:8a:d7:a1:f6:dc:a4:b3:
80:b3:97:af:4a:d9:e1:ea:d7:cc:62:2b:47:52:35:
2d:c0:7e:63:5c:8c:84:07:fb:5b:57:20:0e:00:32:
d5:a8:4a:08:a2:f3:c3:d3:62:60:c3:7a:95:d9:cd:
b5:21:12:c6:3b:b5:ea:ac:e1:7c:3a:6f:a3:28:18:
e3:4b:05:24:6c:5b:bf:20:9c:06:a3:ee:3b:5a:86:
45:1f:bb:32:45:0e:c1:4c:0f:1e:de:9c:07:2b:5f:
25:34:8c:67:d5:70:e7:45:be:ab:7d:9a:8c:04:2a:
70:b3:99:fa:8b:9c:e9:38:e7:fe:e3:07:34:fc:21:
5f:c7:15:1e:72:34:80:16:ff:a4:d8:e0:db:69:a4:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:AB:EC:26:FB:C3:2C:A5:86:BE:77:DE:96:D7:98:53:EA:67:E6
X509v3 Authority Key Identifier:
keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6a:a8:ef:f0:b5:4e:5b:a4:bf:cd:21:88:80:32:0c:a1:03:
f8:a3:00:00:25:8e:e0:ec:50:db:ed:22:4a:f8:55:87:49:b9:
47:a3:9b:d4:40:83:6a:86:9a:d9:83:85:ba:04:75:0d:09:d0:
4d:0a:6c:c6:4c:a3:f8:0b:ca:9b:eb:03:3f:00:a6:58:f4:34:
90:af:5d:3b:fb:68:8d:26:fe:61:aa:63:12:5f:0a:ed:b0:25:
1d:e4:53:39:33:fb:43:a0:9b:63:dd:48:7f:04:d6:d2:cc:72:
fb:ce:a7:70:d9:ad:20:c1:3d:c2:9c:08:54:b9:d8:ea:59:77:
61:a6:85:83:ba:60:80:a6:ed:01:c1:c1:ae:da:41:df:59:8c:
d2:ff:2b:7f:97:0b:ba:db:1a:8e:89:c2:6c:b3:63:14:fa:25:
c8:47:b4:a4:e3:6c:39:5a:94:d4:77:9f:c9:e4:3a:9b:e4:f6:
4c:88:2c:74:32:ab:54:bd:94:21:5f:30:66:63:72:ba:0c:80:
90:57:7c:7b:f6:c7:0f:b2:45:8e:cf:05:4f:c5:15:af:2d:81:
87:6c:40:fd:30:58:7d:b3:74:2a:a5:2b:cf:24:17:12:e4:15:
eb:95:c1:73:2f:01:6a:b5:1c:e9:af:97:10:9d:6f:5a:3e:e4:
68:84:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:09 2026 by rpki-client