
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: GOYkPja8kI6+CRsTYTgeu3v/CcYjDy8LAYlQ9LD7ts8=
Subject key identifier: 69:65:E1:96:1D:2F:6E:6C:BA:72:1E:9B:F4:A0:C5:77:F8:C5:B4:D6
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: 0127
Signing time: Sun 11 Oct 2026 06:21:09 +0000
Manifest this update: Sun 11 Oct 2026 06:21:08 +0000
Manifest next update: Sun 18 Oct 2026 06:21:08 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: 6NW7kn1tk6FKgWhtnMBjVKqgKQNb0WlmdG46lyAhUt8=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Oct 11 06:21:08 2026 GMT
Not After : Oct 18 06:21:08 2026 GMT
Subject: CN=6acb2ad5-f547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:f5:98:43:27:28:53:3d:38:57:3b:b4:6d:
77:10:86:03:81:0f:00:a3:3c:8e:03:76:a4:3e:59:
92:b7:ad:dd:02:d9:17:1e:1d:f1:ba:1c:f9:25:23:
0d:21:ec:05:23:88:aa:7e:1d:0f:0e:a4:0a:5d:90:
c7:19:ac:5f:a9:d1:60:c6:86:e8:56:73:45:ad:d3:
eb:d1:31:6e:a5:d2:29:8b:d0:ba:ba:22:0c:a4:fd:
64:6f:49:8a:ed:f1:7f:53:e0:97:5f:38:bd:d3:16:
6b:08:1e:d9:33:f0:94:81:d3:a5:4c:b2:db:47:48:
49:73:94:e1:f9:e6:4e:5a:92:78:73:53:9c:ae:d2:
b1:0c:c7:ce:de:68:2e:32:d7:a4:3e:d4:16:0c:4b:
62:82:b6:77:b3:2f:5c:e5:d1:a4:54:90:dd:cc:20:
86:33:0d:21:a4:36:e4:32:25:d2:57:26:18:2f:f9:
a3:d7:15:d2:90:65:9e:4a:41:2e:df:41:eb:1f:db:
71:23:23:d9:6b:95:65:99:aa:3a:0c:9a:42:b7:f6:
52:68:9d:c6:ad:03:5a:a3:2d:7f:6f:3c:1b:0f:8d:
9f:8e:c6:14:04:08:87:80:83:5b:b8:52:5a:66:bc:
16:80:0c:93:64:02:8f:98:6c:d3:97:19:b1:24:06:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:E1:96:1D:2F:6E:6C:BA:72:1E:9B:F4:A0:C5:77:F8:C5:B4:D6
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:b0:b8:7c:7d:a5:37:5c:76:07:f9:8d:c0:e2:09:cf:7b:
2f:84:e4:42:bc:3f:10:c3:51:f3:18:ad:dc:38:bc:e5:a5:57:
3f:8e:70:6c:fb:f4:9d:62:19:3e:12:d1:ac:c8:a8:f3:f1:17:
5c:3f:ad:d0:d1:60:27:77:df:51:0d:a1:4f:bf:8e:38:3f:b2:
1f:ec:39:4d:07:6a:3f:14:a2:a0:0c:3b:4d:79:42:b8:13:39:
f7:02:d1:d2:cf:59:0e:35:eb:f1:5b:10:26:ac:fe:41:d8:55:
97:4c:4a:a2:ee:ae:b6:72:ee:44:bc:f0:f2:10:94:cd:1c:76:
eb:b2:18:22:00:82:80:96:a2:fc:00:e1:c0:9d:a4:91:03:5c:
2d:e6:5b:b0:f3:40:87:a1:3b:65:33:8f:db:69:86:28:11:87:
70:1e:96:33:79:d8:f7:80:c0:06:05:81:f5:71:57:90:6e:54:
19:e8:35:98:54:ce:a2:b2:b2:a8:31:af:ba:3f:98:0b:1f:94:
e0:10:a0:4d:0f:a4:f0:aa:81:51:0a:b1:00:38:ca:a3:ed:0e:
46:1b:14:0c:b1:3f:67:22:72:b0:f9:af:07:b6:55:eb:2b:e7:
96:0c:ff:8d:1e:07:56:e1:4d:66:2a:86:22:b9:97:37:11:3c:
9d:a4:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:08:03 2026 by rpki-client