
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: 37iEuprx4WrVYyxlRlBlocyPPqXH5Eqn4hY94LlI2co=
Subject key identifier: 4E:0C:4D:3D:BA:41:C6:ED:CB:A5:CC:4C:FA:C9:A6:63:E7:7C:87:8D
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: DB
Signing time: Wed 13 May 2026 06:46:20 +0000
Manifest this update: Wed 13 May 2026 06:46:20 +0000
Manifest next update: Wed 20 May 2026 06:46:20 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: gbTRZl0lI3DETRcfWYkWGxw76xqMgauyqGWV7lOCK50=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: May 13 06:46:20 2026 GMT
Not After : May 20 06:46:20 2026 GMT
Subject: CN=6a041e3c-c936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:35:27:7b:16:fb:5f:12:07:1c:63:e4:25:
80:8d:a8:16:db:f8:fd:22:3c:f9:8c:d2:92:e8:bc:
05:64:dd:e2:84:6e:ba:a4:78:d7:ec:11:17:a7:39:
eb:c3:3a:c8:a6:e2:72:27:c7:1e:be:e2:b2:f0:17:
d7:6a:8f:35:dd:2e:e4:ad:c7:b4:b4:3d:26:6b:33:
04:0a:fe:33:8e:65:83:b4:d8:6e:d0:d0:0e:c4:7f:
61:b8:e2:98:4b:d3:42:aa:4d:37:e7:05:7b:9b:32:
18:c1:2d:17:f1:aa:33:71:87:f7:cc:8b:6b:e9:1a:
73:34:f2:a9:9d:b6:2a:a3:39:fe:81:e6:b1:08:e0:
bd:78:10:6b:7f:bf:4c:a8:f1:ac:7b:c4:fb:b3:f0:
ca:62:3d:42:5a:d5:6e:f1:00:f3:50:4d:77:b2:2b:
9c:ad:44:c0:9d:10:16:2f:81:18:55:9c:5a:ed:55:
8a:7d:32:9a:ec:cd:70:86:1a:75:56:be:1e:42:5d:
16:2a:e7:37:cd:ad:6b:8d:ee:5e:48:48:ab:37:08:
97:38:74:74:f3:93:8c:c5:14:90:a2:8a:91:b4:9f:
1c:9d:ba:93:e2:25:20:7f:5d:22:e4:de:22:95:05:
e7:db:87:d6:27:8d:75:01:be:ea:e6:19:2a:8f:09:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:4D:3D:BA:41:C6:ED:CB:A5:CC:4C:FA:C9:A6:63:E7:7C:87:8D
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:01:87:33:9e:c2:b3:4a:c5:a8:fa:53:23:7b:b3:c1:c2:
1a:2f:aa:04:33:09:2a:60:99:82:a1:73:5a:48:ba:dd:b3:60:
e3:94:fe:ce:6e:95:d6:e5:c3:e6:36:8d:94:16:51:e5:2a:c9:
8c:27:e2:79:50:d7:4d:9c:69:7c:f1:e8:f8:09:3c:4c:5f:d1:
2d:6c:4e:8e:16:06:14:46:e5:ff:8f:e9:41:13:4b:7d:97:1c:
57:cb:9c:5b:dc:02:59:14:c6:32:2e:bd:8b:89:42:3d:eb:21:
6e:12:d3:1c:d8:11:e6:cc:ae:7c:fb:4c:1d:89:62:6b:12:78:
59:2c:06:c3:27:52:96:39:1b:ae:a3:e2:52:2e:35:31:33:66:
c9:d3:61:aa:38:cc:95:f4:8f:ca:17:7d:43:f7:24:e6:3d:10:
3d:c4:40:88:74:ac:5e:09:04:0d:26:20:68:87:08:86:44:35:
c6:df:02:7a:0a:aa:03:65:c1:e6:4a:1e:6f:c3:84:a5:5c:4e:
de:8d:9e:39:28:f2:f4:b7:dc:35:94:cc:04:56:87:15:f2:28:
68:b6:b7:20:a3:2a:58:de:91:32:cb:1a:80:83:1f:44:6a:3f:
02:54:de:99:89:7e:67:26:5c:4e:73:fd:ad:32:14:60:58:14:
ac:5f:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:29:43 2026 by rpki-client