
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier: USJkdJzkbPmAHNqyEbl1WPmxcyd0B017Vza1OV06TAU=
Subject key identifier: 04:44:E2:25:51:83:99:BC:10:33:53:69:E5:DA:3A:BA:AD:4F:D4:52
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial: 034C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number: 0346
Signing time: Fri 27 Mar 2026 00:44:04 +0000
Manifest this update: Fri 27 Mar 2026 00:44:04 +0000
Manifest next update: Fri 03 Apr 2026 00:44:04 +0000
Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: eL2N1aC7jjZ5WX/WALHegDDUvF6NK9H3woTDA0MAy68=)
2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: HmeKBQST4q/GdJylCRWjN6btzZNudyb9mfVAkuKWY6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Validity
Not Before: Mar 27 00:44:04 2026 GMT
Not After : Apr 3 00:44:04 2026 GMT
Subject: CN=69c5d2d4-9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:73:81:c4:fd:00:44:85:5c:6f:1a:fb:90:
a9:86:d7:3d:89:da:ec:41:7a:8a:fe:a1:be:b1:34:
7c:5f:0d:ca:5d:e0:11:b3:e9:39:9a:d1:da:44:77:
50:fd:bc:c1:c0:be:15:7d:1a:31:5f:22:e5:1f:42:
8a:90:3b:72:d5:9e:a1:ab:14:16:fe:e1:94:a2:0a:
c0:78:82:bb:11:6c:f5:d5:de:2b:e6:5c:e6:59:19:
2d:12:e2:3b:f9:64:9b:41:49:3e:81:f2:21:00:7d:
5a:e9:b5:76:40:44:b8:8e:be:63:80:06:b3:63:6e:
a8:f7:f4:fb:a8:b0:c5:b7:a4:83:14:df:0e:91:43:
5f:ea:82:6b:66:51:de:de:0f:29:04:d5:f3:c4:0c:
f0:1f:d1:cc:6d:38:5e:ad:b8:8e:fd:c2:17:f1:33:
bb:c1:3a:d9:6a:81:8b:c8:08:0a:7f:ac:85:de:53:
00:3c:70:92:d9:d8:c5:9e:fa:d7:38:0b:29:a9:5a:
68:1b:9f:c7:9f:5d:52:d2:42:26:c2:1b:9d:d0:ff:
9e:78:6c:c8:cc:d5:38:62:d8:5a:54:ea:3e:44:38:
48:04:88:d0:fa:0b:ae:7a:e7:69:b0:47:74:c8:d5:
55:5f:ff:24:04:4e:99:63:e0:bf:93:85:7d:0a:43:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:44:E2:25:51:83:99:BC:10:33:53:69:E5:DA:3A:BA:AD:4F:D4:52
X509v3 Authority Key Identifier:
keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:5b:b4:c2:af:11:b0:fc:54:01:2c:10:9d:10:9c:47:f0:52:
17:2c:4e:a7:53:ea:22:ef:70:4b:02:da:9d:da:43:26:09:6d:
ff:15:27:c9:31:44:1f:b9:2d:ce:e1:20:e2:17:3e:88:e7:22:
75:fd:41:84:63:52:0e:27:75:8b:b1:96:c1:96:a8:a6:8d:db:
f9:4b:2c:ce:52:d2:8e:ba:ff:60:31:22:38:ed:d8:e5:6b:8e:
48:f7:28:80:d5:02:ba:62:92:f3:8b:0e:21:45:be:de:2a:25:
ff:09:d1:75:25:aa:8a:2c:e8:44:95:a6:d8:d7:3f:56:ef:7e:
43:3d:0c:e3:42:82:30:9b:91:40:e0:b6:0f:8d:cb:e6:d0:86:
dd:e3:fa:59:5e:45:bb:0e:d9:d4:a2:0f:8d:15:57:83:ed:08:
6f:eb:9e:93:1e:cb:e3:2b:90:33:1b:80:f7:ed:8a:c8:58:6e:
5a:bb:c2:b3:e2:ff:47:73:22:59:46:f6:9d:33:54:67:78:5d:
ee:f4:28:78:33:57:25:79:59:76:7a:2c:68:ed:8f:71:cb:11:
ef:f7:b9:a0:c8:2f:ff:27:16:40:1e:0c:c4:cc:d5:3e:a5:43:
d2:a2:7f:50:13:10:30:15:ee:57:f4:ca:45:f5:65:4f:54:92:
b6:7b:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:40 2026 by rpki-client