
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier: 7Ev39myZFUggrU6PEcq/kR6rRl06XLXkZCloF2ack34=
Subject key identifier: 46:1C:3D:B9:92:5D:43:E5:5C:ED:43:70:F8:FD:04:C9:7C:FA:FE:74
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number: 0183
Signing time: Thu 23 Jul 2026 06:00:42 +0000
Manifest this update: Thu 23 Jul 2026 06:00:41 +0000
Manifest next update: Thu 30 Jul 2026 06:00:41 +0000
Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: nhtx1446yETr43mx99bWtcKh4qHcCdk6TixQeu05e9s=)
2: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=)
3: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Validity
Not Before: Jul 23 06:00:41 2026 GMT
Not After : Jul 30 06:00:41 2026 GMT
Subject: CN=6a61ae0a-56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:67:4c:4c:99:c9:2e:05:3e:f6:5b:c2:8e:
1a:89:6a:48:bf:ff:92:a3:b4:02:1a:f8:99:8e:0b:
90:cb:e3:79:b4:02:c9:95:93:c1:cb:55:90:7e:67:
53:67:24:b7:3f:56:5e:39:ae:56:73:ee:90:90:2f:
59:b2:38:3b:c1:b1:9e:fe:22:e0:9a:f6:2f:f6:af:
39:b5:52:c0:25:2a:57:3b:73:6b:49:85:8b:a5:db:
3b:aa:54:7d:70:89:49:c1:49:f5:2f:fd:6b:b7:cb:
32:0f:9a:64:57:fc:7d:b6:96:ad:3e:ca:d9:8e:db:
cc:f5:6d:f4:52:f0:3d:48:a6:85:43:b6:83:9a:6c:
97:cd:8c:d6:e8:05:10:1c:34:d5:16:da:eb:f2:cf:
27:39:3c:0c:a0:51:a7:f9:ed:a6:0d:fd:25:3c:c9:
b2:21:40:c5:f6:89:4a:f0:b0:b0:20:c6:f8:7c:87:
49:1a:1a:30:e0:62:7e:77:b9:82:08:c5:be:a4:78:
4c:d0:61:e8:6d:17:62:57:10:c2:85:aa:c6:74:8a:
10:26:4a:f3:ef:d6:e8:66:c0:ca:23:54:32:ae:33:
2d:4d:16:dc:f7:e1:f5:e3:e7:2c:91:0b:46:02:4d:
5c:a3:1f:cd:08:92:0e:62:cd:94:d2:72:16:b5:f4:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:3D:B9:92:5D:43:E5:5C:ED:43:70:F8:FD:04:C9:7C:FA:FE:74
X509v3 Authority Key Identifier:
keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ef:ef:88:05:16:40:91:d2:99:ed:61:2e:8c:13:0b:10:ba:
8b:c2:72:1b:a4:89:08:a3:08:87:6c:80:32:93:98:86:e4:a0:
e9:31:83:a3:eb:a2:cd:9d:7a:7f:9b:0d:26:8b:76:51:37:b3:
61:ae:0b:ca:dd:75:96:9b:f7:d5:0c:4b:63:17:49:0b:5f:a4:
41:84:aa:40:f9:b8:70:fe:4b:30:c7:62:75:aa:03:0f:b5:55:
70:91:60:09:d9:0a:8c:32:d7:8e:2e:7b:24:0c:d3:9e:f5:7c:
a7:7c:a4:a3:0d:f5:02:b7:c2:5e:54:95:f8:18:ce:4e:a5:83:
8f:fc:d6:13:2d:da:00:18:b5:8e:c9:03:bd:cc:e9:be:8c:7d:
83:92:ba:6f:d9:02:0e:cc:f1:45:4a:fe:65:d3:45:2f:c2:32:
7d:9a:f1:80:39:d1:41:0b:be:05:6b:04:eb:93:39:9f:a5:b0:
e3:2c:51:fa:c4:1a:34:54:2d:67:32:f0:80:28:38:c0:9b:c2:
1d:d0:32:90:cc:dc:55:f0:00:44:fa:bb:83:c8:b7:64:47:9a:
23:2a:3b:4c:65:36:65:98:23:d4:c7:69:53:a9:15:e2:23:f5:
b0:11:21:2d:8c:6e:3c:b6:08:eb:16:60:ec:39:f5:b8:b2:34:
99:30:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:19 2026 by rpki-client