
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: ktHckXlDF+OcFqIPd8KbHROM9wgbix4XLgt7gtVDPtg=
Subject key identifier: 81:40:B8:A1:36:51:80:17:E5:AF:B3:8E:63:1C:20:E7:FF:25:96:94
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 21
Signing time: Sun 05 Apr 2026 08:14:20 +0000
Manifest this update: Sun 05 Apr 2026 08:14:19 +0000
Manifest next update: Sun 12 Apr 2026 08:14:19 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: adRm+d0J0DuA14hRfuhfQ1jPNFwyu2Qo5nDB7EfrqMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: Apr 5 08:14:19 2026 GMT
Not After : Apr 12 08:14:19 2026 GMT
Subject: CN=69d219dc-a30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:87:e2:03:f8:b4:18:a1:b5:71:38:d6:99:
40:17:5a:d4:9d:4b:67:4d:3f:6a:69:b7:fb:81:ca:
13:62:62:bb:cd:06:a9:45:62:7b:0c:12:d4:2a:28:
3f:42:ad:93:7b:d3:04:0e:4c:56:e7:ed:ae:ce:3a:
c0:5c:b8:4d:33:a3:9f:ef:f2:ce:3d:5f:d7:c2:5e:
6a:56:7f:b2:e8:b5:26:f0:11:de:7c:68:8a:be:66:
8d:b2:9c:1c:81:1f:5f:2e:9f:fa:33:22:e6:58:18:
85:4d:8e:26:07:83:c3:a6:6e:cf:f1:83:98:6e:e7:
9b:66:66:a9:80:45:5d:49:01:ad:9f:77:77:7f:94:
f5:90:03:e4:eb:66:9e:ae:01:09:3e:cb:6c:8e:b9:
2f:03:0c:fd:96:a4:21:91:c6:9b:af:f5:76:c5:59:
40:bc:cd:a1:ac:b7:ea:a7:b7:98:0e:72:5b:a7:fd:
7e:4a:22:ce:17:25:cf:69:34:94:5b:28:43:3b:da:
18:a5:07:72:f0:e4:d8:3b:69:6a:98:3d:03:e3:f9:
05:b7:a6:33:f0:b6:9a:3c:d9:3b:2e:82:b8:b4:b2:
da:23:d9:d7:f8:15:15:05:99:a7:de:a1:c2:eb:e2:
28:e9:82:a5:72:ca:d8:c5:34:ed:aa:6d:81:11:94:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:40:B8:A1:36:51:80:17:E5:AF:B3:8E:63:1C:20:E7:FF:25:96:94
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ab:2a:a0:09:97:8c:f3:06:fa:be:94:bd:55:04:fa:f3:55:
64:2f:37:24:1a:a8:17:1f:fd:c7:ea:13:9f:3a:a4:7b:90:4d:
96:c0:2e:80:52:85:74:a4:39:6b:37:58:fd:c3:96:6b:a4:ce:
e6:88:1c:c6:00:46:de:7c:36:c6:cd:5e:24:7c:51:9c:b5:c6:
0d:c2:66:29:0a:27:25:3c:12:bb:28:01:7f:3a:38:90:8e:ec:
28:9d:21:1a:60:b7:c9:08:0c:92:92:c4:03:e2:79:04:54:3a:
59:6b:fb:6f:95:58:ad:8b:94:06:01:71:c6:a1:b9:16:cc:07:
2b:44:6e:1d:a6:7c:2c:af:b4:26:3d:3e:c6:eb:59:65:08:fa:
2b:c1:09:df:2c:b5:d3:5a:fb:da:5c:ea:c1:d6:cb:91:33:cf:
25:67:a8:80:b3:07:fb:71:1f:74:0f:c3:f2:a7:d0:05:65:f0:
44:cc:e4:73:bf:e1:71:30:06:18:e6:1d:49:35:7f:46:85:79:
05:09:a4:b4:d4:0a:21:4d:dc:c8:c6:9d:7f:1a:b4:fd:98:4d:
64:87:3d:8f:4c:38:cb:43:e0:e6:91:67:02:e8:df:91:38:c4:
df:22:50:2d:61:7e:1f:7d:95:0e:5a:96:ed:c3:22:27:c5:c4:
cb:76:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:49:21 2026 by rpki-client