
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json)
Hash identifier: zWOqO7w+TmqxSEddZSR/IJuq7XqqKR0Or34Z/nnUpSY=
Subject key identifier: E3:00:52:E0:2E:57:39:EE:2B:44:22:72:16:59:71:00:87:A5:79:12
Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
Manifest number: 39
Signing time: Thu 19 Feb 2026 06:46:02 +0000
Manifest this update: Thu 19 Feb 2026 06:46:02 +0000
Manifest next update: Thu 26 Feb 2026 06:46:02 +0000
Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: NfMtpAFLYY6aA64m52tVv8jbly82ApJf9SYgoC7XtbY=)
2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: PNZrl6zNI+1AHV1SGmGe71ONQBJFe9ys1G9nldi1fqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl
rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Validity
Not Before: Feb 19 06:46:02 2026 GMT
Not After : Feb 26 06:46:02 2026 GMT
Subject: CN=6996b1aa-668f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:a5:5c:33:10:dc:fe:87:d3:9d:2f:bc:c0:
f2:ca:d0:3f:6b:e4:9f:91:a8:2f:a8:f9:23:73:0c:
2f:5a:94:c5:34:cd:78:eb:17:65:02:c8:1e:c2:c7:
0a:5a:5a:3a:7a:91:70:24:2d:00:2f:75:d5:9e:b7:
ca:9c:6e:31:6e:98:7b:27:35:4f:d2:ae:8a:aa:59:
37:68:cc:ff:4b:30:36:27:5f:53:9b:86:a0:4f:08:
df:ca:29:ce:8c:7e:46:2f:82:b5:03:fa:85:66:7d:
7d:1f:ef:14:f0:2f:51:a9:6e:0d:8a:8d:10:3e:26:
c5:86:a4:ad:c4:47:a4:7f:93:5e:8c:fd:69:2c:b3:
df:6f:6c:9c:df:78:33:dc:c2:d2:7c:5f:b5:a3:24:
8a:26:a0:94:48:28:68:47:c6:a7:4f:d3:80:16:cc:
90:79:3e:d9:ba:a2:fd:06:76:f6:93:fd:2b:a0:1f:
3f:87:ff:e9:c5:19:ed:f7:3c:62:71:16:8e:c9:14:
54:09:6b:de:1c:20:5e:1b:fd:4c:3c:65:4e:5d:dd:
17:6b:3a:80:e8:a5:76:87:f9:cd:13:8c:22:6b:51:
ed:02:81:e4:a4:f3:13:8b:ce:1e:ce:46:00:16:0a:
0d:27:05:31:4b:52:89:3c:8d:94:5b:4b:9b:ce:af:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:52:E0:2E:57:39:EE:2B:44:22:72:16:59:71:00:87:A5:79:12
X509v3 Authority Key Identifier:
keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:65:1c:f5:b2:88:67:bf:78:cb:9f:1b:29:8d:21:e1:a2:5c:
9d:f4:93:50:bf:7b:04:8e:1d:6d:97:14:07:95:44:21:1b:b1:
6f:61:c0:6d:cf:e5:1c:a6:99:9f:01:7f:ad:e5:f9:15:77:35:
22:2c:27:f2:62:be:a4:99:04:f4:b8:3a:82:71:5d:ed:53:0f:
47:8d:0a:f9:af:6e:a4:e0:37:d8:77:cb:84:8d:f2:bc:11:cd:
ab:75:5d:8b:a1:b7:1e:5a:e6:a0:76:87:60:60:15:3c:6b:67:
89:23:bc:e8:da:e1:8b:45:7c:40:1c:c3:dd:3f:3a:4e:a8:2b:
ef:58:7e:2c:bc:a1:0c:79:2f:72:bf:9f:32:fa:a3:c1:b7:48:
bb:fb:10:54:f8:dd:9c:c6:d5:bb:e2:da:9a:4e:18:35:c2:c8:
b6:80:f1:65:dd:19:34:48:12:91:81:a2:ff:af:51:7b:42:70:
b2:d7:b5:ca:b2:5c:13:89:b1:eb:d1:31:bc:f4:34:34:6c:1f:
ff:b6:b0:27:ae:6a:30:1d:89:19:bf:14:f5:5e:5b:cf:be:4f:
42:5c:ab:b6:ce:85:de:87:f4:1a:46:78:59:e0:12:b9:fc:70:
05:6f:20:25:9e:c4:50:06:55:ac:d9:0f:ae:9b:cf:e8:c9:13:
69:43:08:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:00:22 2026 by rpki-client