
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: NFpYXYcts1CRnWUcNKw7XlrUskivcljBBJTZToQY+yI=
Subject key identifier: 49:C5:4E:48:A3:03:57:23:7D:20:DF:3D:A9:EC:69:CC:C5:8D:63:AD
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 0269
Signing time: Sun 05 Apr 2026 01:40:26 +0000
Manifest this update: Sun 05 Apr 2026 01:40:26 +0000
Manifest next update: Sun 12 Apr 2026 01:40:26 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: p+EntxUJT829MC725RwdQygSkeBVzuLMh+0O+5OWMQ8=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Apr 5 01:40:26 2026 GMT
Not After : Apr 12 01:40:26 2026 GMT
Subject: CN=69d1bd8a-7e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:8f:4a:ca:31:83:41:4c:ca:0b:9f:a0:0c:
b7:44:da:9a:8e:96:47:0f:6e:16:ea:6c:65:48:0a:
6e:73:47:41:59:70:5e:a0:51:0f:ba:a7:48:8c:b2:
7b:62:2e:67:f0:d9:68:73:d0:0f:83:32:88:6e:6b:
f0:c3:ef:b1:a6:bd:f1:36:90:98:e2:8b:70:69:ad:
13:9e:ad:83:99:dd:cb:09:52:8f:22:71:cb:3d:8a:
2b:a9:09:29:68:91:12:87:df:ff:8d:89:1a:a6:81:
fd:b0:95:9b:c3:96:9d:f9:76:c2:82:58:43:4f:8e:
e0:04:e9:c0:ab:99:37:a1:48:11:d7:0a:18:6f:f8:
e8:0c:99:20:ce:b5:d3:3d:66:46:0b:de:b5:b8:7b:
3c:6f:ca:10:6e:1e:ed:47:a8:80:1b:58:9b:24:24:
b5:a1:ce:a6:c3:20:ad:82:f3:ad:04:01:47:c1:1d:
6f:13:8b:cc:14:a1:53:fc:d6:6f:e5:36:55:c3:1d:
8f:4d:37:2e:14:e6:95:7d:1c:27:5e:22:a6:e1:e9:
f4:be:ec:3e:f0:ba:83:bd:50:85:7a:53:ac:f0:05:
87:17:b3:a8:02:0b:98:fc:b4:03:f8:af:09:b9:78:
f9:9a:c3:e7:6a:82:7a:4f:fc:73:28:d4:53:5d:08:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C5:4E:48:A3:03:57:23:7D:20:DF:3D:A9:EC:69:CC:C5:8D:63:AD
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:41:7b:2e:5b:62:04:00:ed:83:39:58:e3:65:a8:47:ef:8f:
2f:01:97:47:45:d7:44:7c:28:97:24:ff:b2:f3:16:28:01:85:
d0:ee:e2:fd:85:49:5a:c2:f2:f9:82:6b:57:5f:58:68:3d:39:
b4:6f:ea:94:a5:8c:f3:92:25:f7:c9:3b:ff:dd:1b:39:2b:14:
51:e2:fe:a4:cc:5c:84:b1:9a:3c:b9:32:87:17:6d:be:ae:6a:
d1:07:16:6b:27:ad:54:70:7d:d4:31:0a:19:8e:13:80:a7:9a:
65:13:04:1d:5d:d9:08:db:d8:b1:a3:92:f8:af:5a:03:a7:d4:
62:2b:22:bc:28:25:91:b3:4c:f3:9b:c5:83:64:f3:ed:2e:df:
75:cf:9f:f7:53:57:6a:16:35:19:dd:ea:a0:a5:53:7a:49:10:
fd:74:d8:d9:42:28:cf:c4:0a:a1:56:b5:cb:8c:20:75:6c:5f:
39:f1:05:75:44:f3:55:81:2d:f1:74:94:04:93:95:54:d9:4b:
35:c4:b4:9e:50:78:d6:8e:ef:5f:5d:d4:fd:79:5f:5b:4f:6a:
f1:4f:2a:f0:02:c5:f7:7e:a3:7e:e5:33:a1:a2:4e:62:1f:18:
1c:bd:a6:4f:f6:24:0f:2f:eb:d2:02:82:8d:62:68:69:70:f4:
e0:0e:32:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB
Q0Y2RDIyQjYwHhcNMjYwNDA1MDE0MDI2WhcNMjYwNDEyMDE0MDI2WjAYMRYwFAYD
VQQDEw02OWQxYmQ4YS03ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlnmPSsoxg0FMygufoAy3RNqajpZHD24W6mxlSApuc0dBWXBeoFEPuqdIjLJ7
Yi5n8Nloc9APgzKIbmvww++xpr3xNpCY4otwaa0Tnq2Dmd3LCVKPInHLPYorqQkp
aJESh9//jYkapoH9sJWbw5ad+XbCglhDT47gBOnAq5k3oUgR1woYb/joDJkgzrXT
PWZGC961uHs8b8oQbh7tR6iAG1ibJCS1oc6mwyCtgvOtBAFHwR1vE4vMFKFT/NZv
5TZVwx2PTTcuFOaVfRwnXiKm4en0vuw+8LqDvVCFelOs8AWHF7OoAguY/LQD+K8J
uXj5msPnaoJ6T/xzKNRTXQgF+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnFTkij
A1cjfSDfPansaczFjWOtMB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0
RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUQ1Mi82MTJCNjdBQzg0RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85
U01FeDBJWUs4c0dzOXRJclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD0F7LltiBADtgzlY42WoR++PLwGXR0XXRHwolyT/svMWKAGF0O7i/YVJWsLy
+YJrV19YaD05tG/qlKWM85Il98k7/90bOSsUUeL+pMxchLGaPLkyhxdtvq5q0QcW
ayetVHB91DEKGY4TgKeaZRMEHV3ZCNvYsaOS+K9aA6fUYisivCglkbNM85vFg2Tz
7S7fdc+f91NXahY1Gd3qoKVTekkQ/XTY2UIoz8QKoVa1y4wgdWxfOfEFdUTzVYEt
8XSUBJOVVNlLNcS0nlB41o7vX13U/XlfW09q8U8q8ALF936jfuUzoaJOYh8YHL2m
T/YkDy/r0gKCjWJoaXD04A4yIw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:10 2026 by rpki-client