
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json)
Hash identifier: 85jPVeQNYclQHN/ZHDbTCDFTCgOnpGIfC0xBIbO1mS4=
Subject key identifier: 11:F0:84:8A:66:27:2E:54:2E:5B:A9:7A:E7:28:2F:84:31:A5:8C:36
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
Manifest number: 4B
Signing time: Sun 05 Apr 2026 07:40:40 +0000
Manifest this update: Sun 05 Apr 2026 07:40:40 +0000
Manifest next update: Sun 12 Apr 2026 07:40:40 +0000
Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: jY1wdq+wpHmktag7tgRg3aaMNzADiNHN/qtCD8XySys=)
2: 3102D984C7A511F0AB2B8524C4F9AE02.roa (hash: Tul75lPWRtkLUQpE4kJeQR++0ieheSLP1KNAU3JiUWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Validity
Not Before: Apr 5 07:40:40 2026 GMT
Not After : Apr 12 07:40:40 2026 GMT
Subject: CN=69d211f8-57f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:8e:d5:05:01:67:eb:90:9b:28:bd:a2:2d:
6d:23:46:cd:e9:7a:dd:80:72:23:80:a6:d6:8c:be:
c3:ee:82:20:95:f7:1a:4b:8f:51:3d:dd:dd:b4:6d:
84:8a:a3:41:dd:30:b8:fe:f0:56:46:ba:8b:5e:14:
68:d9:94:66:6c:80:42:3b:79:69:ad:12:95:3d:18:
10:35:92:53:8b:db:de:ef:bc:48:c0:c3:d7:fa:b3:
4e:3a:e8:f6:a6:e8:fc:11:3f:0f:ca:1b:3a:44:e1:
6e:80:61:d3:ac:0a:49:21:a6:61:23:e0:3b:82:05:
69:fa:48:cf:d2:07:4f:3e:6b:f9:a8:6c:e7:90:e6:
25:bf:68:fd:2d:76:27:6e:4c:15:8e:6a:36:78:27:
e4:08:db:46:20:6c:e6:48:b2:89:94:d5:e5:e5:f2:
ba:05:54:02:07:84:5a:87:c2:cf:b9:e2:5b:3d:b4:
8a:84:97:f2:6d:ef:ff:c7:d2:2f:9d:31:83:ec:0e:
87:0d:8e:9c:ba:58:4e:f1:6f:8c:af:7c:34:b9:89:
cd:d2:77:b4:0f:a1:95:b6:e6:df:61:d0:c4:35:29:
9b:be:45:c3:89:91:35:b2:64:9c:76:4f:8d:ad:4f:
ff:ab:ef:6b:bf:cb:41:72:06:ff:ff:c9:1e:c2:83:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F0:84:8A:66:27:2E:54:2E:5B:A9:7A:E7:28:2F:84:31:A5:8C:36
X509v3 Authority Key Identifier:
keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:19:4a:2e:a2:ea:b0:d6:4b:2f:4b:d1:93:c6:ae:d6:a3:d1:
d1:8b:8e:36:8e:81:d3:b4:2c:df:ca:90:c5:b0:9e:96:be:c8:
4b:3a:fb:3a:d3:d2:53:34:0a:0b:3c:d4:6d:88:6e:63:c0:89:
db:0d:97:bc:11:b9:90:27:5e:11:af:ff:5a:82:a1:5f:b0:3b:
25:85:9f:07:9d:5f:62:bb:c1:87:b5:cc:8a:34:ad:35:65:42:
b0:70:62:d7:87:37:65:40:30:c6:c9:70:6b:0f:15:b0:16:ce:
7d:21:10:6d:10:bc:af:ae:3e:f9:2b:6f:77:30:da:d7:6a:6e:
e8:6d:e9:b7:d4:53:18:89:7f:02:32:c2:a7:17:4a:aa:64:12:
a3:04:d7:ab:a0:93:31:e6:5c:61:18:30:3f:3a:7d:7b:77:50:
0f:74:76:fd:a9:a8:75:dd:a8:9e:4e:75:22:8d:4c:aa:c5:98:
dd:53:95:72:49:f8:d8:f6:3c:57:da:a2:ca:8e:ba:b1:ae:86:
e7:d3:ab:d3:e0:82:20:bb:5a:26:8d:a3:64:ee:6c:36:ca:d5:
ec:7c:63:93:79:d7:5a:aa:00:ec:02:c3:75:28:ec:b3:d6:d6:
f2:19:71:02:12:73:e6:31:61:21:7d:9c:c1:f1:34:33:a2:06:
45:83:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:34 2026 by rpki-client