
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier: bizfu1gAivHNHD9sVJgsmlcJQIZTp6mFg73d7IYspGQ=
Subject key identifier: BE:DC:DF:9D:10:29:67:4B:94:37:06:9F:D8:09:47:CF:25:D6:34:E5
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number: 029F
Signing time: Mon 05 Oct 2026 01:53:34 +0000
Manifest this update: Mon 05 Oct 2026 01:53:33 +0000
Manifest next update: Mon 12 Oct 2026 01:53:33 +0000
Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: G3FQ8FFFA/Ycbl3PDnDDneChKKFsFgohEobgoF6xwlM=)
2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: pEm//IYBO5yUXUVl2BGYI8pEuzX3grMfUMX9Zq00xEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Validity
Not Before: Oct 5 01:53:33 2026 GMT
Not After : Oct 12 01:53:33 2026 GMT
Subject: CN=6ac3031d-6731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:90:85:af:90:f1:77:eb:0a:c8:81:77:aa:
03:54:59:a9:b5:92:8a:7e:35:e6:bd:91:64:98:bf:
b8:fb:0a:65:02:d9:26:e5:0e:ba:7b:81:df:02:d9:
87:d8:46:28:63:ae:d1:f1:8a:dd:1d:39:b1:11:d4:
bd:41:f7:10:91:88:0e:88:e6:9c:3e:06:88:26:ee:
3b:e7:d2:d5:f5:da:81:19:24:24:79:21:3b:1a:81:
db:c5:02:a5:9f:60:53:47:d8:92:fa:23:d6:6e:56:
85:69:d3:0b:9e:ed:f8:ef:25:9b:82:99:55:66:76:
13:f0:be:c1:8a:06:bc:ec:96:1e:c4:ff:00:66:bd:
b8:32:39:1f:b7:f8:e0:ee:2d:ca:d7:5b:26:17:05:
18:86:c7:06:3b:fe:1d:e5:38:91:62:e1:61:95:2a:
07:93:b5:a4:a2:0c:40:33:4d:a5:15:2e:df:95:a1:
1e:d1:14:51:11:76:f2:3e:63:09:13:99:5a:e2:78:
4b:a6:ad:2a:db:d8:89:47:74:77:3a:3b:57:6b:17:
42:0a:d6:e4:38:d4:ba:9b:54:fa:c8:c9:30:89:2c:
71:56:dc:c7:50:52:6f:39:fa:95:4e:5a:c4:2a:19:
89:85:39:fd:31:6b:b8:b4:eb:86:27:9f:4c:27:dc:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:DF:9D:10:29:67:4B:94:37:06:9F:D8:09:47:CF:25:D6:34:E5
X509v3 Authority Key Identifier:
keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:8e:da:ec:76:f2:c5:94:93:db:2a:b0:ff:e0:04:05:2f:36:
64:a9:c9:37:42:b0:dc:4b:e4:cd:7d:11:b1:31:fa:3b:4b:b7:
9c:b1:3f:1f:f1:c7:8f:97:11:e6:b9:15:ef:93:e4:10:8b:f6:
15:60:f8:c3:e7:1e:b3:7d:ed:09:e7:ff:9f:57:d7:59:39:3c:
d7:31:92:35:c9:49:2d:5a:1e:47:9d:31:6b:dd:4d:d9:b3:a9:
a3:d0:1b:9c:b9:16:a7:4c:db:7d:78:c2:4c:21:20:c4:2e:82:
73:30:9e:68:f7:c6:51:38:0b:24:ac:9b:9e:f9:15:b3:27:c0:
55:f2:27:ce:4e:29:ed:18:ab:44:41:44:53:47:e4:1d:f2:4f:
cb:14:c3:b0:97:75:59:3c:f7:fc:0a:59:5c:c1:08:11:44:9e:
59:48:b6:57:f9:d6:64:6d:3f:f4:ec:89:fa:d7:ce:9d:06:5a:
69:a6:3a:f3:02:14:86:66:61:1e:20:4f:44:67:c1:a4:6a:7a:
d0:b6:fc:c8:95:60:89:ee:85:e2:8e:e2:eb:a5:8b:33:84:ec:
9e:7d:28:d7:dd:2f:e0:ce:fb:5f:0e:00:a9:a2:0d:69:1e:67:
da:4a:9b:ba:79:67:52:20:06:b8:4e:8b:68:65:e2:3d:3e:d1:
3b:9c:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:23:37 2026 by rpki-client