
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: O0dc2FDmgCeEYzmZ2rG54/iS8UueFfM3CUHuz5pq7YQ=
Subject key identifier: 5C:A0:31:DB:89:CD:34:1D:70:8E:C1:AD:8B:8C:ED:84:C7:18:B5:EB
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 7D
Signing time: Sat 03 Oct 2026 08:30:09 +0000
Manifest this update: Sat 03 Oct 2026 08:30:09 +0000
Manifest next update: Sat 10 Oct 2026 08:30:09 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: jiv0Lkjc/DpkM6nJ455yb2RLeoayGqr/RrbmEHfUYeo=)
2: 783957EA31BF11F1BC4C9C57C1833773.roa (hash: DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: Oct 3 08:30:09 2026 GMT
Not After : Oct 10 08:30:09 2026 GMT
Subject: CN=6ac0bd11-91b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:8a:35:77:21:e0:b8:28:cd:24:f2:03:dd:
b6:ea:b5:c1:79:fb:8b:a0:6d:80:7a:11:dd:ad:3b:
36:d9:23:8a:1f:25:55:69:23:82:c6:28:70:34:03:
a1:e4:86:a7:1f:83:61:66:8c:a2:7a:52:12:66:20:
72:ac:bc:63:5c:26:76:84:30:e6:5c:72:1b:02:29:
76:01:14:7f:21:a3:8b:6b:0f:15:3d:81:71:88:b6:
db:84:a0:76:c7:fa:88:9e:a7:77:5d:da:9b:5e:f2:
ff:29:c9:98:ae:0a:fd:d4:f6:4f:fe:d2:ea:88:85:
d9:a5:b7:9d:87:c8:56:cc:b1:7d:9b:a4:18:24:63:
c0:91:09:d3:91:e5:4f:83:8d:57:1e:b8:cb:91:2b:
e6:86:f6:99:c4:95:aa:5b:19:b8:8c:e0:4b:d4:69:
d8:d2:45:74:56:2c:f8:e3:7d:8e:2d:98:c7:19:57:
92:69:dd:bc:4b:16:81:90:ca:f1:87:36:29:1d:2f:
8b:83:c9:22:37:9e:e0:49:98:38:94:94:c7:c4:2c:
dc:c5:64:13:8d:06:7c:05:d4:10:1c:66:67:57:9c:
af:19:61:87:2f:72:50:d9:da:5e:51:e2:e9:d0:c3:
bb:00:01:85:ea:6c:00:c3:9d:e1:ca:b7:03:76:b3:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:31:DB:89:CD:34:1D:70:8E:C1:AD:8B:8C:ED:84:C7:18:B5:EB
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:55:31:f3:55:00:5f:52:66:22:e6:62:45:5e:d5:60:8d:03:
b4:7c:1b:55:be:aa:c3:64:6d:36:e4:dd:17:6d:63:f0:9c:40:
39:07:6e:2f:5e:82:31:fd:3d:8f:2c:e2:c5:fc:d7:d5:99:7b:
fb:a1:13:e4:fb:bb:01:f6:94:99:34:b0:8b:8f:32:68:7c:26:
94:d2:02:ed:f8:91:17:f7:6d:4f:85:97:6e:9c:25:11:d2:ba:
a7:12:60:12:fb:5f:dd:6b:cb:98:78:4b:a2:bb:d2:e3:67:4c:
c1:6d:c6:f9:d9:51:df:9d:52:05:11:6e:b4:b2:0b:72:e8:5d:
95:60:d4:93:6a:c8:1c:ed:3e:63:cc:6a:6e:77:5a:aa:25:7c:
63:7b:ce:10:ad:d8:d0:31:10:d9:f1:de:0c:ce:54:cf:94:ef:
35:55:6e:78:1c:63:eb:52:72:9f:ad:1a:0b:c6:97:3c:76:1b:
d3:77:80:9d:b4:d5:7c:c4:dd:fb:47:2d:25:aa:a3:92:a3:e2:
3f:9c:ad:4f:a7:fa:d4:44:00:0d:01:1e:b2:f1:fd:e8:2f:cd:
db:61:c6:a9:d6:87:92:8b:59:f9:1c:d1:5b:ab:fc:7a:2a:57:
2e:15:b2:bb:fe:30:2c:1e:2c:c8:84:8e:3f:e3:26:3f:fb:72:
53:74:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:36:12 2026 by rpki-client