
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: FX8mYeS/mYrYBqe+e9+9MwTS1IK8D1KHoJDNAqcAU3w=
Subject key identifier: 3A:75:DE:93:B5:01:E4:50:A2:43:9C:87:87:DB:1F:8A:B2:CB:24:5C
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 49
Signing time: Tue 23 Jun 2026 08:41:02 +0000
Manifest this update: Tue 23 Jun 2026 08:41:02 +0000
Manifest next update: Tue 30 Jun 2026 08:41:02 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: 4y40UHIkwpJkXK2ZTl8W8TDOeNhqZR7sVcBWKQU4qXY=)
2: 783957EA31BF11F1BC4C9C57C1833773.roa (hash: DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: Jun 23 08:41:02 2026 GMT
Not After : Jun 30 08:41:02 2026 GMT
Subject: CN=6a3a469e-b6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:19:07:3f:46:b7:14:65:5d:b0:20:76:7a:
d4:0e:3a:5a:fe:77:94:54:9d:72:b8:b4:a9:96:c8:
6b:c2:f2:fe:b4:13:bf:86:1f:58:bd:33:bf:b9:85:
cd:95:a3:a8:2e:1d:62:da:8c:0e:74:87:4e:b7:e5:
c2:89:65:95:c7:1c:0d:a3:fd:ab:9e:d1:7c:73:ce:
3b:a7:78:2d:fd:2e:41:cf:cf:54:98:10:41:e3:ee:
07:64:1d:52:79:53:ce:dc:0b:9f:20:14:b3:4b:3c:
70:9b:af:9c:5a:49:ae:66:5f:cb:a8:e6:1a:07:91:
75:5a:6a:99:9b:45:0c:d0:e7:48:2b:83:58:5f:0d:
ab:1f:29:78:7e:18:c0:bb:ba:a0:15:a0:af:d1:77:
5d:cb:80:56:62:9e:ac:13:12:69:17:42:bb:25:5b:
b0:86:31:e4:b4:be:a1:0b:f3:99:56:82:de:cc:ae:
52:c0:eb:7b:33:b7:5e:97:fd:a3:41:67:27:3f:46:
95:f9:68:6a:65:84:92:89:c7:0d:02:c2:7f:fe:9d:
4d:c7:79:01:56:82:36:5e:41:ec:f6:57:33:73:77:
3d:32:f3:78:80:0a:64:e8:8f:7a:24:13:19:64:ff:
2d:9f:05:17:52:22:61:3d:15:df:0b:a3:11:09:c3:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:DE:93:B5:01:E4:50:A2:43:9C:87:87:DB:1F:8A:B2:CB:24:5C
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:91:de:7d:ad:d7:f7:2d:e1:24:8e:72:3c:fe:78:4f:dd:
bf:e3:ea:b8:fe:31:f2:c4:be:69:02:e4:5f:78:ec:93:28:82:
36:52:0e:aa:ef:c5:4b:c3:fa:a9:5f:71:31:fa:9d:17:fa:5d:
fb:2a:9c:7b:69:6f:ea:23:20:e2:8d:66:71:f2:b1:af:15:82:
6c:41:3c:94:92:4f:31:03:9f:62:42:50:85:a2:89:9f:68:bf:
7e:aa:fa:31:1e:4b:75:59:1c:ea:de:d3:44:da:8e:ec:34:92:
77:a9:58:83:2f:6f:f3:1a:00:71:6d:fc:cd:72:1b:9e:9d:7f:
04:84:9e:2b:6d:90:32:98:53:d0:83:ff:6e:3d:27:1d:46:c2:
16:63:09:4e:a8:a0:92:d4:b6:9d:49:8a:d6:6e:98:c0:ca:94:
2d:d5:02:28:0d:f1:34:da:3c:bb:d6:c7:c8:21:df:12:0d:b3:
5d:bb:9f:32:3e:c2:8a:49:9d:23:ad:d8:f5:ff:ec:66:ff:73:
84:ea:38:7d:46:71:39:33:0a:c1:a9:07:f5:38:d5:c8:7f:a9:
8a:3d:d1:01:22:d6:96:17:87:f2:21:34:20:64:98:84:26:5f:
31:18:2d:17:cb:11:9f:23:b3:e0:2c:a8:16:4d:4f:78:47:3c:
3d:5f:d7:46
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MUI0QzExMC8GA1UEBRMoMkQ3N0IzMzFEODMyOTEyQjYxQkUwQTUwQTZEODYzNEI4
RTJBQTc5QzAeFw0yNjA2MjMwODQxMDJaFw0yNjA2MzAwODQxMDJaMBgxFjAUBgNV
BAMTDTZhM2E0NjllLWI2YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8wBkHP0a3FGVdsCB2etQOOlr+d5RUnXK4tKmWyGvC8v60E7+GH1i9M7+5hc2V
o6guHWLajA50h0635cKJZZXHHA2j/aue0XxzzjuneC39LkHPz1SYEEHj7gdkHVJ5
U87cC58gFLNLPHCbr5xaSa5mX8uo5hoHkXVaapmbRQzQ50grg1hfDasfKXh+GMC7
uqAVoK/Rd13LgFZinqwTEmkXQrslW7CGMeS0vqEL85lWgt7MrlLA63szt16X/aNB
Zyc/RpX5aGplhJKJxw0Cwn/+nU3HeQFWgjZeQez2VzNzdz0y83iACmToj3okExlk
/y2fBRdSImE9Fd8LoxEJw74pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOnXek7UB
5FCiQ5yHh9sfirLLJFwwHwYDVR0jBBgwFoAULXezMdgykSthvgpQpthjS44qp5ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQjRDL0E5NDJCMTYyMDdF
MjExRjE4QzU2MjU2OTIxM0Q4QzY3L0xYZXpNZGd5a1N0aHZncFFwdGhqUzQ0cXA1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTFhlek1kZ3lrU3RodmdwUXB0aGpTNDRxcDV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx
QjRDL0E5NDJCMTYyMDdFMjExRjE4QzU2MjU2OTIxM0Q4QzY3L0xYZXpNZGd5a1N0
aHZncFFwdGhqUzQ0cXA1dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAAtpHefa3X9y3hJI5yPP54T92/4+q4/jHyxL5pAuRfeOyTKII2Ug6q78VLw/qp
X3Ex+p0X+l37Kpx7aW/qIyDijWZx8rGvFYJsQTyUkk8xA59iQlCFoomfaL9+qvox
Hkt1WRzq3tNE2o7sNJJ3qViDL2/zGgBxbfzNchuenX8EhJ4rbZAymFPQg/9uPScd
RsIWYwlOqKCS1LadSYrWbpjAypQt1QIoDfE02jy71sfIId8SDbNdu58yPsKKSZ0j
rdj1/+xm/3OE6jh9RnE5MwrBqQf1ONXIf6mKPdEBItaWF4fyITQgZJiEJl8xGC0X
yxGfI7PgLKgWTU94Rzw9X9dG
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:35 2026 by rpki-client