
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier: rkv274LusQi3Y2ruXX/UsDdyyzN5OVeY6jwXtm0S+SQ=
Subject key identifier: 61:BB:89:98:6F:FE:85:08:9E:9C:A0:9D:2E:8B:B1:57:FC:1B:21:31
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number: DD
Signing time: Fri 17 Jul 2026 07:48:40 +0000
Manifest this update: Fri 17 Jul 2026 07:48:40 +0000
Manifest next update: Fri 24 Jul 2026 07:48:40 +0000
Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: ld/iyo6VM8oYsAei6TSvDxRCJ+gPVc0UaUs4cAG6nw8=)
2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: rckBxD2KbOBtygxC/B22fEZmZKSRuNXV143WuugaVH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: Jul 17 07:48:40 2026 GMT
Not After : Jul 24 07:48:40 2026 GMT
Subject: CN=6a59de58-319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:7a:7f:73:42:4f:b5:a5:65:09:af:85:6e:
7c:8d:00:ed:29:fe:e3:77:87:37:c7:e0:55:c7:3b:
60:90:59:42:09:02:2f:99:5e:ab:bd:9d:8e:9f:ee:
d4:52:fa:c4:ac:33:02:5d:cb:dd:42:51:96:44:4a:
f7:0e:75:32:9c:f3:92:80:24:bf:f0:93:1b:39:a7:
af:f9:2b:05:2c:b4:f4:75:8a:66:df:1f:db:e5:a2:
a4:04:7f:45:69:22:e5:8a:41:87:ef:4d:5f:66:67:
69:a2:78:02:0e:ca:52:86:a8:57:dd:73:78:b9:1b:
88:14:c5:6a:a6:1a:2f:bf:e3:b6:55:1c:a1:b6:da:
ae:d5:99:fe:30:55:73:74:67:cf:ec:d9:2f:4a:7d:
78:da:87:07:79:d8:ff:ff:aa:35:0d:4f:09:9f:73:
13:8c:d3:61:ce:7d:b9:4b:dc:3c:c6:46:60:75:8a:
bd:80:71:5b:6b:7a:b1:e6:03:bb:49:4e:50:84:6f:
ee:60:c0:36:ee:d1:9b:36:58:3e:84:df:3d:25:9d:
da:c9:ff:96:e0:bf:38:f1:09:f0:42:a1:d4:c1:7e:
ea:62:69:ce:d1:39:34:af:43:8d:2e:82:ed:8d:b7:
fe:a2:0d:81:6e:a7:2f:1f:bf:82:11:6a:77:1a:8c:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:89:98:6F:FE:85:08:9E:9C:A0:9D:2E:8B:B1:57:FC:1B:21:31
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ae:3f:15:f9:03:57:3f:5b:e0:4f:c1:25:1c:4e:16:f0:1a:
bb:13:a6:01:44:bd:da:35:47:72:16:26:4d:cf:f1:1f:ed:04:
1e:55:c3:43:d6:93:ef:67:3c:0b:a0:d9:27:d6:4f:a1:50:4e:
cd:8f:15:ae:47:29:73:fa:c7:a3:a6:1a:78:01:3a:af:a6:05:
7f:82:28:f8:69:42:f1:15:eb:ba:29:2a:a3:e7:9f:0a:2b:18:
19:08:8c:b2:e6:ff:0a:d4:08:12:2a:7d:fe:cd:94:91:fc:13:
d5:85:e9:b2:a0:71:ff:1a:36:6a:f0:e4:2b:a2:59:c8:0f:02:
78:20:8b:a9:b5:e7:1a:d8:d8:f7:5e:93:57:06:d5:56:24:d7:
64:f8:35:fd:e7:ae:6c:77:56:4a:f8:21:af:3f:8a:fb:46:c7:
ae:b2:02:64:c7:19:f1:2f:3a:2d:e0:96:37:b5:a5:46:83:2f:
18:b2:65:21:f6:85:fb:cf:e3:7f:20:9a:d5:84:33:1e:b6:27:
8e:52:3d:7a:c6:ea:1e:fb:b5:21:2a:59:8a:fc:a9:2b:0d:e0:
13:de:c0:17:f6:bc:ee:eb:1c:73:a1:13:b5:14:72:c4:a0:c5:
05:9e:c3:58:15:88:66:ae:22:ab:e2:f9:33:85:11:c1:11:18:
6d:f1:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:10 2026 by rpki-client