
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier: 9XZYxWu01WHjOPBz6wo0eazdnB5W41CcbQRzQgpNTlw=
Subject key identifier: 48:25:DF:DE:C5:E3:F8:C0:D3:D8:03:66:B7:43:D8:29:6C:B6:CC:C5
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number: AE
Signing time: Fri 17 Apr 2026 06:52:18 +0000
Manifest this update: Fri 17 Apr 2026 06:52:18 +0000
Manifest next update: Fri 24 Apr 2026 06:52:18 +0000
Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: NwcB2Mb9em5wTlQMMpi1DTj+x+KDmKM4neaf1IdGCGs=)
2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: Apr 17 06:52:18 2026 GMT
Not After : Apr 24 06:52:18 2026 GMT
Subject: CN=69e1d8a2-5753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:4b:86:08:ef:9d:4e:a8:b9:e4:85:63:61:
53:bd:6f:15:09:5a:2c:c6:9e:15:8c:e0:d0:99:52:
55:99:55:73:06:30:87:dd:58:24:42:4d:00:81:a4:
22:f7:f9:22:71:d4:45:e4:28:e9:bf:e6:63:8c:f7:
20:a8:1a:1a:e8:60:a7:87:a2:5c:b8:c2:16:fe:da:
e3:d9:ef:10:29:19:5b:85:64:80:a4:54:d2:9b:fc:
d0:56:49:8a:49:fc:86:35:e3:ac:54:b9:b6:7b:b5:
00:b1:75:fc:99:ca:64:49:cb:35:18:d8:3e:f5:9d:
5e:28:ef:79:fd:01:be:73:96:73:69:04:97:69:46:
8f:71:d4:73:25:d4:be:8b:26:38:23:53:0b:3a:9a:
c7:d9:d3:05:12:c9:b4:c0:1b:09:1e:c7:91:ea:dc:
c2:18:a7:87:db:6b:df:7b:ee:f0:7e:88:9e:0a:c1:
92:31:44:d6:cb:53:a2:29:c2:7b:13:d3:e5:5c:17:
7c:45:7d:f0:ec:48:e0:b3:bb:40:f3:53:9e:81:45:
a0:3c:74:0c:d9:8a:5a:9d:c1:1d:ee:f3:5f:f4:24:
01:d2:35:a6:fd:d2:a4:fa:00:ee:33:41:10:bf:48:
27:26:95:f0:4f:27:b2:35:d9:79:d7:0a:b5:c4:44:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:DF:DE:C5:E3:F8:C0:D3:D8:03:66:B7:43:D8:29:6C:B6:CC:C5
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:03:f4:8e:4c:a4:6d:bd:d3:0e:1a:0a:07:a5:61:a2:94:17:
db:6f:43:03:92:1e:ed:ae:b0:56:29:c3:b6:35:f7:ea:c6:87:
3d:3b:eb:44:c3:0f:60:a9:8c:a8:0a:00:c7:89:67:bc:b9:16:
53:20:02:5a:ed:05:cc:1f:88:29:42:e2:c9:03:d2:23:63:07:
1a:91:07:66:b1:9d:a4:aa:da:c2:63:b7:32:18:02:43:08:56:
6b:b1:b1:8c:48:85:41:ff:9c:9f:c8:ee:77:40:f0:0d:c9:8a:
e7:5d:5e:4c:ca:db:46:d1:18:3f:82:4f:46:ac:ce:a4:14:1c:
8f:1e:f9:f1:5d:8b:17:49:a2:6c:cf:93:76:c2:f8:26:8b:b4:
2e:87:ba:b5:ca:82:ce:76:96:7a:04:10:9a:9e:5c:f8:f5:8f:
93:1a:20:f0:1d:ac:fb:cf:1d:6d:3f:f4:e8:1a:eb:4a:3b:e7:
d5:b9:2b:f4:b1:79:71:33:fe:ad:26:54:79:c6:8e:01:cf:e8:
ee:ed:c3:b9:59:70:ab:61:e5:f8:45:79:3d:95:7c:e7:90:4a:
8e:20:5d:ec:ae:f8:e0:93:f8:f2:ad:23:33:2f:52:63:8f:e1:
7c:d8:87:aa:b7:ab:ab:2a:27:00:5d:30:54:85:c8:25:e3:57:
7a:bf:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:22 2026 by rpki-client