
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.mft
File: lx4030HvGT5CWD7bdCuoUK9Vzj0.mft (raw, json)
Hash identifier: v/s7vHGxbcQFGzNsmgz/rqtGmXu4yNcuo5vimRbKXjs=
Subject key identifier: 46:74:C5:68:C7:9E:10:10:F8:D8:E3:DD:6F:9A:24:11:71:B8:FC:C0
Authority key identifier: 97:1E:34:DF:41:EF:19:3E:42:58:3E:DB:74:2B:A8:50:AF:55:CE:3D
Certificate issuer: /CN=A914C9DC/serialNumber=971E34DF41EF193E42583EDB742BA850AF55CE3D
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx4030HvGT5CWD7bdCuoUK9Vzj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.mft
Manifest number: 29
Signing time: Wed 07 Oct 2026 09:23:41 +0000
Manifest this update: Wed 07 Oct 2026 09:23:40 +0000
Manifest next update: Wed 14 Oct 2026 09:23:40 +0000
Files and hashes: 1: lx4030HvGT5CWD7bdCuoUK9Vzj0.crl (hash: iMQ9oc0tSWB5PAF9yMdVSEiIIfjtOKDe5hIOOzLXvk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.crl
rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx4030HvGT5CWD7bdCuoUK9Vzj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C9DC, serialNumber=971E34DF41EF193E42583EDB742BA850AF55CE3D
Validity
Not Before: Oct 7 09:23:40 2026 GMT
Not After : Oct 14 09:23:40 2026 GMT
Subject: CN=6ac60f9d-f80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:13:14:01:52:88:6e:c6:ba:bd:54:60:cc:
29:1d:d7:f8:b7:f6:3f:01:f1:80:6a:2a:0d:4c:68:
d2:5b:75:3a:43:15:5c:2a:d8:03:2c:6c:ef:d8:ef:
2b:52:a3:72:7b:b1:47:44:6f:34:bb:fb:f9:4a:1a:
ea:02:0a:d1:31:a8:67:24:46:03:dc:b8:86:32:6d:
2c:a4:86:71:d2:86:ba:64:57:ff:54:d2:c8:08:da:
52:3e:09:c9:ff:b4:f9:18:1b:86:f3:6b:8d:a8:61:
d1:2a:49:3b:09:d7:18:da:46:dd:f4:b6:c2:46:13:
b4:43:18:63:5c:87:8a:4e:98:21:1a:87:ec:a6:61:
de:f1:e5:84:9e:dd:8c:13:8c:af:50:42:e5:75:98:
3e:a7:9a:71:b9:6e:a3:39:57:30:5b:db:66:92:e6:
e5:a5:58:28:be:b6:20:e5:fb:27:75:33:85:54:3e:
ea:1c:35:20:00:f2:b1:0a:3d:fb:a0:b8:62:c4:89:
a2:1c:2a:c9:49:10:47:05:fe:c8:c1:6f:a4:20:cd:
2e:d4:19:9a:82:dc:d5:f3:4b:c4:59:62:45:cd:1c:
23:93:e3:fa:fe:3e:b5:ac:f4:9b:a6:ca:8b:67:19:
b1:97:97:04:8f:41:fd:bf:e2:8c:2c:be:56:c4:33:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:C5:68:C7:9E:10:10:F8:D8:E3:DD:6F:9A:24:11:71:B8:FC:C0
X509v3 Authority Key Identifier:
keyid:97:1E:34:DF:41:EF:19:3E:42:58:3E:DB:74:2B:A8:50:AF:55:CE:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx4030HvGT5CWD7bdCuoUK9Vzj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/C7285AAA86AF11F19B27C42B74A30FBC/lx4030HvGT5CWD7bdCuoUK9Vzj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:41:22:26:ce:56:d1:97:85:b4:0e:59:a1:ba:91:2b:ca:
ea:e3:02:90:0b:fb:4e:43:2c:8c:ab:4d:77:72:33:fb:eb:31:
ec:ba:9d:f1:bb:fc:75:1d:64:58:35:5f:22:b2:eb:b3:c5:26:
38:e4:58:92:64:4f:36:29:7e:ee:ab:9a:eb:ab:dc:e5:b0:f5:
f0:19:cd:71:bc:66:dc:0c:78:bb:80:1c:80:9e:18:fc:3c:a6:
20:3b:20:35:04:ac:3a:23:9f:18:60:b6:56:cd:70:00:dd:69:
b7:a4:82:21:3b:3c:32:02:a4:97:d6:30:b5:1f:a8:35:d6:89:
a7:a4:6c:ad:2e:89:f8:5e:f0:49:48:45:3f:94:c0:56:8d:a2:
54:dc:4d:28:1f:65:58:3c:5e:95:91:ae:1c:89:b5:ae:3e:b0:
2e:3c:6d:a0:5f:ef:88:5a:63:10:bf:d3:63:9c:67:90:b9:96:
ac:52:89:e8:0b:df:4f:0d:66:93:f0:96:2c:04:f1:a1:f1:f7:
43:33:52:14:09:d1:36:70:3b:73:f5:2a:1b:fb:99:fc:04:86:
30:e8:7d:c1:ad:4b:c4:af:e8:10:f5:1c:4a:c8:73:44:ad:3c:
9b:86:5e:ec:f1:53:f3:79:c0:20:2c:67:04:29:74:51:ee:8b:
0e:2f:a6:3a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QzlEQzExMC8GA1UEBRMoOTcxRTM0REY0MUVGMTkzRTQyNTgzRURCNzQyQkE4NTBB
RjU1Q0UzRDAeFw0yNjEwMDcwOTIzNDBaFw0yNjEwMTQwOTIzNDBaMBgxFjAUBgNV
BAMTDTZhYzYwZjlkLWY4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCe0BMUAVKIbsa6vVRgzCkd1/i39j8B8YBqKg1MaNJbdTpDFVwq2AMsbO/Y7ytS
o3J7sUdEbzS7+/lKGuoCCtExqGckRgPcuIYybSykhnHShrpkV/9U0sgI2lI+Ccn/
tPkYG4bza42oYdEqSTsJ1xjaRt30tsJGE7RDGGNch4pOmCEah+ymYd7x5YSe3YwT
jK9QQuV1mD6nmnG5bqM5VzBb22aS5uWlWCi+tiDl+yd1M4VUPuocNSAA8rEKPfug
uGLEiaIcKslJEEcF/sjBb6QgzS7UGZqC3NXzS8RZYkXNHCOT4/r+PrWs9Jumyotn
GbGXlwSPQf2/4owsvlbEMzArAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURnTFaMee
EBD42OPdb5okEXG4/MAwHwYDVR0jBBgwFoAUlx4030HvGT5CWD7bdCuoUK9Vzj0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOURDL0M3Mjg1QUFBODZB
RjExRjE5QjI3QzQyQjc0QTMwRkJDL2x4NDAzMEh2R1Q1Q1dEN2JkQ3VvVUs5Vnpq
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbHg0MDMwSHZHVDVDV0Q3YmRDdW9VSzlWemowLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD
OURDL0M3Mjg1QUFBODZBRjExRjE5QjI3QzQyQjc0QTMwRkJDL2x4NDAzMEh2R1Q1
Q1dEN2JkQ3VvVUs5VnpqMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCNUEiJs5W0ZeFtA5ZobqRK8rq4wKQC/tOQyyMq013cjP76zHsup3xu/x1HWRY
NV8isuuzxSY45FiSZE82KX7uq5rrq9zlsPXwGc1xvGbcDHi7gByAnhj8PKYgOyA1
BKw6I58YYLZWzXAA3Wm3pIIhOzwyAqSX1jC1H6g11omnpGytLon4XvBJSEU/lMBW
jaJU3E0oH2VYPF6Vka4cibWuPrAuPG2gX++IWmMQv9NjnGeQuZasUonoC99PDWaT
8JYsBPGh8fdDM1IUCdE2cDtz9Sob+5n8BIYw6H3BrUvEr+gQ9RxKyHNErTybhl7s
8VPzecAgLGcEKXRR7osOL6Y6
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:55:43 2026 by rpki-client