
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json)
Hash identifier: iwAFuXJJQKFdA5fOZXpPJ0E4RXmZX0D87DsfbdUjubo=
Subject key identifier: B8:C6:9D:8E:B1:FD:53:3F:AE:4F:E3:19:2F:6D:7C:30:EC:61:BA:6F
Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
Manifest number: 78
Signing time: Tue 23 Jun 2026 07:58:42 +0000
Manifest this update: Tue 23 Jun 2026 07:58:41 +0000
Manifest next update: Tue 30 Jun 2026 07:58:41 +0000
Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: ONSEUahSf4Rf0szHtwlZklN5+oA+uGHEMs3mT29QyIo=)
2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl
rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Validity
Not Before: Jun 23 07:58:41 2026 GMT
Not After : Jun 30 07:58:41 2026 GMT
Subject: CN=6a3a3cb2-fe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:c9:8a:08:8e:6c:a9:22:93:82:05:2c:bd:
4b:37:53:f7:54:10:86:df:fe:a1:70:6d:76:0d:17:
ac:1c:29:08:d0:84:6b:dc:6a:5b:64:a4:12:42:f7:
eb:34:24:b4:e9:cc:69:5e:df:b2:cb:4e:06:2f:0b:
bf:f8:f0:ab:d6:d9:65:dd:9a:35:30:76:13:61:5f:
02:e8:ab:a9:55:06:6d:c6:f5:8b:8f:10:bf:e5:86:
2b:08:81:3f:95:43:08:22:b0:70:8a:e6:97:2a:24:
48:64:b1:0a:fa:4d:d1:51:64:7e:fb:12:d5:db:29:
ff:33:ce:12:83:a9:58:4d:0d:b1:28:ff:9c:94:0a:
a4:ad:d9:6d:ac:3e:4a:a4:5e:45:16:9f:18:96:bc:
cd:31:4b:d0:17:bb:dc:ac:54:77:2f:30:c8:c6:8f:
8e:82:ef:35:9d:07:d3:a8:37:94:e7:10:ad:4c:24:
27:02:40:bb:ad:b0:bf:93:2a:39:48:34:38:39:8f:
0a:58:df:d9:47:6b:7a:32:04:cd:29:09:ea:60:e3:
2f:bc:2b:ec:02:8a:c3:71:a8:8a:c4:b6:aa:93:80:
44:0b:3d:11:fc:95:d5:86:93:2b:75:1c:95:cd:71:
09:7b:33:0e:59:18:99:fb:81:b8:a9:08:6f:0d:04:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:9D:8E:B1:FD:53:3F:AE:4F:E3:19:2F:6D:7C:30:EC:61:BA:6F
X509v3 Authority Key Identifier:
keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:75:fb:6c:a4:d4:a3:e0:41:b9:2c:de:5e:e2:62:d3:20:37:
4f:8f:db:d0:db:af:6a:1c:32:4c:4b:9d:cc:34:2f:79:69:01:
32:95:51:f3:c2:6f:8e:ac:fe:c1:a2:75:da:41:dc:2a:a2:bd:
0a:f8:ee:f2:79:33:ae:fb:a0:93:66:28:cd:56:54:85:d3:74:
ec:23:eb:25:67:57:3d:29:ab:74:e8:6e:a4:de:01:cd:56:a6:
43:15:22:9c:0e:03:d1:a1:26:32:f0:5a:80:fd:34:ab:93:99:
dc:b6:52:86:3a:13:74:00:45:7a:36:87:aa:ac:96:b9:ad:52:
08:9a:0b:46:cc:79:2a:87:fe:5b:e9:33:c0:e2:2a:10:71:2c:
ee:73:e1:12:94:45:c3:26:d9:cb:55:fb:28:65:46:70:77:cb:
02:43:2b:27:02:8b:b2:ee:ee:ab:76:3c:a2:ab:6c:10:52:93:
f2:20:6b:2a:69:1d:82:c5:37:cc:1c:99:51:a5:2e:de:7e:36:
33:a3:3f:cd:28:69:a7:be:9d:8c:8b:b4:ae:ab:c6:51:44:d2:
30:f4:38:2d:f6:8c:7a:27:45:84:e0:92:59:fc:53:a3:ad:80:
8e:8b:72:f9:97:05:a0:35:1d:95:f6:3e:11:cc:84:7b:64:de:
00:5d:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:22 2026 by rpki-client