
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json)
Hash identifier: 7fhQeE9hQ+9NNi/EipH/SiJwZJ4zD8AI8juTlkxkUko=
Subject key identifier: 9D:26:18:0E:62:C5:6C:31:CB:69:2B:B7:DE:63:FD:20:0A:10:A0:1F
Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
Manifest number: AD
Signing time: Sat 03 Oct 2026 07:48:03 +0000
Manifest this update: Sat 03 Oct 2026 07:48:03 +0000
Manifest next update: Sat 10 Oct 2026 07:48:03 +0000
Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: b+hluNy5mhItGe36mbIammONTAJdq8KyIq78HCvD5uM=)
2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=)
3: hi8Da_f1U_A7dPFYvZnKn1AJNaY.asa (hash: tFI3fphkrBha6He4WZbmhJjoS74HVWZeFSvJVQfj8sU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl
rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Validity
Not Before: Oct 3 07:48:03 2026 GMT
Not After : Oct 10 07:48:03 2026 GMT
Subject: CN=6ac0b333-1f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:08:2d:fa:7c:57:20:2b:20:82:4e:65:f2:
dc:3d:53:fb:9d:a2:12:44:51:ee:88:d0:a8:3e:61:
2c:34:b6:8e:5d:fa:a6:9c:ac:f0:9d:8f:a7:d0:53:
49:10:f6:fb:30:ea:c8:0e:16:1c:7d:03:1e:d9:c7:
9c:ed:32:01:b6:c5:7b:a3:c9:fe:f5:9b:46:a9:4a:
fb:e6:49:9a:04:ab:50:c2:29:33:82:09:ab:fb:20:
78:a4:39:c1:2a:e1:08:f5:54:3b:61:29:55:43:5e:
77:0b:32:15:ff:63:d5:e6:55:51:1d:90:e4:4c:6c:
5a:ac:4c:06:91:c6:b0:05:a7:55:fe:cf:e8:3c:9f:
0f:4a:95:ac:91:7e:90:fa:5b:1e:f6:e4:ca:97:3c:
c7:a0:56:d2:f5:6d:4c:47:1c:43:b5:76:46:a4:7d:
0e:ed:90:52:8e:04:ee:c5:b1:5b:58:03:bb:4c:fd:
a3:ce:47:b3:38:25:36:b3:eb:95:ca:f8:00:a3:89:
4b:c1:92:ab:80:21:57:36:e7:0f:c5:b4:fa:fa:ca:
9e:66:25:78:b0:46:d5:b6:3e:ea:99:e7:52:89:ed:
2d:8c:3e:ae:a4:53:4f:6b:2c:c4:32:7d:af:65:7a:
5e:1e:95:1b:08:88:78:c1:aa:67:78:96:f8:6f:ae:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:18:0E:62:C5:6C:31:CB:69:2B:B7:DE:63:FD:20:0A:10:A0:1F
X509v3 Authority Key Identifier:
keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:99:2f:2a:e9:02:76:1f:ad:44:c2:f0:a7:d0:f3:b7:ee:ce:
8a:cb:06:c6:f7:ab:8d:de:10:7f:e0:ee:c3:12:cd:a1:c5:4d:
51:4a:11:b1:cb:be:95:d0:87:88:c5:cb:bd:23:72:13:c7:d9:
2b:dc:99:81:d3:11:a7:bb:3f:8d:0a:ba:5e:3c:ea:60:e4:5b:
ee:a8:45:5a:00:c5:cc:bd:fd:20:5d:3d:72:f0:08:4d:75:50:
73:d0:48:3d:70:83:06:ae:e0:b6:40:3d:12:73:4e:a6:a9:26:
fb:13:07:75:76:47:7f:3a:54:e2:0c:cc:bf:d2:69:6a:88:93:
16:5d:fb:30:dc:de:d4:5f:6d:81:63:d2:69:8f:16:3b:5d:af:
11:f5:6a:51:54:f2:87:a5:b2:8a:62:21:f7:95:13:7c:7b:a8:
6c:8a:37:b2:43:07:74:ca:20:01:5b:f6:db:82:26:47:f4:61:
59:71:26:39:d7:95:d1:14:e6:80:9a:6c:b2:ae:b0:06:9b:39:
cc:ca:c4:e1:6d:bd:cb:66:7f:52:ba:5a:a6:5d:48:04:44:5c:
e8:81:b3:ec:fd:36:54:c6:c9:7a:0d:c8:36:83:78:ef:5c:de:
29:95:d4:c4:44:38:04:71:35:0d:7e:d5:df:d5:53:49:f1:b6:
eb:43:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:31:47 2026 by rpki-client