
$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json)
Hash identifier: iD4xDfr4nU83A3mkJRF+EOaK2U3+7vd51zB3wzy4o4w=
Subject key identifier: AB:A0:88:F8:61:F0:4C:2D:02:88:FC:94:84:E1:AC:19:39:50:FB:4B
Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Certificate serial: 2611
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
Manifest number: 2600
Signing time: Sat 04 Apr 2026 15:39:45 +0000
Manifest this update: Sat 04 Apr 2026 15:39:45 +0000
Manifest next update: Sat 11 Apr 2026 15:39:45 +0000
Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: lOBz82lgOSfy05o7CaxLSTZPmWoFf1Aqxv6cYPvcboE=)
2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: KRl8ea3V85bmsmtzGvJljwpOXv+hiqOfQdmXTFhqfM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9745 (0x2611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Validity
Not Before: Apr 4 15:39:45 2026 GMT
Not After : Apr 11 15:39:45 2026 GMT
Subject: CN=69d130c1-9373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:06:71:c1:f5:70:96:5a:41:0e:46:72:cd:
2c:7c:75:56:6c:0c:6c:50:34:56:cb:be:9d:2d:c0:
84:fb:bb:51:86:1b:7c:97:2e:56:d0:6d:36:4a:c4:
3b:35:da:3e:64:8b:13:2c:53:5a:b7:36:18:26:67:
6a:26:be:fd:dd:a9:95:78:31:3e:0b:b1:84:23:08:
70:20:36:b3:fb:b5:6a:31:78:00:fa:cd:16:1e:62:
fe:a7:19:2b:3f:c9:b7:85:ee:74:a8:4e:26:63:9b:
1e:4f:ac:03:c8:7d:7c:e7:89:c6:01:09:d3:4d:76:
e8:a3:b0:98:81:d9:82:08:f4:5b:ea:fa:8d:89:9e:
df:ca:33:7b:02:48:14:58:d0:40:7b:94:16:00:35:
80:be:dd:41:66:b1:5f:c5:59:2c:15:14:77:95:9b:
de:20:9a:58:90:cf:86:d4:f2:6a:04:90:96:90:41:
de:e4:c3:c7:3c:df:e3:67:74:2b:43:0b:39:f5:fe:
86:69:47:cf:58:bb:be:16:5c:25:6a:7a:be:cd:ca:
3b:df:a6:72:99:fa:1b:58:10:1f:7f:30:d1:79:4f:
4f:6c:e2:bc:ca:9a:b1:22:7f:dd:b0:91:37:42:9b:
44:5b:32:9c:b0:00:c0:53:bb:28:1f:6f:80:2d:1a:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A0:88:F8:61:F0:4C:2D:02:88:FC:94:84:E1:AC:19:39:50:FB:4B
X509v3 Authority Key Identifier:
keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:43:3c:04:a6:d8:a9:e9:94:85:6d:e6:d5:9a:1f:2b:73:65:
b2:97:0e:91:8b:5a:ba:2d:52:1b:8c:f6:5c:0f:aa:71:14:3f:
ac:39:08:3b:50:d7:69:04:a9:b4:80:8a:0e:f7:d7:6d:43:b2:
c7:f2:9d:12:8d:84:e5:a1:08:e6:fe:84:36:09:c1:cf:03:2d:
02:ff:63:87:f5:d5:3a:c1:c5:ff:1f:b8:de:14:b1:40:ae:9e:
20:4e:c2:43:f9:fb:df:3e:1d:b9:ba:2c:66:ac:d4:67:75:21:
09:57:2c:5f:32:79:89:6e:84:75:05:90:41:a5:5d:5b:08:1b:
76:f6:36:70:d5:ec:c8:11:65:81:d2:99:9a:e3:b6:fb:28:cc:
c0:fc:7e:c6:f8:e5:2a:d5:be:ad:f2:c4:8b:bb:da:84:db:84:
bb:17:65:21:f3:ed:07:28:b9:a0:ea:65:19:7b:f7:4e:55:2d:
7e:04:b7:3a:61:9f:9e:d8:61:e1:a0:b9:0e:95:86:0c:50:7d:
35:f7:b4:ad:b7:9a:46:f1:39:df:db:47:91:ad:21:57:50:3e:
dd:b6:e2:01:75:27:a2:d9:53:cc:cd:57:24:e0:20:56:1b:c1:
4b:5a:c4:75:74:fa:51:eb:a5:76:8c:75:51:98:0f:71:05:f8:
ba:aa:7e:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4
MTVGRTIzRjEwHhcNMjYwNDA0MTUzOTQ1WhcNMjYwNDExMTUzOTQ1WjAYMRYwFAYD
VQQDEw02OWQxMzBjMS05MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcUGccH1cJZaQQ5Gcs0sfHVWbAxsUDRWy76dLcCE+7tRhht8ly5W0G02SsQ7
Ndo+ZIsTLFNatzYYJmdqJr793amVeDE+C7GEIwhwIDaz+7VqMXgA+s0WHmL+pxkr
P8m3he50qE4mY5seT6wDyH1854nGAQnTTXboo7CYgdmCCPRb6vqNiZ7fyjN7AkgU
WNBAe5QWADWAvt1BZrFfxVksFRR3lZveIJpYkM+G1PJqBJCWkEHe5MPHPN/jZ3Qr
Qws59f6GaUfPWLu+Flwlanq+zco736ZymfobWBAffzDReU9PbOK8ypqxIn/dsJE3
QptEWzKcsADAU7soH2+ALRodIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKugiPhh
8EwtAoj8lIThrBk5UPtLMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB
MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ
N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABEM8BKbYqemUhW3m1ZofK3NlspcOkYtaui1SG4z2XA+qcRQ/rDkIO1DXaQSp
tICKDvfXbUOyx/KdEo2E5aEI5v6ENgnBzwMtAv9jh/XVOsHF/x+43hSxQK6eIE7C
Q/n73z4dubosZqzUZ3UhCVcsXzJ5iW6EdQWQQaVdWwgbdvY2cNXsyBFlgdKZmuO2
+yjMwPx+xvjlKtW+rfLEi7vahNuEuxdlIfPtByi5oOplGXv3TlUtfgS3OmGfnthh
4aC5DpWGDFB9Nfe0rbeaRvE539tHka0hV1A+3bbiAXUnotlTzM1XJOAgVhvBS1rE
dXT6Ueuldox1UZgPcQX4uqp+cw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:21 2026 by rpki-client