
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json)
Hash identifier: 1BwCMfU1Dn1uzUwhKaWI/JUn7/PGHwlCiHiseJm8zNY=
Subject key identifier: 99:9B:70:CF:E9:78:5D:FE:AE:53:AF:0B:2D:8E:F3:03:89:C4:C9:92
Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
Manifest number: 0183
Signing time: Thu 15 Oct 2026 05:33:02 +0000
Manifest this update: Thu 15 Oct 2026 05:33:01 +0000
Manifest next update: Thu 22 Oct 2026 05:33:01 +0000
Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: a1tKiUCQpMTn5SeLSAPpKTOKUMdh9VqGTSV4yfpHYjo=)
2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: 7qaQMkbT99hP7t15B28+NyKyrSguK/hR2zN6MIYTmsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 05:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Validity
Not Before: Oct 15 05:33:01 2026 GMT
Not After : Oct 22 05:33:01 2026 GMT
Subject: CN=6ad0658e-7b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:f0:b7:95:38:ea:12:23:b6:95:ff:0d:0a:
08:50:1f:30:58:4a:c2:3a:6b:2a:f2:4c:a5:4c:ce:
48:2d:01:6f:60:8f:2e:ba:fd:54:5a:3f:01:22:f6:
c7:24:50:a6:5a:6e:32:ab:20:08:eb:40:f2:75:02:
64:fa:80:c9:13:fb:09:7c:99:b9:bf:83:ea:88:3e:
a1:23:7d:6c:f8:12:f3:20:d8:73:a8:e1:cf:ff:45:
5b:a7:94:ee:a3:a4:1e:38:52:a4:b6:78:d3:62:8d:
76:c4:71:83:23:5d:b4:6b:e4:a9:fc:6e:27:c6:87:
bc:53:d9:9a:f9:e9:61:37:9e:c1:2e:6f:0d:94:be:
7a:04:10:ee:9d:86:85:f2:06:db:69:0f:3a:f5:52:
55:03:94:69:46:61:10:05:e5:49:17:c5:b1:bb:99:
80:95:c9:97:7a:0d:da:73:15:2b:91:b1:22:ae:e1:
7a:11:1f:77:da:cf:4f:8d:7e:bf:bd:83:92:03:83:
78:68:b7:32:dc:1b:a7:05:5f:ae:50:67:84:b7:82:
8a:66:ab:80:9f:ee:e3:ee:4e:46:8a:09:85:ed:3d:
32:a1:20:b9:3b:f4:c3:55:42:66:50:f8:0f:2c:64:
d5:b2:a0:b0:a0:9d:72:71:8a:5b:1b:d3:79:7e:8a:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:70:CF:E9:78:5D:FE:AE:53:AF:0B:2D:8E:F3:03:89:C4:C9:92
X509v3 Authority Key Identifier:
keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:76:09:b1:6f:74:39:82:89:49:2f:7e:4d:31:36:61:77:a8:
f5:c8:0f:b2:c1:ad:40:10:38:4a:74:7d:ed:77:27:55:24:2d:
c3:aa:4c:37:76:7c:fa:18:fc:bd:a1:95:6f:af:5e:44:3c:21:
03:13:be:5b:80:45:8b:2e:48:1b:88:3a:39:b1:8d:09:84:c4:
94:b5:9f:e1:63:08:65:58:7d:e2:0e:f7:6e:70:e9:c1:1f:47:
98:06:88:00:fe:db:73:f4:55:64:91:64:7e:16:61:90:d6:af:
a8:af:46:c3:c4:ec:a5:63:13:b4:aa:e8:8f:57:27:18:df:b7:
cf:d5:7f:38:c6:2b:20:94:92:f7:a9:fe:e9:a0:7f:41:e2:4c:
d0:e6:24:d7:b6:af:37:98:86:b7:a6:1a:02:c9:b4:41:3f:93:
82:27:cb:90:4d:dd:87:dc:8b:54:89:9b:87:1b:d8:fe:ec:a9:
c0:d4:f9:93:de:cc:23:d2:d0:0f:f4:c2:8e:ed:12:9d:e0:dd:
0c:11:d1:83:6e:b4:57:d6:45:bf:b9:5b:70:03:82:6a:60:47:
b8:ab:b2:6e:8c:b3:3b:0d:40:15:7f:5f:a1:fb:0b:9b:cf:6f:
a1:d2:1c:49:c6:1e:84:71:e2:d6:7f:21:73:d1:a1:80:08:31:
bf:9c:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:04:58 2026 by rpki-client