
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: kZdiIzUlE5tjFLP+NLfPtH+UQsiVYxVfyMwwRaKwRLE=
Subject key identifier: 42:82:47:E2:10:D1:79:F1:17:31:11:0A:D9:03:37:69:C1:8D:C7:68
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 02C5
Signing time: Mon 05 Oct 2026 01:34:49 +0000
Manifest this update: Mon 05 Oct 2026 01:34:49 +0000
Manifest next update: Mon 12 Oct 2026 01:34:49 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 0DLHNRECfE8bw3Hjsl0J5YKU7iPWC3pzfsRobF2tyxA=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Oct 5 01:34:49 2026 GMT
Not After : Oct 12 01:34:49 2026 GMT
Subject: CN=6ac2feb9-895b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:5d:bc:10:03:8a:06:9f:fd:81:19:e5:22:
2d:06:d1:f6:97:24:7f:e7:53:a1:c9:c5:2d:1b:63:
5e:d5:a9:0e:5c:38:92:25:8b:c6:ef:3e:23:07:2c:
60:c4:14:0a:de:41:3e:3c:51:51:4d:ad:b7:ae:b5:
ed:1c:f5:b7:d8:21:1d:b5:54:10:6a:d1:2a:f7:fc:
5a:d9:f6:2c:2a:0b:44:15:f7:9f:1f:bb:1f:08:b5:
f7:58:7a:aa:8d:08:77:5b:7e:af:2b:29:a0:ff:5f:
45:49:d8:4b:b8:41:0c:f1:b0:03:d8:a0:e4:ef:2c:
3f:d0:b2:bf:df:3a:10:c8:c4:f2:74:2c:43:23:9a:
58:95:d4:f4:16:da:2d:13:3a:65:34:53:35:d2:26:
8c:a6:ba:e9:c8:79:e8:2b:f1:d6:7f:21:89:5f:58:
fa:ca:12:78:4a:9c:8c:47:3a:b9:60:50:e0:7d:91:
fc:b3:10:8d:c5:0f:da:e1:d0:54:d3:be:7b:d2:fd:
ca:e7:f5:83:d0:44:8a:0b:7f:fd:10:ec:af:c3:97:
79:af:39:a4:81:c5:89:f3:b1:cc:1c:43:e8:86:77:
8a:5d:c0:4d:e1:a9:22:b9:f0:a9:52:db:e6:bc:55:
c1:f8:a7:e7:31:c7:a9:89:5d:72:07:7e:d5:16:a8:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:47:E2:10:D1:79:F1:17:31:11:0A:D9:03:37:69:C1:8D:C7:68
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ae:f9:db:8b:d5:51:93:f0:62:a8:8a:c5:9a:5b:a7:1b:fa:
60:7e:c3:39:eb:8a:f9:33:04:36:21:9f:57:d6:81:61:25:ce:
dd:4f:99:23:84:5d:5b:ff:7e:f2:c1:cf:db:13:6d:ae:93:df:
64:eb:a5:d1:5d:ca:d5:47:26:e9:58:82:10:6e:41:c1:05:60:
c8:f2:3a:52:08:2d:9a:47:1d:8b:fe:05:46:62:3e:37:28:41:
ef:3f:63:20:ac:2d:25:2e:16:b9:98:d2:f0:ba:3e:35:79:4f:
04:94:46:19:0c:4a:52:86:bf:22:68:df:dc:4d:b6:f4:93:32:
b8:0b:8d:84:9b:cc:d1:f4:7a:fb:5b:a3:dc:72:70:34:59:a3:
06:ab:82:32:20:db:f0:b6:c8:c6:21:45:c6:c1:fb:7d:21:27:
c5:8a:a6:43:e2:1e:60:56:c2:c5:6f:d8:bc:fd:7f:9a:36:d2:
1a:23:e4:ab:b0:8c:8c:01:32:95:c4:5d:1d:8f:a5:1d:ba:d4:
51:b8:cc:5e:0f:d8:6b:8a:52:6c:09:66:ab:01:0a:2a:e7:18:
a3:f4:a4:30:28:59:5e:bb:32:f4:01:ec:bd:41:41:39:2a:fc:
3e:b8:e4:02:8f:ab:c1:5f:fb:07:b2:69:f2:4c:9b:b5:c5:0f:
1c:4f:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:54:58 2026 by rpki-client