
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: UgN4j+C3raXbdeCOZsJ/zc/8S5t9D5V6FO9+BYU+V/0=
Subject key identifier: 07:B7:25:93:03:8E:D9:D1:AD:F8:AA:51:08:6B:13:6E:8B:2D:67:F5
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 02AD
Signing time: Wed 19 Aug 2026 02:02:13 +0000
Manifest this update: Wed 19 Aug 2026 02:02:13 +0000
Manifest next update: Wed 26 Aug 2026 02:02:13 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 71Ym3U/5Bnc31siMHYmMSnyoGYiELycGpDxYs8dBKtA=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Aug 19 02:02:13 2026 GMT
Not After : Aug 26 02:02:13 2026 GMT
Subject: CN=6a850ea5-1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:31:78:3f:ba:6d:41:50:38:1c:43:53:eb:
3d:bb:e9:83:88:a4:47:76:4d:1c:81:4a:b3:1f:dd:
55:a9:9f:03:81:43:17:63:e1:c2:6f:ca:5e:34:3c:
27:7a:db:ab:8a:0b:ff:bd:36:cd:e4:13:e7:94:c9:
65:f5:cc:65:67:b7:21:8a:7d:2c:ab:51:61:6b:be:
e0:5a:98:3a:12:30:63:1c:1e:81:d8:c7:f5:45:37:
47:66:2c:89:e8:80:fc:5a:d6:4b:b9:1f:bc:89:24:
86:4b:64:1c:45:fd:32:27:82:fc:85:8f:36:1e:60:
e0:44:19:b8:b9:9a:e5:9c:cf:38:b9:2a:27:5f:c4:
ba:2d:e7:de:e5:41:25:30:2d:f1:ec:87:16:e3:63:
c0:42:7c:a9:61:de:05:a9:5f:c4:ab:a9:58:2b:07:
16:3f:4b:14:e0:b6:5b:20:06:f6:f6:45:bc:b6:ef:
7b:36:2a:53:76:ec:ef:62:71:e8:25:70:67:4a:dd:
59:23:37:2c:f8:b9:a1:19:af:86:74:75:22:ad:c0:
65:e4:79:44:d4:68:2d:f7:43:40:22:b7:b7:2a:2f:
5a:72:65:f2:4c:6a:a3:3c:fe:5b:3b:79:34:ef:5a:
1d:8b:a4:a7:f8:2a:1b:ce:f8:74:ee:a5:27:10:fd:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:25:93:03:8E:D9:D1:AD:F8:AA:51:08:6B:13:6E:8B:2D:67:F5
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:64:c5:16:7c:40:cd:b3:cf:4d:6b:65:0f:e6:da:c9:d8:ac:
59:81:c0:ab:0a:98:d5:95:47:f3:38:bf:b8:ed:84:f0:e8:87:
a2:ec:2b:89:d3:b9:96:b4:28:44:30:78:5b:f0:fd:d8:ae:bf:
23:fa:39:43:28:3b:be:de:f0:92:de:1e:c1:f9:23:38:c2:22:
fa:4c:49:d1:2c:f3:22:a9:1c:ef:2f:bd:7e:8e:f1:fb:47:41:
17:b8:68:51:7d:9d:44:49:a4:6f:fe:64:ed:90:f5:3a:b4:6a:
0a:c9:0d:85:28:33:ac:80:f4:3b:e9:94:87:a6:a0:a1:d6:82:
67:fa:63:e8:8e:9e:34:a8:ef:38:56:bc:81:dc:fe:61:0a:27:
11:79:34:7d:c3:d1:a6:c0:a1:c6:cd:b9:09:61:3b:f6:da:1c:
b8:01:be:59:3f:65:6b:e6:26:b9:5e:3f:72:5b:10:b5:a0:49:
ac:7f:af:dd:a3:a4:46:6a:b2:c6:e3:3f:3d:61:25:cd:ef:94:
10:fc:36:b6:f4:b6:5b:53:07:a5:8d:1d:4f:dd:30:90:80:a6:
ab:ac:ff:cd:50:0e:11:1c:04:80:10:fc:15:cc:a9:a5:33:75:
58:9e:6c:8e:eb:94:ed:cd:ac:75:b4:e3:b4:97:1f:a6:e4:2b:
38:0e:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:20 2026 by rpki-client