
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: XucyOFhvpcNdIZaxJLoPsqlbEJ9crC2DkriSmcjK2+0=
Subject key identifier: 16:06:21:61:82:6A:43:9F:67:78:17:53:3D:00:D9:CB:C7:E0:60:AA
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 0296
Signing time: Sun 05 Jul 2026 02:13:33 +0000
Manifest this update: Sun 05 Jul 2026 02:13:32 +0000
Manifest next update: Sun 12 Jul 2026 02:13:32 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: sdu0PXQkDXA/Z3XWWh3K/nnKcMvnLo4vAYJij9/LxDc=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Jul 5 02:13:32 2026 GMT
Not After : Jul 12 02:13:32 2026 GMT
Subject: CN=6a49bdcc-1178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:1b:53:a5:2c:77:b8:29:42:0e:a5:db:d1:
c8:84:ff:40:98:08:9e:57:84:6b:b1:61:9b:72:32:
03:ce:97:c7:a0:ba:bb:54:67:6f:94:4d:43:7d:79:
21:e8:18:5f:77:92:c8:f7:64:66:03:8a:dc:ea:aa:
e2:88:92:64:92:ff:54:da:15:c9:06:35:2e:f6:b6:
e0:aa:c5:90:ba:2e:ec:5d:4d:41:62:5e:22:e7:09:
5c:2e:fd:3e:c9:9c:a4:73:ab:87:27:39:67:b0:f7:
bc:cc:47:d3:1d:9b:70:5a:71:f1:e5:a4:ba:a9:c6:
2c:31:0b:02:84:44:e0:91:a5:bf:78:0f:0f:72:23:
f9:25:d5:91:cb:54:6a:7a:49:db:99:2d:5d:83:7f:
2c:25:89:3e:1f:0c:30:9c:41:aa:8f:47:a5:56:e4:
7b:13:81:e0:d1:76:73:ec:bb:6f:2b:03:82:68:98:
c5:ca:75:16:41:c5:22:31:43:dc:90:31:7b:46:8c:
8f:95:13:d1:06:9e:fd:d2:ef:1d:d5:ef:76:d8:85:
46:17:86:06:27:57:bd:52:9c:1b:80:99:9f:36:c2:
d5:3a:42:cf:51:71:b9:95:6c:20:a1:d7:fc:a7:db:
42:e0:e1:85:e3:30:f7:17:91:40:4d:d5:3a:f9:fd:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:06:21:61:82:6A:43:9F:67:78:17:53:3D:00:D9:CB:C7:E0:60:AA
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:0d:3c:f3:fd:b9:d2:d0:ef:48:75:b0:b2:d5:b1:16:b1:
20:26:bf:31:a5:52:4e:be:33:06:7d:4a:15:8f:e5:f7:7f:b3:
43:d5:06:38:36:e9:2c:8e:68:9d:18:aa:72:33:31:37:f4:52:
44:cd:53:39:aa:94:b5:2d:13:f1:55:ee:56:3b:e4:74:f9:e6:
de:c8:d6:1c:8d:97:4a:b6:8f:17:9d:6a:27:2e:01:91:a0:26:
2e:d0:3f:86:61:f6:c2:e1:c4:6a:8e:e0:a2:b4:ec:52:d9:fc:
5c:7a:da:e9:2f:b9:39:a4:36:7c:68:10:a2:64:22:c4:1f:f2:
03:0d:33:01:df:ef:ce:da:10:1e:17:1d:f8:40:12:54:0d:e5:
de:89:d1:99:01:cb:37:b4:9f:af:03:29:b2:31:ca:2f:85:32:
a3:b4:cf:22:b6:04:b5:61:93:a2:46:73:31:33:e7:6a:e5:7f:
9b:d8:30:58:9d:52:a9:24:0e:93:03:fe:cb:3b:bc:bc:f2:fd:
85:9f:85:ff:d4:23:60:16:be:35:36:a0:02:c5:3e:c6:5b:76:
f7:d0:1b:42:fd:37:19:80:91:40:4f:e0:89:ec:9b:82:ea:b9:
49:93:6d:bf:a7:1b:62:7f:83:01:1f:ca:d0:bd:13:e1:08:d6:
ae:9b:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:30 2026 by rpki-client