
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier: TTZY972ceq7M8VeKJt+rhO8fYgMweF+j3ai/OKKMqm0=
Subject key identifier: EE:78:3B:1F:7E:69:48:52:06:E8:85:BF:92:5F:03:2B:1E:D7:47:4B
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0A55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number: 0A4D
Signing time: Wed 20 May 2026 19:42:24 +0000
Manifest this update: Wed 20 May 2026 19:42:24 +0000
Manifest next update: Wed 27 May 2026 19:42:24 +0000
Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: zeLtybPUOBB9VZ45kSeSgtGvHcDL7BOFVAmtNX3Zo+0=)
2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: cj0uIogezd0yWwaHnlYBF13kTbwkCk4qf3kI26mN/jI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Validity
Not Before: May 20 19:42:24 2026 GMT
Not After : May 27 19:42:24 2026 GMT
Subject: CN=6a0e0ea0-73a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:a3:91:64:3e:23:cd:20:1c:aa:2b:ed:f0:
99:ee:05:b4:1d:a7:ad:43:18:59:d2:70:77:bd:22:
6b:ee:74:81:f5:64:ee:3f:34:fc:01:76:40:16:a0:
c1:c7:bd:c0:8a:c5:d3:81:ce:2c:d9:ae:b1:4b:aa:
fd:90:56:a8:cf:8a:95:0b:cf:52:dc:47:c5:7e:4a:
20:fc:05:19:3a:29:07:cf:e9:a9:63:7b:00:ee:83:
e7:84:31:27:3b:35:ce:9e:f2:d3:3f:d2:01:a9:a9:
d6:4e:e4:af:9e:39:7d:af:15:06:78:d4:90:bc:63:
00:a1:dd:fa:5a:91:67:60:c1:89:0d:72:a9:83:5f:
0a:03:ba:74:60:ca:2d:aa:44:89:16:02:d1:aa:c4:
b4:7b:86:ff:9b:d7:08:78:30:14:0a:00:47:33:c8:
17:63:ba:e1:67:b6:f3:dc:04:c2:13:cd:80:97:fd:
f8:0f:03:53:46:56:c6:60:0c:28:23:a4:d9:8d:e4:
76:af:4b:35:2c:e5:46:a6:8f:01:96:0b:7e:b8:50:
2d:e5:e5:3e:18:7c:9c:97:26:89:d1:6a:4c:1e:7d:
6a:b1:e7:9d:17:20:76:23:fc:6b:9e:6a:c3:12:2c:
92:22:fb:b8:b7:18:f6:80:3f:ab:60:2b:f9:83:17:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:78:3B:1F:7E:69:48:52:06:E8:85:BF:92:5F:03:2B:1E:D7:47:4B
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:97:1d:6f:29:ef:bc:47:39:35:f5:5e:4e:a6:f7:d1:43:0f:
72:f4:a3:9f:e4:b9:04:59:61:48:20:b8:93:74:ae:40:ee:05:
d9:a2:27:ac:ef:57:f9:52:58:7c:f3:29:1c:fd:5f:34:fa:d8:
b8:19:55:31:aa:09:10:61:2c:3a:67:8d:b8:6f:6d:04:70:8b:
51:d9:e2:1b:0e:63:57:96:0d:ef:e3:4e:49:e1:a7:22:ff:48:
67:1c:85:91:d7:40:ef:d8:1a:2f:91:d2:2b:8a:16:8f:e6:69:
38:f2:b7:7c:8f:31:85:a4:ac:2e:3a:69:1c:e4:34:69:49:9a:
25:45:11:50:d8:a4:76:7b:d2:16:99:30:3a:34:17:87:65:bd:
7c:6c:41:15:30:a6:f0:0a:3f:1f:85:5a:27:21:11:e6:04:ec:
c0:94:26:b2:70:d4:c0:f4:8e:2c:4f:80:c7:70:06:88:a0:f3:
c9:53:f9:4d:6e:c0:b5:0d:ea:6b:b5:af:1d:66:b3:0b:ac:6d:
5d:b3:ed:f7:24:f1:17:c5:af:a8:a6:b1:87:c0:5f:f4:b3:c7:
5b:86:79:5e:a5:f5:51:3e:1e:6a:03:0a:e3:28:d5:b6:9c:d3:
86:b2:ec:0c:33:01:b5:51:33:99:09:92:37:2b:6a:7d:4c:42:
e4:e8:42:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG
OEYyMjFFMDMwHhcNMjYwNTIwMTk0MjI0WhcNMjYwNTI3MTk0MjI0WjAYMRYwFAYD
VQQDEw02YTBlMGVhMC03M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnuKjkWQ+I80gHKor7fCZ7gW0HaetQxhZ0nB3vSJr7nSB9WTuPzT8AXZAFqDB
x73AisXTgc4s2a6xS6r9kFaoz4qVC89S3EfFfkog/AUZOikHz+mpY3sA7oPnhDEn
OzXOnvLTP9IBqanWTuSvnjl9rxUGeNSQvGMAod36WpFnYMGJDXKpg18KA7p0YMot
qkSJFgLRqsS0e4b/m9cIeDAUCgBHM8gXY7rhZ7bz3ATCE82Al/34DwNTRlbGYAwo
I6TZjeR2r0s1LOVGpo8Blgt+uFAt5eU+GHyclyaJ0WpMHn1qseedFyB2I/xrnmrD
EiySIvu4txj2gD+rYCv5gxeYQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO54Ox9+
aUhSBuiFv5JfAyse10dLMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB
OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk
NEFjcVdteE8wS1g0OGlIZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfZcdbynvvEc5NfVeTqb30UMPcvSjn+S5BFlhSCC4k3SuQO4F2aInrO9X+VJY
fPMpHP1fNPrYuBlVMaoJEGEsOmeNuG9tBHCLUdniGw5jV5YN7+NOSeGnIv9IZxyF
kddA79gaL5HSK4oWj+ZpOPK3fI8xhaSsLjppHOQ0aUmaJUURUNikdnvSFpkwOjQX
h2W9fGxBFTCm8Ao/H4VaJyER5gTswJQmsnDUwPSOLE+Ax3AGiKDzyVP5TW7AtQ3q
a7WvHWazC6xtXbPt9yTxF8WvqKaxh8Bf9LPHW4Z5XqX1UT4eagMK4yjVtpzThrLs
DDMBtVEzmQmSNytqfUxC5OhCjQ==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:22 2026 by rpki-client