
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json)
Hash identifier: JC/ujn6ZihWhNr2RLoHKxGyYV5uDkxEFw9FJqUJL5Z4=
Subject key identifier: AE:C4:1E:B3:A7:2E:A3:89:1B:0F:5C:53:27:DC:1F:B2:E7:42:CA:F5
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
Manifest number: 94
Signing time: Fri 07 Aug 2026 07:11:49 +0000
Manifest this update: Fri 07 Aug 2026 07:11:48 +0000
Manifest next update: Fri 14 Aug 2026 07:11:48 +0000
Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: YR8fFmB7ehp+K0euaqV32Jl7jjOm6nOHI/fuzTV1QL0=)
2: 921935A27F2D11F1886CE3C28DA30FBC.roa (hash: vtLEoqPGykODmNwJqfTaMIZyx7FncJ7Zotaqf3xPNUc=)
3: FB35C486750C11F18888C9906EA30FBC.roa (hash: iMmKrEFx5UWvTQKlHWJsW0wGqQTgwuqR+AggRviRcjY=)
4: 4AFCDA0C78ED11F1980AFA215CA30FBC.roa (hash: Do7+mJUxysj0mc936QuMgOA9wfEKa8mYiumIGnIuwu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 14 Aug 2026 07:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Validity
Not Before: Aug 7 07:11:48 2026 GMT
Not After : Aug 14 07:11:48 2026 GMT
Subject: CN=6a758535-f661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:25:55:96:d0:69:a9:03:75:e3:aa:b6:40:
79:e4:3c:26:85:43:b5:d0:7e:76:cf:8f:56:ea:ae:
d3:6f:2a:6f:1d:44:6d:97:4c:c8:6d:fa:76:a1:28:
20:18:b2:c0:ef:61:24:7c:ca:ef:08:56:63:7e:ff:
99:7c:3d:ae:5e:9c:d6:cf:ec:af:bb:3b:d2:6f:b7:
d9:1b:e0:46:9d:33:f9:85:09:21:de:67:0c:bb:73:
84:04:08:46:bf:67:fd:4f:8f:79:1e:24:ea:7c:e9:
64:04:a2:9e:43:cc:f0:d5:4d:67:2d:0e:75:d9:9d:
14:ea:60:1c:c8:16:15:ee:e9:30:2e:40:ff:31:b0:
95:a6:d5:be:37:5f:ef:0c:4e:27:b7:7b:49:22:92:
79:de:7f:b9:29:f3:9b:f7:df:6f:26:e7:bd:ae:66:
2e:02:16:43:33:c2:e2:73:33:27:92:d7:34:15:35:
d5:98:3d:2f:83:93:49:b0:ac:81:9a:0d:26:af:86:
ed:77:b4:55:e9:82:3d:1d:f2:05:78:16:74:11:30:
b3:35:52:67:68:b4:9c:ec:7a:61:a2:e6:e9:8f:8c:
e1:ce:96:4a:ec:07:b6:31:de:c7:0b:07:f3:9d:23:
c2:84:a9:de:d4:5e:72:d8:2d:65:b6:a1:81:b1:f9:
0f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:1E:B3:A7:2E:A3:89:1B:0F:5C:53:27:DC:1F:B2:E7:42:CA:F5
X509v3 Authority Key Identifier:
keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:d0:bf:6e:be:c5:10:a8:f8:df:b3:23:0a:ea:03:09:68:
f8:d1:41:74:2a:5c:c5:b9:5a:94:5b:86:cc:78:e7:de:f6:42:
50:61:30:d3:b9:98:0c:3d:29:0a:46:ac:e3:59:36:41:b4:60:
79:17:1e:7b:b7:97:d6:be:66:0a:d1:0b:7e:2d:2c:1f:f5:1a:
2c:10:e1:4f:2c:84:63:74:da:10:c1:86:8d:23:85:89:31:89:
0b:81:a6:ce:60:5e:b8:85:cc:31:f4:e4:e3:42:b8:2a:fe:30:
66:16:c2:f8:09:bd:6d:10:6b:e4:97:47:66:14:3b:62:17:48:
05:23:bc:0c:ca:6e:97:04:de:87:ef:48:9f:5d:1e:a1:05:5c:
1d:bd:02:d0:a2:1a:1a:92:00:89:83:96:97:fc:2e:9d:6f:9f:
69:c6:24:50:20:44:75:00:91:9d:30:ba:07:ca:70:e7:86:1b:
1a:63:af:fc:b1:0c:5f:9e:7c:f4:39:86:d2:3f:bf:bf:b6:4b:
55:1d:47:91:5e:fa:6a:cc:b9:da:37:7c:b6:15:20:59:ad:70:
7a:5c:d1:8d:a3:8c:d7:2c:50:2d:1c:9e:d7:0c:cf:3f:86:aa:
01:14:7c:5e:eb:14:9a:ec:c6:6c:7b:34:17:24:7c:7e:00:da:
19:ce:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:21:30 2026 by rpki-client