
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: MiPDdNQFJxeVh6oYfEwPRRnRXcfRZbsiWbwOpWxcKxU=
Subject key identifier: 30:53:D4:41:7F:97:27:D0:8E:7E:EF:10:26:A0:82:85:5C:68:16:CF
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: D3
Signing time: Mon 27 Apr 2026 06:36:22 +0000
Manifest this update: Mon 27 Apr 2026 06:36:22 +0000
Manifest next update: Mon 04 May 2026 06:36:22 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: 71uWLKcDaCkyS/vfLIldfRKjAlgBDZY6BzxNr7CrmhU=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 06:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Apr 27 06:36:22 2026 GMT
Not After : May 4 06:36:22 2026 GMT
Subject: CN=69ef03e6-e307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:bd:a8:c7:c7:96:b2:81:1c:3c:a4:50:d7:
65:57:cc:6e:27:93:e3:a5:da:01:b9:29:e7:18:1e:
ae:32:b4:29:63:16:b4:79:0e:f0:40:7a:43:d7:d5:
49:f3:47:5a:57:4c:e1:9c:28:21:98:58:e3:af:13:
85:83:78:95:24:6c:48:ec:1d:57:89:ac:b8:ff:4e:
c5:16:08:5f:b8:b6:ac:39:37:71:b4:3b:f3:a7:1b:
d5:9b:ea:bd:0d:37:45:52:4e:29:87:ee:e4:52:30:
7c:31:55:c0:7e:88:e3:b7:e4:a0:37:51:fa:6e:37:
23:f9:cd:9d:1e:72:82:b7:92:ca:56:0e:a6:39:7c:
a6:bd:2b:4c:3a:ad:a8:c4:82:87:5f:84:6e:70:e2:
59:74:5e:14:94:7f:66:a1:e2:13:31:9c:c1:95:39:
dd:42:d1:97:df:74:95:9f:12:c0:2e:fb:af:8c:e2:
33:f0:76:10:f2:ab:01:ca:fb:38:98:a9:1a:1c:3e:
2d:7c:f7:28:cf:00:44:fc:45:21:ea:df:18:24:b4:
2a:d4:85:8b:bf:f9:0f:5d:01:44:48:18:19:f8:d2:
ed:ef:cd:fe:f5:34:01:07:ce:1f:99:7d:1e:69:f0:
37:b1:1b:e3:da:17:2e:bb:52:d6:52:b9:9e:d4:97:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:D4:41:7F:97:27:D0:8E:7E:EF:10:26:A0:82:85:5C:68:16:CF
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:d7:de:92:6d:6f:65:c2:26:9d:72:b1:33:0d:c5:78:3e:70:
a9:07:f2:45:85:1f:5e:15:1c:bb:a4:a6:36:99:04:57:3e:18:
65:d2:84:6a:d6:9a:90:4e:8d:0c:96:c8:59:a9:c2:f2:e7:57:
50:5b:3d:f4:16:eb:71:72:15:9a:59:b5:2a:a7:7b:53:bb:cb:
4b:41:c7:b8:33:65:7f:0d:90:1a:d9:89:60:f1:43:bc:87:48:
39:26:94:05:c3:8e:c6:a8:49:d6:e9:e0:89:87:3d:aa:a4:e5:
a2:d0:fb:85:04:41:59:52:ca:c0:3b:73:bc:de:ed:37:46:83:
3f:ae:18:c1:96:7b:65:38:a1:d7:a6:c5:36:1a:8d:bd:6d:37:
03:08:8c:a3:78:ba:f5:e4:f2:31:9c:63:10:5a:d0:2e:53:1f:
b1:6f:c9:29:a7:65:ed:1e:a7:e7:24:b8:d2:cb:88:dd:97:f9:
d9:be:b6:21:85:5f:20:a1:e2:4b:95:02:41:fd:46:63:70:b5:
77:13:82:b3:36:08:1c:27:0e:d3:53:56:ae:c4:81:70:af:92:
7b:9c:38:2d:ea:c3:3c:96:20:f8:75:9e:60:41:b1:4e:48:a0:
fb:9c:59:34:d1:c9:a2:8d:62:13:55:dc:91:a4:25:41:ae:c4:
02:78:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:53:34 2026 by rpki-client