
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: MrsT8nztXNANNPUJN2XFCJVJTknDWnYV+Ou75Qb8IbQ=
Subject key identifier: DA:64:C6:51:03:5F:74:B5:33:C1:9F:15:28:F9:FA:65:EF:14:21:36
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: FF
Signing time: Sat 25 Jul 2026 07:51:29 +0000
Manifest this update: Sat 25 Jul 2026 07:51:29 +0000
Manifest next update: Sat 01 Aug 2026 07:51:29 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: CbKY/oglyuCAZZ0XhdxU2Iq+YPMSJsrF2Fd6WNHMWrY=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 07:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Jul 25 07:51:29 2026 GMT
Not After : Aug 1 07:51:29 2026 GMT
Subject: CN=6a646b01-fcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:63:ad:8e:71:91:e1:6f:bb:96:0f:e2:c5:
4c:d2:20:bb:a6:63:7b:34:3f:0f:f1:22:f7:bf:a0:
b9:9b:f8:4a:39:ec:f5:ed:12:3c:99:7a:b8:ec:ea:
02:a4:07:c6:13:04:bd:be:98:34:a2:84:7f:be:1a:
1f:1b:83:73:43:d9:d3:1a:a4:fb:88:09:f0:67:eb:
c5:8f:c8:e1:c2:3e:5c:86:22:22:f3:4e:6f:2b:79:
8c:12:df:9c:58:98:a3:08:63:ea:72:35:84:34:49:
22:99:ef:76:dc:64:8e:95:89:c9:86:72:f8:6c:a9:
4a:f3:33:7c:79:c7:95:d3:33:fb:3d:fe:0b:45:29:
15:13:cf:7f:b7:8d:3a:47:6d:b4:59:3b:f4:ff:f7:
75:01:fa:c0:0d:3f:37:81:2d:f5:ca:52:2a:72:f6:
71:d7:77:92:85:4a:45:dd:ca:cc:30:c0:85:46:5f:
87:d6:8f:7f:08:ac:b9:82:d3:64:b3:70:ae:2a:38:
dc:56:e7:bb:f5:72:17:31:4b:b5:ad:d6:2f:f1:c7:
df:c1:39:a1:df:da:41:cb:55:8d:7f:ee:90:88:f1:
9c:ae:7b:6b:97:31:1f:5f:57:81:f4:28:b4:9d:34:
7d:df:47:71:eb:57:28:27:ef:27:0c:4e:1b:05:fa:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:C6:51:03:5F:74:B5:33:C1:9F:15:28:F9:FA:65:EF:14:21:36
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:78:07:0e:75:3e:57:06:3c:54:d9:09:b2:b2:1a:19:6d:bd:
89:75:36:f9:f8:4b:93:d4:21:11:ce:6c:e2:dc:56:47:14:da:
55:54:4e:dc:5f:2f:1d:f1:08:6e:82:ce:c2:96:72:6d:00:bf:
ea:d0:d6:71:dc:c2:a2:66:9e:8e:5e:df:b4:fc:67:9a:c6:d2:
76:c6:7d:c9:ed:0f:cc:6c:f4:a4:25:bb:4b:64:16:c2:e4:d2:
af:9e:44:38:ce:6c:f0:52:c7:9e:d0:e2:81:2a:77:8b:5d:65:
4b:97:dd:7a:f4:1d:f7:98:f7:75:06:19:1a:bc:1f:0d:0c:10:
44:ac:8c:db:7e:3e:b1:5c:83:b9:25:42:22:3d:20:b4:b9:7e:
9d:17:97:4b:0b:3e:0e:a6:48:e9:87:9d:83:15:aa:f4:56:fa:
79:00:59:ea:e3:54:d8:68:3f:a8:33:08:2e:ec:fc:fb:af:05:
59:bd:6d:5b:36:cd:b4:fc:45:86:37:e6:62:42:17:86:45:8b:
15:83:44:fc:30:0b:e2:95:01:3f:00:0d:1c:f2:22:37:e0:02:
f9:f9:c6:a5:0e:ca:3c:bf:3c:ea:56:96:89:73:79:07:b9:64:
28:39:b6:8f:df:1a:bb:6f:f1:5e:f2:72:11:3b:57:2a:2b:2d:
b1:03:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:49:25 2026 by rpki-client