
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: WmTIv1k/Yr40RdJ/Od8rb2L02j+B8vwBoFBHYoFmy0w=
Subject key identifier: 59:F9:00:DA:E9:19:0E:D8:B9:BC:A4:18:72:69:36:BE:A3:D2:CA:BE
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: 0117
Signing time: Wed 09 Sep 2026 06:20:32 +0000
Manifest this update: Wed 09 Sep 2026 06:20:31 +0000
Manifest next update: Wed 16 Sep 2026 06:20:31 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: gqqC3QuSg501sNIz7qjGR9LIwjjbhR+4lDlFvKmvMSA=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 06:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Sep 9 06:20:31 2026 GMT
Not After : Sep 16 06:20:31 2026 GMT
Subject: CN=6aa0faaf-9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:77:2f:26:b4:24:e3:3e:be:1c:76:1b:d7:
99:b8:8d:6d:bf:d3:2e:4b:65:e7:6b:6e:2f:a0:0d:
d9:05:eb:ec:d6:38:b7:13:0a:4a:4a:44:e2:01:67:
f6:98:ad:72:1f:ac:aa:72:6e:5a:31:96:61:4c:c3:
11:df:24:1b:2f:26:f0:d6:00:5a:31:2c:86:62:0c:
11:67:a3:5a:ae:fa:8d:be:a6:fd:d3:10:68:ca:9e:
f3:83:be:19:83:27:1f:5c:b4:5b:03:61:77:54:8b:
fe:fa:4b:f0:29:0a:9d:a9:42:f8:57:c3:14:cf:0c:
6c:e0:2e:d6:23:79:7a:ca:9d:2a:3b:a0:2a:b9:ff:
65:22:5b:8a:60:d9:3a:11:04:40:b3:20:cf:c4:e9:
c5:1f:5c:22:d4:ec:f1:fe:52:ac:88:bb:5c:f9:ee:
f0:7e:84:26:a1:a4:30:54:d6:a4:3c:bb:ea:6b:2f:
3d:86:cf:c0:37:c7:24:be:25:9d:75:2e:3c:36:03:
73:19:ed:65:60:b0:e9:23:59:de:7b:a9:07:c1:ca:
d5:25:d3:4a:c7:68:ef:bb:73:8e:96:70:65:3b:f3:
b6:24:be:8b:37:cb:31:ec:e3:eb:f0:b4:16:bf:2c:
9c:9f:5e:6f:91:b9:f8:b7:f7:78:4a:aa:21:05:a8:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F9:00:DA:E9:19:0E:D8:B9:BC:A4:18:72:69:36:BE:A3:D2:CA:BE
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:aa:c1:94:d5:2a:59:2d:4c:85:d8:67:03:b2:b2:b7:18:d1:
e3:5b:89:02:a3:f6:71:62:5d:64:63:d7:34:91:f5:d8:5b:39:
04:c3:72:94:f2:a9:8d:f4:11:11:d2:cc:4a:f0:75:c2:28:11:
56:28:66:7c:0b:93:dd:ca:a7:b4:76:8c:af:60:72:4c:87:99:
d1:86:e3:d2:55:06:70:49:0b:14:bd:21:1a:08:c3:e3:e0:69:
65:71:16:dd:b9:cb:48:73:28:8a:9f:93:f6:74:4f:09:24:92:
55:c1:b1:c5:b9:30:7a:a7:ee:8c:e8:f9:17:86:53:1c:93:12:
3e:2f:e0:71:0f:e7:73:91:55:5d:88:28:bc:00:3e:7d:14:d7:
12:80:51:48:b9:70:96:18:31:74:ec:12:12:7d:f5:f3:ad:ea:
15:51:54:7e:f9:56:b5:c2:a3:4b:9e:e9:f8:61:60:6d:75:f1:
4d:8d:2a:9c:50:97:32:8b:81:d3:17:d3:64:d6:91:15:a9:e8:
3f:9c:13:b2:44:b8:26:b7:a5:31:fa:db:46:46:30:ee:1d:21:
f2:04:d9:c5:6a:ad:ab:10:91:95:38:eb:79:62:cf:2a:ac:f6:
a2:35:34:e2:e3:2f:96:f5:77:f3:7a:91:59:db:25:0a:41:30:
be:fc:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:38:56 2026 by rpki-client