
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier: 8b3pvcAIoAIbEnjkMpgBGp/sh7SmozeTlo6cPV+DdsQ=
Subject key identifier: EB:26:A2:EF:C6:14:F7:74:81:D3:18:02:7E:BD:23:84:9D:8B:20:64
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number: 0180
Signing time: Fri 17 Jul 2026 05:37:44 +0000
Manifest this update: Fri 17 Jul 2026 05:37:44 +0000
Manifest next update: Fri 24 Jul 2026 05:37:44 +0000
Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: AecxDkfyAHoXJvuLyunCjzxocjwT0jLr7un/iL+ao8E=)
2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=)
3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Validity
Not Before: Jul 17 05:37:44 2026 GMT
Not After : Jul 24 05:37:44 2026 GMT
Subject: CN=6a59bfa8-1994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:b4:0b:11:ae:8e:d6:24:f3:18:5f:d0:cd:
05:a1:80:ee:4b:fe:54:c8:9e:b3:f9:ba:28:72:91:
05:10:37:b2:9a:d6:bf:64:64:c8:c9:49:f9:d8:e2:
d7:7b:02:1c:2c:16:01:80:99:0c:1e:02:f1:d9:b5:
bd:7b:1d:1f:44:28:29:6d:1a:0b:85:06:5a:1a:60:
73:43:f1:21:ca:48:12:ae:74:b0:46:6f:f9:b9:35:
26:7b:5c:87:24:f9:62:63:c3:37:27:66:e7:1e:92:
e0:a0:fc:15:15:e3:58:46:28:f4:47:ba:c2:b6:4a:
a3:1e:5a:b9:22:1e:98:5c:6e:93:d7:22:e3:fd:25:
6f:b7:27:5f:43:47:ba:09:1b:e1:38:a5:7d:f3:a9:
08:ac:ed:b9:7a:cf:84:fa:a6:db:fb:d9:1d:7b:ef:
ed:07:f0:dc:55:39:6c:1d:53:5e:4f:ce:bd:93:e7:
30:b5:e5:db:71:f1:d7:3f:1f:a0:b1:8c:d6:fe:51:
6d:35:cc:9f:05:c3:52:13:0f:1f:b5:1c:6b:95:01:
98:d9:26:1d:dd:5c:b9:b0:3c:a4:e7:36:8c:47:fe:
74:68:c5:e0:89:21:f2:fb:34:bf:06:e2:2c:09:a6:
af:f1:66:ab:29:ff:73:9e:fc:ed:02:dc:ba:fd:8b:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:26:A2:EF:C6:14:F7:74:81:D3:18:02:7E:BD:23:84:9D:8B:20:64
X509v3 Authority Key Identifier:
keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:f4:7c:c0:0b:cb:b7:35:5a:62:ea:ac:39:81:83:38:d4:48:
43:42:65:50:9c:5f:95:0b:b7:04:e4:66:18:3b:a9:91:89:6a:
40:f8:ba:d5:e9:4e:57:4e:a7:b7:d8:a7:8d:1e:cc:e3:cf:b1:
06:fe:59:00:8f:87:e2:86:a7:1a:ce:14:fd:d7:93:ec:6f:2f:
b6:a7:3c:91:ae:44:7c:18:8c:af:ac:8d:f1:76:f3:5b:12:96:
f7:e8:6a:54:10:78:7a:55:53:0d:93:af:20:94:2e:fb:dc:7f:
58:0d:bb:8c:f3:27:d8:f4:19:9a:85:cf:17:11:4c:6b:5d:ff:
c2:84:33:be:ce:bc:36:86:e5:b9:de:ad:f9:3d:85:28:c7:86:
7c:b9:97:c0:1d:5c:5c:09:7b:5f:d8:40:da:7d:e0:bc:24:16:
10:6b:9c:3d:ec:11:ca:66:03:5d:75:fb:64:d1:18:bc:99:82:
97:35:df:b0:7f:25:f8:ea:25:c6:99:01:53:2c:7e:fd:1e:96:
11:c5:dd:9b:5a:e5:be:2e:90:33:2c:71:33:7e:b4:51:7a:f6:
d7:ef:f0:00:72:a2:2e:c3:a9:e5:e6:0f:c0:19:1d:0e:7f:b7:
37:d4:b5:a5:31:34:30:25:b0:9e:60:b6:f5:36:9b:ae:24:33:
ea:62:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:47 2026 by rpki-client