
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier: oV9KKp5p4gzSHb36FhLbIsWuSHGpE6yI8NCxNPs5QZg=
Subject key identifier: 29:8A:A4:85:56:29:B4:31:D3:58:3A:69:6D:FC:68:13:CB:51:F6:8C
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number: 0249
Signing time: Fri 17 Apr 2026 02:08:54 +0000
Manifest this update: Fri 17 Apr 2026 02:08:54 +0000
Manifest next update: Fri 24 Apr 2026 02:08:54 +0000
Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: 1R7Jm8Nn9T1ZVlUsfZrB/i0LDY3sqJBCNlnDuQclebE=)
2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: pEm//IYBO5yUXUVl2BGYI8pEuzX3grMfUMX9Zq00xEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Validity
Not Before: Apr 17 02:08:54 2026 GMT
Not After : Apr 24 02:08:54 2026 GMT
Subject: CN=69e19636-5ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:2b:84:e4:95:74:e2:b1:68:5b:29:72:7e:
3a:f0:f6:ab:c6:ab:4d:0b:92:75:69:65:3a:3d:83:
59:72:25:f5:bd:5a:90:ad:59:ce:3a:ae:80:9c:79:
c3:f2:b1:5f:1f:89:b6:80:40:0e:ab:3d:45:b0:64:
c5:ed:7e:99:32:ba:ef:22:0c:0b:ea:9d:25:e3:e7:
a1:50:63:92:4d:41:0d:43:e2:0c:52:cb:be:9b:1d:
f3:3a:02:7d:2e:c9:c8:9a:4c:df:86:53:61:0d:6b:
9f:21:8b:fa:70:50:97:4e:4a:30:24:5c:31:e0:de:
ea:04:ea:20:9e:d1:1a:85:50:39:50:0a:c8:50:ce:
e3:1c:cc:1c:11:18:0d:d9:b6:52:b0:b3:29:96:50:
9c:cf:89:a6:02:16:e4:1f:7d:0c:96:96:75:81:9a:
73:c7:5a:a8:93:91:d1:88:34:9c:98:d8:a9:fd:6d:
34:6f:5e:f1:d6:be:9d:b7:c3:55:9a:67:71:2e:e5:
6f:85:58:08:77:79:c0:a4:1c:8c:f4:f9:f3:76:43:
f4:e6:55:1d:c1:5e:c8:f9:22:f8:77:2b:56:b2:2e:
ba:c6:89:ea:b4:53:c8:26:5a:32:0c:14:37:ec:7f:
63:0f:6f:05:8b:7d:06:91:96:1b:73:11:bb:03:a1:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:A4:85:56:29:B4:31:D3:58:3A:69:6D:FC:68:13:CB:51:F6:8C
X509v3 Authority Key Identifier:
keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:92:b4:f1:cf:e3:2e:b9:c7:e1:8f:76:90:cc:5d:36:8f:a6:
b4:9a:d8:02:d3:79:c3:38:60:58:a3:0f:87:84:f7:84:c3:bc:
78:4a:a2:e1:82:00:85:93:1f:14:f5:5f:2e:44:bb:64:44:99:
d9:b2:73:38:1c:94:9a:08:5c:f0:88:91:ef:2a:73:15:30:9a:
ee:f1:f0:a8:12:5d:ed:14:68:54:0a:6f:87:d7:15:fd:27:c7:
71:d4:ee:75:5b:65:45:c7:94:4b:5b:c3:5c:46:09:58:9a:b5:
8c:63:5e:4e:3a:0b:61:e0:14:e6:4d:d0:e1:98:98:85:e8:a9:
0e:e9:d9:fd:31:d2:cd:41:09:0d:ba:b5:69:84:9e:f5:b7:1e:
ed:f0:d2:21:db:d4:6e:ae:dd:ce:51:df:fc:3f:45:70:1e:ae:
8e:bd:2b:43:69:f6:1f:3f:68:72:99:0c:91:27:77:88:83:9f:
bf:3b:9e:28:79:4c:43:75:a5:67:5b:9a:1c:79:98:12:54:61:
10:e7:3b:4b:81:65:52:e7:20:73:3a:1c:83:90:bd:03:f1:41:
0b:7d:a6:39:cb:62:5a:01:3b:71:96:d1:02:e9:09:be:16:25:
4b:27:29:b8:c3:f6:7b:17:af:9a:26:99:b2:b1:8d:08:69:e2:
fe:8f:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:13 2026 by rpki-client