
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: N6Cn/rYUI8bZAfldhTti+6GcCpUj3s0CGJYx0tCUGgg=
Subject key identifier: 7A:57:BD:24:9A:CC:07:23:17:35:8E:FF:28:7C:E1:D5:40:6E:21:72
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 0D
Signing time: Sun 01 Mar 2026 10:38:09 +0000
Manifest this update: Sun 01 Mar 2026 10:38:09 +0000
Manifest next update: Sun 08 Mar 2026 10:38:09 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: zNWen46MG1zWjRMe5wZC7ao0led9p2M1LKDLJLJRR+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: Mar 1 10:38:09 2026 GMT
Not After : Mar 8 10:38:09 2026 GMT
Subject: CN=69a41711-660d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:d5:a9:44:37:a7:b4:f9:83:fd:d5:c2:d7:
42:51:c5:b9:e6:8f:ed:d7:aa:87:16:a7:0e:23:d7:
f6:08:1d:5f:45:88:06:7a:29:74:80:86:68:ea:65:
84:63:97:10:ce:f5:83:45:b6:ad:da:d1:26:ba:c7:
d5:74:86:26:c9:e3:bc:c2:d6:3e:48:53:4a:21:69:
ad:13:34:6f:10:9b:c0:4f:42:9d:3c:3e:d3:36:6f:
d2:0e:1c:b8:7e:ef:09:bd:f4:0e:08:51:50:0f:b3:
cc:da:c2:ab:8a:ec:20:9d:1c:02:ab:14:8e:8a:82:
14:73:d6:37:db:97:7e:27:25:17:cc:47:ac:e5:ee:
f6:96:ca:92:e3:e2:95:22:06:2d:e5:09:aa:4d:08:
53:90:9c:61:45:34:ff:5f:e8:f3:9f:5f:77:9e:98:
f3:db:cc:ca:bd:d6:f6:a8:f2:6a:c7:96:a5:8f:30:
8f:5a:03:b4:5d:b7:d3:61:2d:77:80:0a:f9:a8:46:
0e:18:b7:da:e9:eb:08:27:ec:f7:dc:67:9d:8b:6e:
76:e0:ac:53:84:49:41:8d:7c:3a:ae:be:02:e5:66:
71:ab:a3:c2:0c:05:a0:f5:e2:cf:aa:08:db:e3:04:
d5:0f:85:56:dc:98:2d:73:4d:7c:4c:d4:e8:c6:73:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:BD:24:9A:CC:07:23:17:35:8E:FF:28:7C:E1:D5:40:6E:21:72
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:32:28:ae:db:ed:3e:d7:ad:28:be:0a:c4:36:65:60:32:6d:
81:5f:36:51:d1:e4:18:0b:58:7b:95:d6:66:89:2e:84:c6:27:
cb:fa:42:3b:71:af:0a:61:76:87:5c:c0:b3:fb:bd:40:d3:6d:
bc:0f:9c:33:c8:96:b1:cb:d5:54:71:29:43:fe:d1:4e:0c:d5:
4e:a1:33:b1:74:11:8d:5d:b9:c5:41:58:8e:df:45:c2:c7:4c:
c8:1a:11:a2:00:80:a8:33:cd:79:30:c7:28:90:14:7e:8a:7f:
6c:3f:76:b1:9b:c9:18:c3:2c:5b:38:d2:1c:0e:62:33:22:f9:
18:e0:7a:83:16:d8:4b:3f:2c:f8:38:7a:25:db:31:e6:72:48:
0e:85:f1:ac:9f:4c:e7:fa:37:c5:ad:3b:97:da:2a:c7:67:5f:
f7:d3:3c:08:ea:97:4f:05:0c:02:73:c1:4f:92:4d:a1:45:03:
c0:8f:0b:50:bc:fe:eb:5a:27:e1:f8:32:fa:3b:32:01:cb:a4:
0e:61:6a:52:f8:93:4d:6f:bf:a1:c2:f5:ef:3b:7b:33:3c:70:
e4:6d:fb:cf:32:67:63:8e:9b:6a:0f:3d:c8:e6:f0:50:85:57:
eb:70:66:13:e3:cd:f7:17:43:99:74:43:e1:86:a5:07:f9:aa:
d5:19:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:40:07 2026 by rpki-client