
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File: LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier: QvvHKocbYD5TVT41rg+LH4kaupQKp1Uh2BfifuUEOaI=
Subject key identifier: FA:75:EC:68:96:86:DD:F7:17:9E:E6:EC:7D:54:58:37:4C:51:3E:1A
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer: /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number: 28
Signing time: Fri 17 Apr 2026 08:32:15 +0000
Manifest this update: Fri 17 Apr 2026 08:32:15 +0000
Manifest next update: Fri 24 Apr 2026 08:32:15 +0000
Files and hashes: 1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: yB5tu8q3Gs3ji2yFvQGYhpah0s7l5WV8QGpGRVbdCwc=)
2: 783957EA31BF11F1BC4C9C57C1833773.roa (hash: DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Validity
Not Before: Apr 17 08:32:15 2026 GMT
Not After : Apr 24 08:32:15 2026 GMT
Subject: CN=69e1f00f-ff33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:c4:dc:5b:06:cd:8a:b2:e6:f2:ec:e3:af:
15:48:89:3e:6a:48:2f:a5:95:b5:84:6f:05:fa:d6:
69:d1:79:2e:01:b0:38:93:78:a3:cd:b5:7a:94:df:
e0:31:2e:d5:ac:0f:c7:81:e1:cd:77:5e:82:79:f4:
05:cf:d2:b9:df:1d:42:d3:41:c7:84:50:5b:ef:97:
16:32:7b:d2:5f:85:39:a2:ea:27:e6:48:71:3d:7e:
b0:e9:f1:64:be:b2:61:8b:77:60:ea:ad:f3:2c:b7:
e6:83:f5:6c:29:aa:02:a3:b8:fa:a9:16:48:b6:b0:
ac:87:c2:55:f2:3c:9a:30:21:a0:c6:39:9b:33:36:
c1:9e:17:02:76:ef:8a:bc:ca:5f:1e:1f:f2:4c:87:
16:5c:e7:b7:98:9a:54:69:8a:72:20:e9:27:28:8d:
a0:21:a3:2c:3a:e3:66:de:16:93:e8:03:24:0e:5c:
86:ed:b8:9b:58:88:9c:f9:47:ec:f0:67:20:5a:9b:
f9:f2:e6:a1:08:54:13:df:10:83:18:18:5f:26:64:
c8:c4:94:2f:0a:2b:79:65:da:6a:e3:79:30:3a:a6:
f8:ad:e7:59:1e:05:46:84:55:26:d6:13:67:1d:43:
d8:de:85:8b:4f:0d:89:88:09:52:71:11:3b:57:ff:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:75:EC:68:96:86:DD:F7:17:9E:E6:EC:7D:54:58:37:4C:51:3E:1A
X509v3 Authority Key Identifier:
keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:0a:35:42:ad:a6:cc:2e:bf:42:ce:68:30:c0:1a:2d:0e:44:
79:bb:9f:3d:80:c9:f4:c7:e9:68:88:d4:e4:ab:e7:45:98:63:
9c:93:71:d9:d6:f9:0d:ad:87:4f:30:17:30:58:37:9d:5e:f2:
68:b4:4d:a8:de:d0:79:07:8e:a3:83:6a:96:cd:43:99:8b:3e:
c4:91:cc:d5:f8:0c:5d:c4:f9:17:43:0f:6a:3c:18:0e:c6:4b:
9e:05:d4:df:d8:84:2e:cd:3a:f4:3d:76:9a:84:40:47:be:0f:
09:14:b2:a5:09:56:96:56:70:a7:de:b0:d1:a6:41:b7:ae:2c:
9d:33:8c:07:c7:89:cd:e3:8b:62:91:20:64:32:20:98:11:e3:
46:58:ae:97:a8:25:84:a7:c0:9d:12:ef:39:11:71:41:ae:dc:
11:cb:71:ea:ea:b1:ba:9c:c9:13:5a:cf:fc:0b:c6:e6:ca:fa:
ed:7b:01:1b:c9:b3:81:3f:f2:77:d4:c8:d5:ff:cc:92:d3:29:
00:8a:81:9a:6a:65:d7:3e:f3:98:d6:dd:94:06:68:44:2f:bc:
a3:95:74:81:36:7d:e1:d9:46:1f:97:f7:39:e1:bb:0c:67:d8:
d0:58:91:f8:d0:31:c4:d9:c3:62:af:25:6a:c6:45:19:cd:bd:
d8:99:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:29 2026 by rpki-client