
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier: qKVGdkC2e9dAvZBY8wetWVYad26gaSxcH+irVnQa7tI=
Subject key identifier: 42:29:F4:8C:BD:1F:99:EA:08:09:1D:10:D1:94:05:C0:C5:34:A8:F5
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number: AD
Signing time: Wed 15 Apr 2026 06:44:57 +0000
Manifest this update: Wed 15 Apr 2026 06:44:56 +0000
Manifest next update: Wed 22 Apr 2026 06:44:56 +0000
Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: +PQLpkbeKUpx1hRFHR39MOZbxrn/mF1XP5qfbU1zX40=)
2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: Apr 15 06:44:56 2026 GMT
Not After : Apr 22 06:44:56 2026 GMT
Subject: CN=69df33e9-604d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:3d:5d:18:30:e4:53:c2:e4:fc:44:1f:48:
68:b1:39:2b:99:30:98:cb:de:e0:96:ac:b4:56:a7:
20:0f:fd:ec:9c:60:1b:75:af:60:30:eb:9f:d5:89:
6f:6d:ce:ff:62:94:35:88:d3:3a:cb:b9:bf:71:a0:
cc:d1:1a:c4:d2:5a:4e:cb:35:3a:98:d5:05:46:94:
f3:65:79:66:8a:e4:1a:c1:d5:10:77:87:a3:93:fb:
af:c9:ce:a1:45:b8:6f:11:d0:ff:bc:51:b8:9f:94:
10:85:43:98:1e:68:c7:10:77:4d:55:c5:be:80:93:
36:0c:14:eb:43:40:75:ad:da:f1:62:70:16:b8:76:
38:c6:4c:8e:86:72:eb:77:b4:6c:a2:9c:d9:73:d6:
34:72:b3:04:ea:dd:f9:fe:00:1d:9c:cd:30:5b:e7:
17:e6:3e:a2:5e:a3:b7:8f:8b:07:9b:94:d6:a2:bc:
47:ce:c2:8c:53:70:84:0f:82:d0:cd:33:da:27:9a:
79:a4:d4:c1:17:58:9a:6d:85:72:cd:e9:2a:9d:06:
5c:3e:b3:6e:60:00:8a:8a:b4:b9:b3:c3:f3:10:87:
b1:01:d8:55:ed:36:9d:48:40:70:20:4f:59:31:3e:
e9:53:c3:fa:b0:c6:ae:0e:a5:1b:15:3a:a5:f1:dd:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:F4:8C:BD:1F:99:EA:08:09:1D:10:D1:94:05:C0:C5:34:A8:F5
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:d3:7a:04:06:7b:6d:f0:ee:92:24:de:49:fa:02:1d:d8:19:
41:6f:77:d3:8c:c2:5d:16:05:62:20:19:f0:94:d6:6d:31:90:
f5:e0:97:df:32:6d:34:c2:e5:fc:70:49:42:3f:82:1f:fd:e0:
f2:86:f5:3a:0a:d8:2f:f0:70:9d:a6:7f:e0:8c:ba:c4:a9:49:
32:7c:09:01:68:9f:0e:cd:6c:77:2b:94:ca:13:14:a5:8f:fd:
4d:22:83:f7:c2:55:2e:ba:10:a0:0e:1f:08:cd:0e:68:f1:19:
4c:46:d1:84:fb:19:08:ff:06:54:9e:2c:a1:d5:b6:1e:c1:01:
c8:69:16:14:25:50:d3:0c:48:64:52:a0:ec:b7:77:a8:e2:25:
b7:c2:14:47:95:58:9e:70:0f:d0:75:ad:a2:aa:ea:5c:1a:ce:
b0:50:48:df:c0:23:56:ab:22:12:55:22:13:94:c9:4e:90:1c:
16:3f:20:55:ef:dd:b0:75:97:2f:c1:e0:cb:84:46:4b:8c:df:
e9:cd:73:ce:42:cd:e3:2d:10:05:f0:82:83:2a:bc:00:7b:c5:
be:fa:1b:09:43:45:3d:f6:13:ba:3f:e4:9e:9e:b0:86:1b:99:
06:7a:da:80:82:ff:8b:43:1e:aa:f7:5c:cc:cc:ed:57:20:28:
85:5c:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:35 2026 by rpki-client