
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier: ePHXQNrvZD+U8WG0S9hBCtv2+ZaUoa+/djjWGn0ax4U=
Subject key identifier: 32:2D:7A:B4:51:83:8D:1D:1F:A7:EC:B6:72:3E:D7:9C:79:A8:04:69
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number: FE
Signing time: Sat 19 Sep 2026 06:18:25 +0000
Manifest this update: Sat 19 Sep 2026 06:18:25 +0000
Manifest next update: Sat 26 Sep 2026 06:18:25 +0000
Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: UjHCyR6l0CLS8PbtUVGzyqaqw7BEEL6ox4OwsbDsum0=)
2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: rckBxD2KbOBtygxC/B22fEZmZKSRuNXV143WuugaVH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: Sep 19 06:18:25 2026 GMT
Not After : Sep 26 06:18:25 2026 GMT
Subject: CN=6aae2931-02f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:17:03:14:1c:9e:c6:a4:cf:b2:f9:d2:c9:
d6:f1:17:d0:27:10:2c:8c:4d:07:19:78:50:81:a9:
fd:42:93:dd:de:d6:62:42:7f:9f:d6:5f:bf:1e:03:
a2:c5:ab:85:a2:e6:17:aa:36:f8:fe:40:78:25:0e:
48:39:be:10:6b:55:d9:e6:d7:25:84:92:85:4a:49:
23:3e:62:e1:22:41:f7:67:23:a5:39:32:71:eb:4b:
b0:c1:7c:5e:25:83:f2:8f:db:6b:df:0c:5d:7e:c0:
c2:4f:48:16:20:5e:c2:c8:20:d1:a2:94:e0:4c:98:
3e:8c:66:d0:ed:36:ad:48:fc:57:6c:30:d6:ee:84:
88:1c:70:3b:a6:6b:ec:3c:3c:83:c2:45:94:5e:d6:
2e:3d:6b:2a:27:59:70:55:e4:74:70:aa:d5:87:a4:
fa:6e:43:64:b1:c1:97:24:7d:b8:af:68:a3:12:8e:
bc:74:c0:9a:f7:a6:77:7b:2c:4d:7d:ee:c8:68:ce:
31:b9:e8:28:25:54:5f:0c:fb:34:80:5c:5a:55:16:
53:1b:b9:9b:73:ad:84:68:d3:87:06:1f:19:94:f0:
7e:6f:b4:8d:f7:d1:a7:57:0d:85:f8:ef:6c:5e:66:
4f:cf:fa:20:8b:3b:74:3d:6e:45:ff:91:be:53:35:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:7A:B4:51:83:8D:1D:1F:A7:EC:B6:72:3E:D7:9C:79:A8:04:69
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:f9:e9:4b:2a:bb:cd:5a:f6:c6:33:9f:d2:45:75:30:58:
af:1a:86:67:d5:47:53:cb:34:9a:7a:55:5d:45:b3:36:8d:1a:
60:4e:fb:84:f2:ee:71:86:66:19:60:99:17:d2:e3:5b:63:98:
0d:80:ab:f9:7b:22:1c:9d:9e:72:85:da:25:a4:15:08:cd:38:
22:a2:68:7d:06:59:44:45:4e:c4:3e:24:0c:ba:d7:09:7f:4f:
62:59:f1:53:6a:60:ad:55:c4:fd:d3:86:28:df:b4:f4:24:49:
6d:c3:23:fb:10:29:e5:5d:dc:80:3a:6b:e6:56:ad:9a:32:f3:
2d:0b:be:97:bd:ab:2a:70:64:9b:3f:16:04:e3:a4:06:d5:34:
48:e2:c6:3a:30:aa:a6:33:d6:2e:31:2c:bd:ae:33:33:9f:72:
df:4f:ac:c4:fa:ed:0b:df:8e:9e:e7:f8:3d:93:d0:bc:57:76:
21:30:ad:b2:59:d1:bc:bd:98:01:a5:a5:57:d8:dd:73:3e:9e:
b9:be:fa:df:68:cf:95:94:e3:9a:93:3c:54:53:83:cf:c3:fd:
3a:ae:9b:11:ab:c8:30:29:ff:6a:6a:f5:15:38:8d:7a:20:ff:
aa:e1:70:6e:12:63:5e:7b:27:b1:52:d9:32:ef:40:e2:0e:1b:
24:98:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:31:42 2026 by rpki-client