
$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json)
Hash identifier: gHuZnkuj1FqpXqOqVBbJoJySvqdkEMGaVVG0Gx3Or+4=
Subject key identifier: 16:6E:ED:D0:56:D8:1C:BC:5D:BB:20:FD:F6:7D:D2:DC:AE:21:30:0C
Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Certificate serial: 2618
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
Manifest number: 2607
Signing time: Sat 18 Apr 2026 15:39:52 +0000
Manifest this update: Sat 18 Apr 2026 15:39:51 +0000
Manifest next update: Sat 25 Apr 2026 15:39:51 +0000
Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: 1R/XXPROL1i59hvM9WGi8pND26nRIMKWw6DdUCZgzlY=)
2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: KRl8ea3V85bmsmtzGvJljwpOXv+hiqOfQdmXTFhqfM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9752 (0x2618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Validity
Not Before: Apr 18 15:39:51 2026 GMT
Not After : Apr 25 15:39:51 2026 GMT
Subject: CN=69e3a5c8-b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:ce:24:f8:9c:ff:67:af:42:d2:4a:2b:af:
61:86:e5:ff:2b:3a:1f:2f:37:10:20:4e:b3:d0:c7:
f4:bb:7c:4e:58:43:8c:21:9c:b0:04:b9:5a:3a:d9:
de:6b:37:94:73:aa:43:24:b1:bb:a2:fc:18:68:b5:
27:59:d3:ef:62:22:cd:4a:b7:0e:12:be:ac:66:79:
6f:22:84:d5:8c:26:40:41:b9:21:27:cf:d2:6c:f8:
3c:ab:bd:c7:53:d8:01:3e:d4:34:3e:a3:94:a4:52:
97:22:d7:e5:a7:14:24:49:42:81:9f:ae:6d:34:98:
c9:d8:ce:95:31:9c:62:74:f0:46:9b:8c:a7:56:bc:
9d:a5:5c:c0:7a:0c:a3:12:23:72:0d:41:f6:93:38:
fe:c9:90:46:18:13:3d:61:9c:b4:b7:21:b3:68:24:
54:bf:81:4d:05:ae:25:e9:84:0d:45:a9:55:91:11:
43:d2:11:ee:c9:11:7e:31:7b:d3:f5:89:24:4e:f9:
eb:77:e7:13:6d:f3:1e:b0:e8:d4:ca:91:25:a0:1a:
2b:8d:9f:ef:90:58:66:d4:b5:82:a9:25:06:3e:0e:
49:6a:e9:7a:28:bc:47:76:1c:6d:85:14:8c:36:e7:
db:96:a6:ee:3a:e0:0a:8c:22:17:f6:2c:53:2d:8e:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6E:ED:D0:56:D8:1C:BC:5D:BB:20:FD:F6:7D:D2:DC:AE:21:30:0C
X509v3 Authority Key Identifier:
keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:cd:f8:66:4b:e9:3f:00:b1:9c:fd:ab:69:c0:0d:6b:88:bf:
45:3e:fa:1e:d4:c6:8f:46:90:4e:55:1a:6a:98:09:3c:0c:5d:
6f:14:cc:d9:0e:2d:bf:7a:db:8a:87:db:bc:b6:2f:2b:88:d4:
52:07:5f:a1:10:4a:c7:42:dd:a5:35:39:5e:24:94:ae:90:ff:
d8:17:96:8b:03:15:56:a3:34:ad:f2:6b:40:59:46:fa:af:0a:
37:ce:22:18:93:15:18:17:2d:84:26:8e:ec:40:ad:dd:5f:a5:
d4:66:be:a9:d9:3a:b2:4a:b9:52:b1:57:1c:f4:6f:5e:0b:a3:
60:4c:f8:d7:91:9f:b8:ff:3f:c4:bd:97:0f:1b:d4:cc:be:19:
6e:19:e3:8b:de:6a:10:63:dd:04:97:4f:bf:a3:42:da:d2:89:
6a:be:16:84:99:6c:e5:cc:01:7e:26:9c:f0:43:92:bf:18:d4:
21:64:8d:b4:3a:65:79:6c:76:b9:1f:c2:37:4d:39:47:4c:01:
89:c5:2c:93:e6:a3:42:82:11:2a:7d:cd:f5:b9:a7:78:30:95:
bb:cb:ad:bc:4b:56:a9:45:e2:c1:45:84:c3:37:f5:4b:6d:97:
e5:c8:15:ca:88:fd:c5:87:32:fa:c3:a0:db:a0:d8:d4:6c:79:
28:f7:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:35 2026 by rpki-client