
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json)
Hash identifier: f4yNWByQdYylhw5AN4/ftLyftXDNrnIe3nosm7jtwOk=
Subject key identifier: 6D:F1:F3:D3:A8:E9:82:36:B9:AD:CE:51:86:11:5C:89:0E:1D:E4:98
Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
Manifest number: 0158
Signing time: Mon 27 Jul 2026 06:57:49 +0000
Manifest this update: Mon 27 Jul 2026 06:57:48 +0000
Manifest next update: Mon 03 Aug 2026 06:57:48 +0000
Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: 2yM7sKSv6/7YsLS/41r0EImtXJarqRF7R2gt5PDcX7A=)
2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: BOLBqg6HB+WZgDmASuick5DSh+pZdhSvC9fPbTzN5P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Validity
Not Before: Jul 27 06:57:48 2026 GMT
Not After : Aug 3 06:57:48 2026 GMT
Subject: CN=6a67016c-c5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:f3:d8:12:13:30:ac:28:f0:8b:57:29:7b:
30:03:a7:d3:b7:57:54:7d:9c:c5:09:79:95:08:3d:
99:c0:98:ee:0f:12:07:1e:a5:2b:9f:de:6c:4b:60:
3c:ea:08:4a:5b:2f:53:90:4e:9e:21:2b:45:e6:ad:
55:29:d4:7d:7f:cd:55:8d:57:59:00:b4:36:01:5d:
a5:01:33:d3:3f:4b:3c:6c:fe:8c:75:f0:4a:78:2a:
ce:c2:06:88:18:87:75:81:e4:48:5f:ce:50:dd:76:
ba:d6:da:bb:08:71:ab:3f:07:c6:ab:42:b7:c6:36:
5b:42:96:05:7f:92:ed:18:e4:34:62:bd:f8:da:65:
2a:43:cc:38:d6:bd:19:76:c6:e2:36:fc:9b:68:34:
0d:fb:f2:cc:6c:ee:2e:e9:9c:f9:a3:9b:e3:a4:45:
41:5b:a0:91:79:52:9d:72:3e:cd:29:74:bb:f7:80:
6d:b5:14:f1:06:66:32:f0:6d:2f:0a:7f:95:a0:af:
40:ae:51:ec:8c:fc:a8:65:80:1c:78:57:6a:a0:cd:
69:85:3f:ca:63:47:2a:23:e6:0a:f6:db:8e:63:a7:
10:b0:f8:2e:12:97:43:9e:13:b9:5d:39:c4:e0:e3:
c5:53:e6:a1:a6:e1:c4:df:c4:23:31:57:c0:ca:14:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:F3:D3:A8:E9:82:36:B9:AD:CE:51:86:11:5C:89:0E:1D:E4:98
X509v3 Authority Key Identifier:
keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ee:12:9a:b6:d1:d4:f5:ba:fd:68:12:55:88:d8:69:5f:af:
57:1a:bc:34:b5:da:25:cb:92:b3:7d:a3:b9:75:e0:e3:71:56:
9c:33:ab:b4:60:10:00:f8:cf:17:c0:05:79:67:1a:a8:51:65:
42:17:75:ba:67:ba:85:b4:ba:fd:30:0b:92:f8:bf:5c:ba:fb:
07:a6:57:8c:43:11:42:cc:ac:c7:2d:b3:4c:91:6d:71:96:3e:
89:a6:f6:97:56:87:f1:3e:9e:03:c7:a7:c1:23:65:e9:f3:be:
13:7b:d4:cf:96:f9:da:a4:00:41:c9:ec:c7:08:53:96:5e:d7:
65:69:05:9e:2a:d4:c8:17:e3:1d:5c:e2:4d:c5:52:78:0d:c9:
50:e0:85:85:79:7d:de:cd:9e:c7:9a:73:3b:c4:9c:94:40:a5:
c2:5e:1b:c3:67:51:5f:7a:da:9f:2a:b7:cf:c6:1d:ce:9d:fe:
ac:75:66:8d:59:bf:c1:a1:02:8f:a5:2b:bb:44:df:d0:5f:ac:
93:1d:91:df:e8:59:1e:c6:f2:6c:dd:ab:4d:7d:8a:ec:14:f0:
ea:17:a9:e3:bb:bc:5c:37:cd:89:a2:cd:ed:51:7e:01:d6:b0:
a0:60:3f:55:43:2f:10:c8:13:cc:ae:87:f6:d1:15:c0:10:01:
71:d8:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:05:34 2026 by rpki-client