
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: 9tqBtP7GUgmTLTkHjSsVba00SzK0lgwoUSLScrgN1g4=
Subject key identifier: 2B:FD:21:45:F6:20:54:C1:D4:9B:10:6B:0B:5D:BA:EC:09:B3:BA:04
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 02A1
Signing time: Mon 27 Jul 2026 02:57:04 +0000
Manifest this update: Mon 27 Jul 2026 02:57:04 +0000
Manifest next update: Mon 03 Aug 2026 02:57:04 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: ACVqS1jAwArJnvrs9n9QBlKzM8sxXoqosQ21kK8Fjrs=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Jul 27 02:57:04 2026 GMT
Not After : Aug 3 02:57:04 2026 GMT
Subject: CN=6a66c900-84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:29:a5:61:2f:a4:02:dc:72:7e:49:f0:7d:
cc:fe:6a:a4:32:49:f5:d1:42:2f:70:ce:35:a7:85:
c0:5f:5f:44:b5:54:a5:ef:1c:0e:65:d5:de:d9:dc:
05:1f:df:95:4a:85:59:76:19:8c:b1:4c:a7:c7:a1:
cc:01:c4:b4:ea:18:ca:1a:44:5f:59:d2:c3:26:4b:
31:da:45:f3:42:12:e0:7e:f1:ba:5b:fa:34:01:be:
f9:db:43:ad:ef:3e:69:13:51:1d:a8:e2:b1:5e:e4:
81:ba:1f:c8:27:04:a8:88:65:35:8b:5e:28:48:9b:
0f:5a:d7:fb:b2:a4:30:aa:28:eb:bc:41:10:c5:31:
e5:a6:68:37:e8:6e:1e:90:29:56:2e:b4:0e:f1:99:
c8:56:05:f7:d7:98:e0:a7:3f:50:bf:51:22:65:05:
7b:38:73:ba:35:64:60:bb:b0:8d:a6:69:63:fe:11:
f8:7c:41:e6:2b:c3:45:e8:48:44:d5:91:90:61:03:
34:56:43:64:52:91:79:ab:86:81:7c:d3:2a:91:71:
97:a0:66:07:c5:6c:f8:2f:7e:3f:6a:f0:c0:c1:6b:
8f:c0:30:db:d0:dd:cc:0c:1b:a0:a3:a5:17:00:ee:
fc:ee:35:0f:bf:e4:dd:0c:45:75:4e:1f:1c:0d:ab:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:21:45:F6:20:54:C1:D4:9B:10:6B:0B:5D:BA:EC:09:B3:BA:04
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:81:2d:78:98:07:f5:50:18:bb:65:a2:33:ec:22:89:ec:72:
0e:58:10:77:82:8a:8b:e7:2a:fd:d2:e8:f6:b5:77:5f:8a:f5:
4c:fd:7c:d8:c5:f5:2a:6b:18:65:a1:18:89:a5:89:95:4c:3c:
fe:cb:b6:f0:80:0d:e9:99:66:ec:bb:6b:0e:3b:ba:c5:72:4a:
f3:77:d1:f1:22:97:0b:34:a6:57:c4:e0:a4:4e:26:38:d4:bb:
eb:09:67:89:d0:88:e9:db:10:c7:0f:5b:0a:ac:75:57:ce:26:
c1:88:76:06:a5:5a:f4:f6:0d:80:98:ac:ad:c3:35:41:e8:72:
6b:5a:59:97:34:69:d1:7e:8e:b0:51:52:c4:2a:8f:1a:e5:db:
a1:44:09:1b:48:8b:39:7b:33:48:85:1f:bf:a2:a1:10:8c:ac:
2b:e0:cd:b6:37:09:6b:60:02:c1:97:ff:9d:ab:2c:ed:55:a2:
34:68:fa:90:fc:35:6d:eb:0d:ad:4d:f5:11:6c:0e:8e:fe:7c:
1d:f0:4f:52:e0:cb:8e:72:bd:38:03:56:34:64:40:33:0c:9d:
89:17:0a:50:0f:b8:ae:28:7a:80:e9:de:85:28:36:38:6e:50:
28:26:4c:b4:59:71:b0:90:99:02:cc:62:ea:f3:08:97:29:09:
d0:dd:50:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB
Q0Y2RDIyQjYwHhcNMjYwNzI3MDI1NzA0WhcNMjYwODAzMDI1NzA0WjAYMRYwFAYD
VQQDEw02YTY2YzkwMC04NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKQppWEvpALccn5J8H3M/mqkMkn10UIvcM41p4XAX19EtVSl7xwOZdXe2dwF
H9+VSoVZdhmMsUynx6HMAcS06hjKGkRfWdLDJksx2kXzQhLgfvG6W/o0Ab7520Ot
7z5pE1EdqOKxXuSBuh/IJwSoiGU1i14oSJsPWtf7sqQwqijrvEEQxTHlpmg36G4e
kClWLrQO8ZnIVgX315jgpz9Qv1EiZQV7OHO6NWRgu7CNpmlj/hH4fEHmK8NF6EhE
1ZGQYQM0VkNkUpF5q4aBfNMqkXGXoGYHxWz4L34/avDAwWuPwDDb0N3MDBugo6UX
AO787jUPv+TdDEV1Th8cDauhcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCv9IUX2
IFTB1JsQawtduuwJs7oEMB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0
RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUQ1Mi82MTJCNjdBQzg0RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85
U01FeDBJWUs4c0dzOXRJclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl4EteJgH9VAYu2WiM+wiiexyDlgQd4KKi+cq/dLo9rV3X4r1TP182MX1KmsY
ZaEYiaWJlUw8/su28IAN6Zlm7LtrDju6xXJK83fR8SKXCzSmV8TgpE4mONS76wln
idCI6dsQxw9bCqx1V84mwYh2BqVa9PYNgJisrcM1Qehya1pZlzRp0X6OsFFSxCqP
GuXboUQJG0iLOXszSIUfv6KhEIysK+DNtjcJa2ACwZf/nass7VWiNGj6kPw1besN
rU31EWwOjv58HfBPUuDLjnK9OANWNGRAMwydiRcKUA+4rih6gOnehSg2OG5QKCZM
tFlxsJCZAsxi6vMIlykJ0N1QiQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:43 2026 by rpki-client