
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json)
Hash identifier: +6m10HPjdab9dU/BbJOyymp0KGo9B9IrSHG4Bq6v+iE=
Subject key identifier: 21:DC:56:2B:FA:3B:B3:96:3E:86:DB:55:C0:DE:6E:01:68:D2:FD:4E
Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
Manifest number: 01BC
Signing time: Mon 21 Sep 2026 03:55:51 +0000
Manifest this update: Mon 21 Sep 2026 03:55:51 +0000
Manifest next update: Mon 28 Sep 2026 03:55:51 +0000
Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: Roq7ZCEagLRd3/W/u6S7S2tZJGIZtukt6IzfPCHmuO0=)
2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: dd1r65whdLrFnohkL5tSd/Xrw0Wbr5I8h1TDJtiZAoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Validity
Not Before: Sep 21 03:55:51 2026 GMT
Not After : Sep 28 03:55:51 2026 GMT
Subject: CN=6ab0aac7-4901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:82:11:58:56:fb:83:0f:17:3f:16:93:98:
90:73:4f:c8:8d:b5:78:3f:f8:53:e7:cb:da:1d:07:
5d:ae:cc:7f:47:89:9e:63:58:ae:3d:ac:c8:b8:80:
bd:e9:93:80:ea:c1:c6:b3:7e:a4:fc:af:26:8d:73:
94:e0:a0:fc:ca:c2:b0:89:27:19:57:d4:4a:6a:cc:
25:a7:6e:21:5d:c9:18:bc:a8:c8:1a:52:39:d9:47:
75:5c:61:22:c7:a6:23:42:b1:7d:2a:b6:24:98:53:
25:54:8c:1e:e6:98:29:b1:7e:df:b8:c2:43:3e:3c:
53:bc:07:49:33:f7:f2:94:32:5a:75:b7:51:bd:85:
70:58:81:4e:e1:fd:91:eb:4f:63:f5:cf:0e:61:10:
26:64:20:2f:ce:cd:88:69:b0:2c:76:bf:6f:a2:81:
05:db:af:b3:52:3c:09:6e:3d:75:9c:6c:e2:e5:a8:
2c:ec:bf:a4:55:48:3f:4f:6e:df:6c:4b:4d:9a:be:
7c:fb:00:5d:a3:94:28:f0:6b:c6:3e:4a:e0:86:25:
11:84:9c:32:3e:be:1e:ad:9f:84:b8:6d:03:fd:10:
bf:76:e3:09:20:a9:52:0e:41:c0:45:c1:d3:00:fd:
a3:5a:86:ba:6b:ab:18:55:09:09:aa:8d:57:ce:19:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:56:2B:FA:3B:B3:96:3E:86:DB:55:C0:DE:6E:01:68:D2:FD:4E
X509v3 Authority Key Identifier:
keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:0a:b9:c9:85:76:2b:d2:b5:58:5e:aa:6e:2d:12:a9:5d:ca:
15:42:53:d5:73:7d:92:05:fd:04:8b:7f:36:bd:19:66:92:a9:
ad:37:47:59:0c:40:14:31:f1:07:77:43:b4:a5:16:eb:7b:78:
ce:42:c3:32:92:1d:b1:40:7d:2f:96:3f:65:96:98:c0:b4:fd:
42:0f:3f:ce:18:1a:4b:40:c3:07:44:3d:95:00:d8:20:47:30:
88:86:94:92:0e:72:5a:cb:5d:2a:12:d2:16:3f:d0:09:65:8d:
e1:ce:ea:ba:12:d6:9f:a9:ca:28:87:67:15:7b:42:4f:d4:73:
58:5c:38:71:1c:25:01:02:20:ad:27:0a:c0:6c:ef:93:e9:6a:
db:5e:6a:b0:6f:fd:a4:5e:ad:db:4c:91:4c:8e:8a:f4:4e:11:
75:88:0f:37:36:86:bd:e0:58:6c:28:40:5e:4d:d2:12:bd:a6:
a7:37:60:9c:88:b4:c3:cf:73:dd:22:9e:98:f5:bc:35:b7:00:
37:5c:a2:51:8a:0a:27:54:03:14:d1:10:41:d6:9c:dc:f4:6c:
4d:6d:3a:52:84:e9:63:a6:be:eb:2c:e6:d3:56:73:18:53:b4:
b9:85:69:2f:14:af:46:67:c6:f7:55:96:b7:51:71:38:29:4d:
af:03:a8:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD
QTE2NjIxNjIwHhcNMjYwOTIxMDM1NTUxWhcNMjYwOTI4MDM1NTUxWjAYMRYwFAYD
VQQDEw02YWIwYWFjNy00OTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpaCEVhW+4MPFz8Wk5iQc0/IjbV4P/hT58vaHQddrsx/R4meY1iuPazIuIC9
6ZOA6sHGs36k/K8mjXOU4KD8ysKwiScZV9RKaswlp24hXckYvKjIGlI52Ud1XGEi
x6YjQrF9KrYkmFMlVIwe5pgpsX7fuMJDPjxTvAdJM/fylDJadbdRvYVwWIFO4f2R
609j9c8OYRAmZCAvzs2IabAsdr9vooEF26+zUjwJbj11nGzi5ags7L+kVUg/T27f
bEtNmr58+wBdo5Qo8GvGPkrghiURhJwyPr4erZ+EuG0D/RC/duMJIKlSDkHARcHT
AP2jWoa6a6sYVQkJqo1XzhnbmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHcViv6
O7OWPobbVcDebgFo0v1OMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2
OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T
cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEwq5yYV2K9K1WF6qbi0SqV3KFUJT1XN9kgX9BIt/Nr0ZZpKprTdHWQxAFDHx
B3dDtKUW63t4zkLDMpIdsUB9L5Y/ZZaYwLT9Qg8/zhgaS0DDB0Q9lQDYIEcwiIaU
kg5yWstdKhLSFj/QCWWN4c7quhLWn6nKKIdnFXtCT9RzWFw4cRwlAQIgrScKwGzv
k+lq215qsG/9pF6t20yRTI6K9E4RdYgPNzaGveBYbChAXk3SEr2mpzdgnIi0w89z
3SKemPW8NbcAN1yiUYoKJ1QDFNEQQdac3PRsTW06UoTpY6a+6yzm01ZzGFO0uYVp
LxSvRmfG91WWt1FxOClNrwOo+Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:41:27 2026 by rpki-client