
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json)
Hash identifier: 2YBF7rYzGEI+8f2amxbNmA+nsVCvNNGlIQNsDNQAf/g=
Subject key identifier: B9:C9:86:DF:21:72:CE:E9:83:27:8C:13:BF:E0:6B:E5:18:71:7B:35
Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
Manifest number: 016B
Signing time: Fri 17 Apr 2026 04:31:24 +0000
Manifest this update: Fri 17 Apr 2026 04:31:23 +0000
Manifest next update: Fri 24 Apr 2026 04:31:23 +0000
Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: /SASV6Hadf0WMndacwQA510wQWdO+P7B1Uisr14jvYk=)
2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Validity
Not Before: Apr 17 04:31:23 2026 GMT
Not After : Apr 24 04:31:23 2026 GMT
Subject: CN=69e1b79b-5095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:02:ed:f8:e7:1a:f5:82:88:64:c2:5c:66:
c6:e6:f0:fb:c4:2f:b1:0e:16:47:ab:ee:21:9a:7d:
cd:bc:cf:53:30:46:e4:ed:a1:a3:63:2a:24:10:b1:
1c:30:c3:81:fc:d1:74:24:a7:de:62:40:13:6d:c3:
71:79:b4:41:4e:37:79:f3:ff:69:ab:41:2f:32:b2:
4c:bc:58:c0:c1:01:b4:ca:c8:81:dc:b7:ab:a5:fc:
c6:1c:06:6b:1e:f4:60:a1:bd:5b:d9:f0:0b:39:2f:
64:8b:cf:00:ee:80:d5:eb:3d:f3:7a:40:5d:bb:a2:
19:ef:8a:dc:9a:29:13:b0:9e:74:e8:1c:13:3f:76:
2a:1b:c3:bc:2e:98:e9:12:68:24:ad:44:33:d6:4b:
00:e1:97:99:74:06:41:a7:fe:41:36:b9:64:ca:bd:
fe:47:4a:0d:c7:6e:ac:f5:7a:ba:8a:d3:c9:38:d2:
c2:af:a7:0e:86:b3:5e:9a:c8:60:f0:62:67:ab:36:
25:df:42:2a:5c:51:43:04:5e:50:e7:bf:fd:b7:80:
91:60:6e:e6:bd:f5:3b:91:77:a4:00:16:5e:b1:04:
d6:55:fb:fe:64:54:75:d2:ed:a1:d8:ab:d5:3f:fa:
57:c0:94:b6:b8:44:1b:bd:c2:e2:c4:ed:a1:5e:bb:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C9:86:DF:21:72:CE:E9:83:27:8C:13:BF:E0:6B:E5:18:71:7B:35
X509v3 Authority Key Identifier:
keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ef:e2:db:e1:81:65:53:b9:98:3e:df:2e:35:fd:4d:50:29:
94:a8:3c:97:ce:0b:15:87:58:cd:20:01:ed:00:ed:09:5a:13:
fb:9a:ae:52:fe:58:d0:f7:10:c6:3f:a5:82:30:c8:f4:eb:78:
0e:78:9a:c0:da:cc:97:46:79:cf:b5:a3:4a:d1:77:e4:f8:10:
b7:2e:0c:25:5e:65:b2:da:a1:ee:13:2a:7b:7f:32:85:04:c5:
11:20:05:84:3e:52:41:00:c0:21:82:a8:f0:f5:14:ca:09:96:
0e:27:d1:6a:59:1e:6f:8e:59:39:4e:50:81:76:62:92:e6:aa:
95:ab:5b:29:e8:ee:e2:52:84:e2:7d:96:24:ba:65:9e:e1:de:
10:98:4d:7e:b0:18:d9:79:1b:c3:12:07:98:36:bf:0b:dd:05:
4e:83:22:55:3d:ea:12:56:93:08:6c:39:d6:da:10:ef:5d:18:
31:2c:44:e2:1b:68:26:5c:ca:79:a2:d5:e2:df:e9:49:42:b3:
58:b2:dd:bb:03:84:03:70:e8:98:69:9d:05:ae:c3:21:83:2e:
ed:23:83:7a:41:f9:88:13:7a:ff:b9:38:57:3d:a6:6b:34:70:
8e:c0:29:d1:8c:24:7e:85:25:af:c0:08:e4:bd:3d:52:b2:b6:
f8:70:54:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD
QTE2NjIxNjIwHhcNMjYwNDE3MDQzMTIzWhcNMjYwNDI0MDQzMTIzWjAYMRYwFAYD
VQQDEw02OWUxYjc5Yi01MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWAC7fjnGvWCiGTCXGbG5vD7xC+xDhZHq+4hmn3NvM9TMEbk7aGjYyokELEc
MMOB/NF0JKfeYkATbcNxebRBTjd58/9pq0EvMrJMvFjAwQG0ysiB3LerpfzGHAZr
HvRgob1b2fALOS9ki88A7oDV6z3zekBdu6IZ74rcmikTsJ506BwTP3YqG8O8Lpjp
EmgkrUQz1ksA4ZeZdAZBp/5BNrlkyr3+R0oNx26s9Xq6itPJONLCr6cOhrNemshg
8GJnqzYl30IqXFFDBF5Q57/9t4CRYG7mvfU7kXekABZesQTWVfv+ZFR10u2h2KvV
P/pXwJS2uEQbvcLixO2hXrtoNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnJht8h
cs7pgyeME7/ga+UYcXs1MB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2
OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T
cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAme/i2+GBZVO5mD7fLjX9TVAplKg8l84LFYdYzSAB7QDtCVoT+5quUv5Y0PcQ
xj+lgjDI9Ot4DniawNrMl0Z5z7WjStF35PgQty4MJV5lstqh7hMqe38yhQTFESAF
hD5SQQDAIYKo8PUUygmWDifRalkeb45ZOU5QgXZikuaqlatbKeju4lKE4n2WJLpl
nuHeEJhNfrAY2XkbwxIHmDa/C90FToMiVT3qElaTCGw51toQ710YMSxE4htoJlzK
eaLV4t/pSUKzWLLduwOEA3DomGmdBa7DIYMu7SODekH5iBN6/7k4Vz2mazRwjsAp
0YwkfoUlr8AI5L09UrK2+HBUFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:54 2026 by rpki-client