
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier: GsbZFLkCvLP4501Co0Wbies9aPO9rDYu7pce52GHOoY=
Subject key identifier: 2F:2F:39:69:05:C9:5E:01:0F:79:D5:7F:34:CF:04:DE:4C:7D:C3:A7
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0A29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number: 0A22
Signing time: Mon 02 Mar 2026 02:20:00 +0000
Manifest this update: Mon 02 Mar 2026 02:19:59 +0000
Manifest next update: Mon 09 Mar 2026 02:19:59 +0000
Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: 1PyjEAnXRWgZue+Ur/s/IRPu2wbuB/uNnSvckYMPG6U=)
2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: fZNOUj/iAXxAo54HM0txOio7TDOqa8olAoIhUWuhgT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2601 (0xa29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Validity
Not Before: Mar 2 02:19:59 2026 GMT
Not After : Mar 9 02:19:59 2026 GMT
Subject: CN=69a4f3d0-9b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:74:2b:8f:a9:ba:ec:6b:d9:0c:00:94:ff:
46:42:3c:ea:71:1d:09:47:54:a3:af:8c:b8:a9:fc:
bb:41:5e:34:e9:53:e4:bc:ba:b3:a6:41:06:6f:ed:
1c:0c:6b:ca:13:34:72:6a:9c:cf:a4:86:ec:03:08:
28:3d:87:8b:5d:f0:51:9a:b9:d6:9b:09:ca:a2:11:
d1:32:d7:9e:6c:41:6d:05:5d:f0:41:8a:0d:de:f3:
da:17:8b:aa:ce:7f:8b:b3:ad:c4:dc:73:f3:33:4c:
ef:b0:e3:8f:c0:b9:4f:66:96:33:a3:60:91:95:1b:
ac:c9:9c:b9:d8:15:87:8e:62:09:5a:fa:d3:48:c9:
b5:dc:e7:24:c9:73:30:d5:8d:29:18:52:cb:f8:07:
f6:f4:57:69:e1:f8:00:10:26:6a:51:e2:05:06:85:
05:b4:09:b7:b7:88:05:78:98:64:99:37:0f:17:ca:
96:27:14:0d:3f:30:ed:14:4b:7a:dc:65:cf:92:99:
e7:b7:a7:0f:c9:aa:75:78:f1:82:8e:36:ed:fe:ca:
e8:b9:60:64:55:6c:40:9c:a0:44:25:1e:78:e7:3f:
21:6f:65:9c:a7:4e:43:c0:33:d6:68:7b:19:6a:70:
72:89:ca:e1:97:3b:e3:2d:af:8c:ae:29:ca:b8:47:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2F:39:69:05:C9:5E:01:0F:79:D5:7F:34:CF:04:DE:4C:7D:C3:A7
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:aa:15:f0:8f:ac:06:59:da:66:be:52:f1:f5:c7:c0:42:a7:
93:b5:6f:88:1d:28:29:96:ba:f8:55:3c:e3:a9:5b:ff:c6:87:
3a:f2:d4:d9:c5:9d:e1:db:7e:99:4e:4e:29:15:ba:6c:d3:ce:
57:c9:3a:ed:9a:df:d5:95:bd:82:90:77:34:15:26:91:18:26:
17:e5:5d:74:80:3a:a8:71:34:2d:75:6b:7c:08:45:08:bb:fd:
c7:e4:95:d2:c0:52:3a:f6:e8:d7:c3:b1:e4:9a:d4:78:1c:5b:
c6:39:38:27:1a:27:fa:bd:5c:57:f5:34:b6:1e:c5:7e:23:85:
af:31:90:b0:bb:88:57:01:35:9f:d6:39:29:61:2b:fb:65:82:
a4:1b:05:e9:df:86:11:cb:70:0e:19:5f:d3:08:c0:0b:34:8e:
b9:0e:ca:99:09:9d:c7:2a:56:d5:18:96:76:96:53:9d:d0:69:
16:1b:47:9d:60:ed:ef:ce:5f:39:d6:4d:04:23:46:ed:d3:a8:
10:89:84:b5:10:f8:6a:a9:81:56:c8:ae:74:c3:5c:dd:1f:01:
64:0d:ba:46:ad:cd:cf:6c:9d:63:74:af:b7:32:21:3e:74:55:
44:4f:6b:81:6e:39:ea:fe:c8:0e:b5:81:6a:ea:3f:a7:f9:5a:
d6:e3:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:04 2026 by rpki-client