
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier: WP1PHNnnIk1qhbsdCbXmFsdYoOP0Zz5RLjpsega4u9E=
Subject key identifier: B4:C2:F1:7C:E4:85:D2:77:B6:C3:8C:9D:4B:7E:F7:5F:AE:B2:71:A2
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0A41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number: 0A3A
Signing time: Thu 16 Apr 2026 19:37:42 +0000
Manifest this update: Thu 16 Apr 2026 19:37:41 +0000
Manifest next update: Thu 23 Apr 2026 19:37:41 +0000
Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: oE/WBa0DLwRZytz2X6Z/Gl+F1fsvIVhTSevnTyJQUR4=)
2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: fZNOUj/iAXxAo54HM0txOio7TDOqa8olAoIhUWuhgT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Validity
Not Before: Apr 16 19:37:41 2026 GMT
Not After : Apr 23 19:37:41 2026 GMT
Subject: CN=69e13a85-7b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:3a:d4:fe:6a:89:7e:63:d4:fa:08:93:bf:
81:98:e0:ec:4d:c7:c1:da:e7:31:a0:07:16:4c:d5:
97:9b:6a:f1:52:97:42:85:05:88:71:9e:f2:6e:0f:
39:e3:83:48:fa:04:a9:9e:61:d6:b4:91:f3:89:68:
43:dd:8e:69:18:9b:97:2f:86:1b:e3:4c:e5:0f:aa:
bc:27:8a:ad:e5:62:01:54:eb:74:21:d8:2f:ad:47:
10:c6:99:e5:d4:54:95:38:b1:7a:6a:89:b6:73:ac:
ff:15:ce:ac:25:e2:e7:9f:ab:61:ba:ae:cf:86:0e:
9e:4e:89:1e:09:e2:e9:97:62:8a:90:d5:76:57:0c:
f7:8b:0a:66:26:9b:fc:5f:03:ed:e4:fa:52:b7:a2:
d9:09:60:c0:de:0c:94:54:c3:b7:3c:b8:85:07:57:
21:2a:a5:99:33:0a:95:0a:1b:db:6a:84:fd:bd:c9:
43:dd:b3:4c:81:36:55:ec:70:4c:34:0c:49:64:2a:
7c:51:d9:96:f7:cb:d4:b2:19:0d:ad:08:7f:bf:55:
ec:32:93:4d:6c:07:cb:8f:c8:2d:d3:56:77:79:64:
53:02:ef:ff:7e:aa:7a:17:a2:ea:aa:8b:fe:bc:9a:
4f:da:ba:67:74:0d:3e:c9:ca:19:9d:da:33:37:b8:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C2:F1:7C:E4:85:D2:77:B6:C3:8C:9D:4B:7E:F7:5F:AE:B2:71:A2
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:bb:7e:e1:7d:53:63:93:6c:f9:65:d2:b7:5e:a4:42:b5:
ec:eb:2e:a9:1c:c8:50:0a:e0:7f:96:ea:10:3c:1d:71:77:48:
e1:d5:09:27:49:99:f1:02:79:ca:c0:5b:e0:0d:be:25:96:3e:
e6:ae:20:6f:47:81:d8:08:3e:83:50:50:00:d4:1f:63:91:ea:
bf:65:58:84:cf:e2:b6:f9:76:92:37:ea:22:f2:c9:0d:93:03:
93:2f:70:94:bc:95:31:9e:5c:bb:3a:76:43:eb:53:d3:ca:04:
75:81:a7:a6:37:e0:d3:6d:95:37:5e:20:b9:07:0c:e3:68:7d:
72:d8:de:85:14:cc:25:0b:7f:f0:e5:ce:43:01:b2:17:2c:b1:
51:2b:89:5e:f0:6f:78:d7:fc:e1:dd:6e:5f:b7:0b:a1:b7:ae:
15:66:2c:63:4e:99:cf:cd:41:0a:86:54:47:88:06:ab:fb:28:
44:d2:c5:66:b5:a4:a3:3c:5a:af:67:2a:09:a8:d2:27:62:85:
e3:c8:c6:78:3e:a1:1c:d6:79:78:97:77:28:38:1c:57:1c:9e:
4a:b7:b3:b6:32:18:90:29:9f:a0:df:dd:c0:fc:06:75:fb:dc:
9a:9d:24:54:74:08:e6:ac:89:3c:30:f8:b9:f1:a4:bd:b8:be:
a6:1c:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:03 2026 by rpki-client