
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json)
Hash identifier: lKnVKvi2pVGmK5PDshiYtTpZ9XBmR0upiKKqi6Cdbyg=
Subject key identifier: EB:03:FF:F7:32:B9:A8:43:65:CD:D8:20:43:8E:1F:AF:12:7C:E8:0A
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
Manifest number: 8E
Signing time: Mon 27 Jul 2026 09:52:25 +0000
Manifest this update: Mon 27 Jul 2026 09:52:24 +0000
Manifest next update: Mon 03 Aug 2026 09:52:24 +0000
Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: Nmwb01LUVjJFZd+yEzh+rGxC3Ed0oRZZ/PUy1qNx0eI=)
2: 921935A27F2D11F1886CE3C28DA30FBC.roa (hash: vtLEoqPGykODmNwJqfTaMIZyx7FncJ7Zotaqf3xPNUc=)
3: FB35C486750C11F18888C9906EA30FBC.roa (hash: iMmKrEFx5UWvTQKlHWJsW0wGqQTgwuqR+AggRviRcjY=)
4: 4AFCDA0C78ED11F1980AFA215CA30FBC.roa (hash: Do7+mJUxysj0mc936QuMgOA9wfEKa8mYiumIGnIuwu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Validity
Not Before: Jul 27 09:52:24 2026 GMT
Not After : Aug 3 09:52:24 2026 GMT
Subject: CN=6a672a59-ac32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:f5:fa:6c:d4:ce:fd:79:4a:cd:8a:ac:07:
bf:54:78:45:a3:b7:ed:a7:0c:39:4e:8c:6b:20:2a:
3a:26:81:47:b7:58:2f:f7:11:c4:98:21:19:a7:64:
42:21:48:54:79:28:6f:0c:d6:a0:87:bb:75:e7:5f:
c8:15:01:d4:d6:b7:ef:25:b4:74:62:04:1e:a4:4b:
25:a4:b9:e2:f5:21:dd:82:63:51:d7:6b:cf:17:8b:
a2:13:1a:70:46:be:3f:82:79:8c:fb:93:d3:4f:00:
ef:89:47:aa:34:74:d7:bd:8d:79:95:5a:72:7c:e0:
69:90:ef:42:2c:27:9b:2d:11:96:43:f5:b6:56:ff:
bd:0b:69:5a:ab:b2:c5:4c:92:f0:13:1f:0c:60:0c:
a1:09:72:72:69:64:50:d2:5e:bb:85:68:98:d3:1b:
c9:f2:bd:90:2a:ac:6a:a5:75:ba:7e:70:ac:ed:45:
47:6c:ea:6c:99:23:8f:b0:3d:b1:24:70:7e:12:c3:
b8:a1:80:2f:ba:6d:de:22:f9:53:0f:e6:22:6e:7a:
e9:ab:ff:d0:6b:60:db:86:01:68:31:e0:6e:a2:42:
5a:a7:0a:ca:79:a7:e6:cc:cb:b1:b6:d3:a7:d5:ad:
40:c1:6c:17:6d:4f:66:81:08:c4:c6:5c:55:75:86:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:FF:F7:32:B9:A8:43:65:CD:D8:20:43:8E:1F:AF:12:7C:E8:0A
X509v3 Authority Key Identifier:
keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:d1:7d:26:c0:66:bd:b7:5e:ab:87:d3:29:6b:3b:13:ed:2f:
5a:66:81:68:2f:9d:69:ec:03:b1:93:dc:d4:87:6e:8b:b7:b1:
78:0d:06:40:27:9d:0a:42:5d:c9:c6:94:99:f6:07:cc:f1:4b:
ed:9b:93:7b:6b:c7:ff:61:d9:a3:43:a1:8a:a2:99:e8:ed:28:
28:0f:f6:c1:8d:7d:6b:98:05:43:e3:c8:fd:6c:a5:fe:85:0e:
71:52:c7:ac:a1:f8:af:18:43:55:7e:51:e3:4a:17:f9:8b:6e:
0c:a1:d8:c4:86:36:87:1c:90:12:be:aa:97:c6:15:c8:60:17:
fc:56:90:9e:45:33:48:cb:cc:f1:72:4d:77:20:ab:be:1a:6b:
04:dd:cb:09:5d:ee:62:e2:44:82:f5:fe:c8:e3:df:9f:ba:06:
a8:fb:bb:11:10:9b:95:5c:22:1b:12:79:42:10:fe:29:94:7d:
ca:c1:6e:64:77:b3:d6:cc:b6:14:bd:5f:b6:c0:a1:d8:4e:dc:
1c:ca:69:51:f0:e2:83:05:96:db:1a:c3:12:b9:67:a5:cb:99:
7c:47:58:f3:ed:3f:4e:d5:86:ee:3a:e8:f0:af:15:e4:f4:53:
da:68:45:00:4f:04:54:c1:6f:9d:1b:d2:82:2d:97:e4:db:28:
4c:7f:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:06 2026 by rpki-client