
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: LjhSXpp7ciIIlk9eV9ok5ZbTyjaJ5QvNozmmITndPtI=
Subject key identifier: 99:5B:82:90:29:DD:DF:54:FC:32:36:9D:5A:60:26:34:BE:DF:E1:7F
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: EA
Signing time: Sat 13 Jun 2026 06:33:01 +0000
Manifest this update: Sat 13 Jun 2026 06:33:00 +0000
Manifest next update: Sat 20 Jun 2026 06:33:00 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: LoG+HREtO6RrxxTXagEVd3+5+cGC/EREcDbYZ2Z5QZU=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Jun 13 06:33:00 2026 GMT
Not After : Jun 20 06:33:00 2026 GMT
Subject: CN=6a2cf99d-87ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:a5:66:05:6e:28:6a:98:96:0b:6b:a8:89:
c3:0b:b7:07:50:c2:23:d2:11:51:be:83:2b:5f:fb:
5f:31:70:43:1c:4c:91:0b:ec:7e:e9:45:19:d1:e1:
e6:02:10:40:54:83:ed:92:2e:26:c7:33:e0:2f:fe:
f1:c7:b3:01:c0:4f:6c:68:48:4e:4d:a0:c6:19:92:
ac:d1:15:e0:b2:de:06:99:db:09:8d:c4:a3:65:71:
4b:ef:f1:d8:4e:13:49:3a:bf:c1:31:33:34:35:ae:
e0:f9:65:3a:19:70:1f:60:22:b8:e0:de:8e:ae:ea:
f7:b5:af:60:f2:f3:46:cc:41:b7:86:23:84:fd:66:
83:f6:82:ad:f0:d6:d7:c7:8b:bf:98:31:2b:8c:22:
87:bb:5d:22:dc:3a:2c:0e:85:f7:fa:17:e7:c4:6b:
4a:ab:09:b4:7a:80:5b:c8:4a:6d:25:2f:2b:15:09:
bb:c1:28:95:74:8b:9b:73:15:5f:61:95:34:92:ff:
90:f0:a7:54:20:75:74:65:ce:94:1b:0a:89:bf:1d:
5e:05:e0:28:e0:b6:88:80:a6:43:35:7e:3a:98:56:
20:47:d4:f6:0a:0b:51:7c:2f:3a:16:19:ac:54:81:
70:da:1a:b6:68:48:d0:8b:7e:3a:19:ef:56:b5:48:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:82:90:29:DD:DF:54:FC:32:36:9D:5A:60:26:34:BE:DF:E1:7F
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:07:5f:a6:3a:2d:66:2f:0d:a4:39:2c:cb:f7:05:96:c7:
a3:94:cc:c1:97:77:47:1b:cd:c0:cc:4b:d4:af:b0:b7:e1:56:
25:52:35:47:74:0d:5c:31:7d:54:a0:c2:d0:b6:b8:fa:71:13:
1f:3c:e4:e2:e4:6d:67:e0:f7:b8:d7:1f:e2:26:a0:5a:89:5f:
ed:cf:ab:d9:cf:09:be:7b:ab:a1:77:9f:ac:b3:d5:fc:a2:25:
db:0d:16:f4:73:d7:6c:bd:e2:88:5b:a0:c0:44:c3:b7:20:df:
da:25:86:36:6f:bb:7c:13:b4:c1:43:13:7f:8c:93:5c:b1:10:
69:36:68:28:7a:e8:b9:ed:59:62:3a:16:af:f8:36:cc:8a:68:
00:92:09:84:b1:c6:29:51:5b:8c:2b:b6:63:2d:14:a2:c7:52:
e2:6e:4a:67:f1:32:d2:96:6f:12:fb:c4:e3:95:8d:14:2e:24:
10:2b:94:15:d7:a0:d5:2a:c0:0e:03:ed:c9:01:8b:8b:90:4a:
f2:20:81:95:a2:0d:1e:d9:a3:a9:a0:70:9d:99:2e:f1:f8:52:
b6:fe:67:eb:1f:21:cc:89:b9:79:31:60:d2:f0:7c:47:07:16:
a0:b9:cc:a3:67:6c:78:4d:2c:30:7e:45:38:a8:ab:a2:a6:c5:
05:29:0f:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTYyODUxMTAvBgNVBAUTKDJFMDM3RjIyMUM5QThENUZEQ0M4OEM0M0NBOEIyNUQ0
NDM2QkIwMzkwHhcNMjYwNjEzMDYzMzAwWhcNMjYwNjIwMDYzMzAwWjAYMRYwFAYD
VQQDEw02YTJjZjk5ZC04N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkhKlZgVuKGqYlgtrqInDC7cHUMIj0hFRvoMrX/tfMXBDHEyRC+x+6UUZ0eHm
AhBAVIPtki4mxzPgL/7xx7MBwE9saEhOTaDGGZKs0RXgst4GmdsJjcSjZXFL7/HY
ThNJOr/BMTM0Na7g+WU6GXAfYCK44N6Orur3ta9g8vNGzEG3hiOE/WaD9oKt8NbX
x4u/mDErjCKHu10i3DosDoX3+hfnxGtKqwm0eoBbyEptJS8rFQm7wSiVdIubcxVf
YZU0kv+Q8KdUIHV0Zc6UGwqJvx1eBeAo4LaIgKZDNX46mFYgR9T2CgtRfC86Fhms
VIFw2hq2aEjQi346Ge9WtUiCcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlbgpAp
3d9U/DI2nVpgJjS+3+F/MB8GA1UdIwQYMBaAFC4DfyIcmo1f3MiMQ8qLJdRDa7A5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjI4NS84QzI1OEIxMjAy
N0IxMUYwQTk0NkVEMzRDNEY5QUUwMi9MZ05fSWh5YWpWX2N5SXhEeW9zbDFFTnJz
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjI4NS84QzI1OEIxMjAyN0IxMUYwQTk0NkVEMzRDNEY5QUUwMi9MZ05fSWh5YWpW
X2N5SXhEeW9zbDFFTnJzRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAma0HX6Y6LWYvDaQ5LMv3BZbHo5TMwZd3RxvNwMxL1K+wt+FWJVI1R3QNXDF9
VKDC0La4+nETHzzk4uRtZ+D3uNcf4iagWolf7c+r2c8JvnuroXefrLPV/KIl2w0W
9HPXbL3iiFugwETDtyDf2iWGNm+7fBO0wUMTf4yTXLEQaTZoKHroue1ZYjoWr/g2
zIpoAJIJhLHGKVFbjCu2Yy0UosdS4m5KZ/Ey0pZvEvvE45WNFC4kECuUFdeg1SrA
DgPtyQGLi5BK8iCBlaINHtmjqaBwnZku8fhStv5n6x8hzIm5eTFg0vB8RwcWoLnM
o2dseE0sMH5FOKiroqbFBSkP7w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:25:26 2026 by rpki-client