
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier: vtRHII/ivRUI3CZCyyZckKXK3FKM4FcQevqdItddYj4=
Subject key identifier: 42:63:D9:09:C1:76:9A:A2:7A:2F:0F:17:89:8C:A0:47:1C:FF:BA:4F
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number: 016F
Signing time: Sat 13 Jun 2026 04:45:09 +0000
Manifest this update: Sat 13 Jun 2026 04:45:08 +0000
Manifest next update: Sat 20 Jun 2026 04:45:08 +0000
Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: Y5W9Ut2Fh89r7eFJhTBJ1z6YoeJiGDKRnvhjWvPqfgY=)
2: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=)
3: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Validity
Not Before: Jun 13 04:45:08 2026 GMT
Not After : Jun 20 04:45:08 2026 GMT
Subject: CN=6a2ce055-7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:39:54:3e:ff:55:6d:f5:dd:48:d3:29:d1:
ae:38:08:c0:8a:d5:8b:e1:66:9d:6a:3f:24:cb:0b:
c6:b3:63:1d:a2:7c:a4:bb:53:ec:37:97:17:2d:9b:
f4:a3:69:67:34:f3:5f:ab:ea:1c:e5:f7:9b:1d:76:
44:07:74:65:01:35:f4:83:8f:6a:0d:93:6e:94:1d:
0a:3e:f4:a5:35:86:75:00:cb:99:e0:a4:01:80:d0:
ec:07:9d:e9:31:4e:0e:c7:77:ad:71:8c:fd:75:f5:
a4:67:8d:55:a9:0c:db:1f:0c:8a:b2:26:f9:f6:be:
df:80:78:03:05:7f:30:b6:bf:09:58:75:e1:bb:bf:
38:44:4a:c1:d4:b8:b2:cc:2c:0a:8a:22:2f:88:34:
ba:70:5f:05:c2:f4:2b:43:85:9d:fc:98:04:80:2b:
61:6d:bc:24:be:60:79:29:e0:f5:75:b2:06:84:80:
4a:8d:0e:58:e4:0b:ec:90:ce:d6:28:54:51:f1:0f:
18:6b:8f:5d:f2:2e:c9:4c:9a:2d:15:37:ce:c7:02:
06:7b:71:99:21:e1:67:80:c3:e7:66:c5:90:1c:f4:
3e:2d:76:60:b9:19:7b:59:bf:ec:93:8a:34:bc:e1:
e3:af:0f:cc:ca:63:ef:fe:c1:df:81:5e:87:21:0b:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:63:D9:09:C1:76:9A:A2:7A:2F:0F:17:89:8C:A0:47:1C:FF:BA:4F
X509v3 Authority Key Identifier:
keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:3c:27:70:71:85:98:74:3b:e6:40:c5:bc:9c:3c:ca:e0:
ec:0f:61:8c:00:cd:95:ba:10:00:5b:9e:4e:2d:16:1b:ea:f2:
fb:3d:80:80:2d:b9:71:b9:2b:a6:bd:51:ce:b1:a9:9c:61:f6:
a7:b1:00:45:4d:2f:41:12:2e:b1:fc:b3:1b:50:65:6c:6d:f4:
39:03:d5:59:2d:83:33:c5:08:25:af:7e:5b:6b:4d:6a:84:32:
b6:a0:99:76:7f:fd:21:19:98:9c:31:bf:90:7d:7b:e7:6c:ff:
19:f0:c7:01:7d:08:dc:64:e3:2a:37:46:11:46:c9:ac:65:de:
a3:a7:c7:94:64:66:16:47:fe:c0:58:11:da:ea:5d:6e:d6:43:
a0:02:ab:32:e5:e4:47:dc:5c:48:cc:9e:4a:9e:e4:33:f6:fc:
9e:d1:53:69:49:ce:d5:83:9a:97:a7:7a:39:b8:b9:bf:17:eb:
87:a2:b4:1b:36:3a:20:a0:de:bf:f5:dd:27:fe:f6:a2:d0:33:
9c:3e:5f:bd:d8:51:9a:4f:ff:32:ca:3e:1c:9f:31:95:f5:6f:
fe:fa:a9:78:1a:4f:3d:1b:32:d8:ae:91:64:5c:92:66:1b:2a:
13:2c:42:a1:88:54:7e:b9:ba:df:6e:c2:d2:11:a5:b7:d4:16:
d2:df:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:22 2026 by rpki-client