
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier: 9yH6DIyy8c9KjzqRVCF6kauKWMxmoqXjnOiTW3XIDQI=
Subject key identifier: C2:D7:25:EC:51:36:2D:9B:12:CE:BB:B0:E0:DF:CC:A2:DF:B4:33:43
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number: 0185
Signing time: Mon 27 Jul 2026 06:19:16 +0000
Manifest this update: Mon 27 Jul 2026 06:19:15 +0000
Manifest next update: Mon 03 Aug 2026 06:19:15 +0000
Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: LAPiU1vV7cackYYmRFnBHOX8WfPh6pjz6vaoWSPu0is=)
2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=)
3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Validity
Not Before: Jul 27 06:19:15 2026 GMT
Not After : Aug 3 06:19:15 2026 GMT
Subject: CN=6a66f864-1f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:ae:30:de:bd:34:a9:93:c4:43:ec:a0:82:
01:88:50:b8:61:fb:2c:27:2a:25:f8:1c:91:d5:21:
e4:f6:3e:ca:b0:67:48:ab:72:40:6f:64:a0:e0:44:
a8:19:6f:42:b8:a5:2d:b0:27:46:81:37:47:c8:39:
6d:5c:a5:32:f6:a8:49:59:7a:27:ce:b5:d3:9c:9f:
c9:e2:33:ce:d1:d6:2d:68:eb:7f:25:05:97:48:18:
16:e7:94:e8:25:ba:33:b9:40:8e:a5:37:3c:6d:d0:
d3:6a:2b:35:15:39:78:ba:26:e3:72:d6:28:61:f3:
4c:1f:0e:99:6d:ab:79:1c:05:d8:6d:23:5e:fa:e6:
3b:f3:52:25:30:c1:60:36:40:2b:d6:0f:9d:54:3e:
bb:d7:08:50:3e:67:4b:16:1d:95:90:7a:cc:02:c9:
86:a8:af:0f:6b:f1:eb:d8:6f:f0:fe:34:1c:24:70:
de:2b:94:05:e8:c7:5b:07:a4:47:23:e9:65:80:2f:
cc:ea:6d:5f:cc:72:7b:50:10:13:82:5e:8b:4a:e2:
2b:6c:e5:b3:f5:82:5e:83:5c:b6:e8:f2:70:60:ba:
e5:b7:fd:27:f2:f5:e4:32:97:ad:00:ba:9b:d8:88:
e8:77:19:86:77:ad:a4:f8:0a:5a:39:be:aa:09:d1:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:25:EC:51:36:2D:9B:12:CE:BB:B0:E0:DF:CC:A2:DF:B4:33:43
X509v3 Authority Key Identifier:
keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:04:f5:67:c3:02:da:22:03:da:5b:35:35:87:02:a4:94:51:
bc:3c:80:1e:5d:6f:20:e2:98:ee:93:d1:7f:3d:e1:75:ac:47:
91:5a:9d:1c:4e:64:d6:ea:2e:8e:ae:fd:2f:2b:c4:0e:e3:ec:
f6:95:39:02:1b:31:e7:5a:76:69:b1:41:8f:08:22:6a:60:88:
bc:13:cf:1d:19:c0:bf:7a:d5:b3:bf:ff:2d:58:51:74:a2:36:
3f:47:96:d9:ea:ea:2d:32:1c:d1:5a:7d:48:ae:57:78:79:fd:
a5:7f:64:67:9b:ad:39:8d:6e:cb:2e:da:ff:38:f5:ae:54:7c:
f5:62:bd:87:79:2b:ca:4e:4d:14:85:ad:65:a7:b9:04:77:3c:
1b:ad:2a:3a:ae:43:c8:9f:e8:47:57:9f:23:de:56:86:65:16:
b5:80:ce:6a:84:93:5e:93:c6:7b:23:c0:92:86:bf:75:23:15:
44:f6:d1:aa:4a:81:28:29:fe:9d:60:45:cc:58:76:dd:55:7f:
68:69:62:53:a9:8a:c3:94:36:d2:48:0a:55:f8:9c:94:3f:55:
2d:4c:4f:30:e1:6e:65:ce:82:db:e3:81:ab:92:79:92:ba:6c:
57:d2:87:95:30:f7:9f:a9:48:1e:04:05:c2:40:c4:74:4e:48:
6a:e9:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:41 2026 by rpki-client