
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier: zCwPlqRpQ6cgVzgp2ASWos19VTR0fv2O915yDg0a4zk=
Subject key identifier: 60:5A:0E:A9:E9:CF:72:52:8E:58:A6:42:70:71:71:E8:FA:FE:F5:BA
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number: 35
Signing time: Sun 01 Mar 2026 23:02:53 +0000
Manifest this update: Sun 01 Mar 2026 23:02:52 +0000
Manifest next update: Sun 08 Mar 2026 23:02:52 +0000
Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: XQpWkMXcpnUFbWgB+FXhwBt4xX23PhKUtbzmiSQznTY=)
2: 1E74642AEEC611F0B6553517716F56BC.roa (hash: SOSLWLvLrsjjJ6AEtm/F/8vErniCw4XxHqkv+EwD6A4=)
3: 1F740B32EEC611F0B6553517716F56BC.roa (hash: GkuChrKCeIjrx/7RKi1sDVvBepAqIC5AXcgUnelT0n4=)
4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: 3GuxeAjrlB+hxfwnx2ev/UrANIlreKIaPOJsJtCLgaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Mar 1 23:02:52 2026 GMT
Not After : Mar 8 23:02:52 2026 GMT
Subject: CN=69a4c59d-9207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:fb:0b:6b:d5:8e:86:2c:67:e6:63:95:84:
05:5b:95:af:a2:68:4e:29:45:10:e4:ce:b7:36:ce:
e5:db:fb:a2:00:bc:f2:e0:12:f4:69:ea:09:fc:a9:
f9:4d:e0:9f:18:75:e2:8d:86:24:ae:6a:2d:f9:d5:
b5:83:ab:9a:26:8a:e0:90:d9:ac:6b:20:fa:b1:9d:
65:a9:4f:17:1a:6c:29:88:24:b3:9e:8c:dc:0d:1b:
1f:72:41:a4:5f:c4:04:0c:dd:3d:64:e3:dc:49:96:
36:7b:ae:56:89:60:8d:2c:46:9b:11:30:3a:59:a5:
74:37:6b:a4:92:74:b0:0b:fd:bd:eb:45:a4:40:16:
79:92:00:8f:3c:0d:84:6e:4b:b9:ee:4a:8e:e2:30:
a3:2e:81:9f:63:52:43:6e:4a:0f:1f:5e:73:54:49:
88:ae:0d:f2:2f:6e:94:86:d3:71:1d:14:62:2c:ab:
a1:72:08:3b:f9:40:4f:0d:c9:e2:c5:da:20:b1:f8:
6d:3c:da:8f:c5:98:4d:07:16:6f:99:42:9e:b5:a6:
33:e0:b9:be:ce:b1:86:70:43:ca:6b:a4:80:bd:c9:
2e:65:52:cd:67:67:5f:d0:f0:5c:a8:71:af:a8:df:
5d:36:eb:ce:ff:2b:59:fd:80:6a:6a:c1:17:3e:2f:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:0E:A9:E9:CF:72:52:8E:58:A6:42:70:71:71:E8:FA:FE:F5:BA
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:8b:47:7a:3b:8c:c2:4c:13:41:1c:74:6c:89:2c:df:cb:
7b:b8:f2:f2:f9:c9:7d:68:2b:35:56:92:e1:25:7a:da:5a:ed:
1c:99:de:06:db:9a:23:f2:b1:f7:cd:43:3e:25:9e:1f:3b:ac:
3f:8b:f3:41:56:e0:32:2d:94:b9:93:ab:ca:e2:c9:7b:57:13:
0a:e7:d3:49:a3:0b:b4:22:b7:63:85:f7:6f:f2:c8:0b:9c:e3:
dc:db:1b:44:30:95:eb:f5:d1:0b:c0:94:8c:c6:a0:58:f9:b0:
97:4b:51:90:e2:ef:cb:36:37:45:d5:80:0f:38:74:fd:85:af:
25:55:f9:d6:25:05:bf:39:2b:f1:11:bf:d2:22:9b:52:92:b6:
f0:ef:bf:6a:eb:7b:43:3a:5e:fd:ca:10:d8:f4:81:1a:fd:4a:
51:e3:bb:65:32:6f:8b:f1:3f:1a:59:97:f1:36:07:40:eb:6f:
b0:b4:6f:ea:76:bd:72:93:a5:f5:75:0a:1b:ee:95:34:4f:0c:
08:5f:77:78:85:0c:de:8a:83:1b:a5:04:95:90:78:f9:93:fd:
b9:52:75:6f:6b:99:2c:ff:a6:17:e0:be:96:22:9f:f0:21:84:
d5:bc:f0:73:52:dc:f5:94:a3:0e:60:51:2b:02:5e:6d:4a:06:
33:99:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:34 2026 by rpki-client