
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier: 51FDV5Yr6mUCt3ymiBUTNzrUWego6uinauR3oKlSKsc=
Subject key identifier: 39:DD:92:77:FB:15:BD:D9:71:CD:D4:CA:30:0F:3E:1D:8A:3A:80:AB
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number: 50
Signing time: Fri 17 Apr 2026 07:58:49 +0000
Manifest this update: Fri 17 Apr 2026 07:58:49 +0000
Manifest next update: Fri 24 Apr 2026 07:58:49 +0000
Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: KrQ3Zm8qSRkz3wTKyYaRZ4VIn2wa5qiCFCe+ceFrQ9Q=)
2: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=)
3: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=)
4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Apr 17 07:58:49 2026 GMT
Not After : Apr 24 07:58:49 2026 GMT
Subject: CN=69e1e839-3de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:b2:ea:4e:48:15:c0:2f:73:80:d5:86:6f:
81:b6:72:79:12:cb:52:e7:b2:d1:d4:ab:4e:eb:2a:
59:af:ab:89:4e:8d:7d:62:9a:82:8d:4e:a3:ed:28:
dd:36:4f:e1:72:6f:2b:0c:18:af:f4:db:47:96:16:
1a:51:85:75:47:b1:ea:dd:db:bf:95:18:20:ad:d6:
f5:84:ec:1e:1d:1a:6c:01:59:48:b2:25:7f:bb:da:
11:91:1d:67:a2:fc:cd:14:72:49:9c:a3:d6:3f:90:
93:55:f5:77:9c:9a:a9:b7:67:78:c4:79:4e:ad:b0:
20:2b:0e:cb:64:ee:da:32:51:f6:97:19:05:77:20:
54:fc:f0:07:26:e9:8f:e5:a7:26:66:01:8a:f5:49:
cd:eb:9b:4b:83:93:78:fc:f5:ae:0f:f6:70:91:ed:
71:90:e0:d9:cd:26:66:ca:7b:de:e2:6a:e5:05:54:
ae:75:c5:d9:d7:cf:ff:4f:d3:4a:bd:d2:29:0a:11:
37:fe:6b:a2:a3:df:bc:06:ee:08:69:3f:e0:8d:0a:
91:bd:38:29:2b:6c:56:da:93:3b:63:82:c8:6f:7a:
77:46:7a:af:f0:7d:3e:61:b8:4a:31:d5:5f:a4:51:
33:f8:13:e4:bd:18:2a:55:80:e1:b9:06:63:e9:c5:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DD:92:77:FB:15:BD:D9:71:CD:D4:CA:30:0F:3E:1D:8A:3A:80:AB
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:59:8f:87:4a:e1:78:ae:09:9f:5a:ae:33:9d:47:2c:c3:90:
ab:6a:2f:d8:34:d7:95:6e:bf:ba:49:53:30:88:83:19:c2:26:
3e:7c:4e:73:c1:d3:bc:20:56:6c:d2:0d:51:ac:5f:21:90:37:
24:bb:d7:92:20:ad:3b:b3:60:a4:ea:49:eb:ed:f6:d8:57:43:
95:ad:b2:4e:60:7a:a8:16:0d:ca:8c:67:49:9d:c8:c7:0f:f3:
4c:2a:d9:93:da:1e:b2:04:3b:13:57:ad:a0:55:f0:26:14:35:
95:4d:05:d9:a8:73:48:4d:7e:32:be:18:27:2c:98:4f:71:bc:
e8:a9:f5:2c:03:df:5c:70:28:05:9d:d1:84:b7:fe:d1:f7:1a:
35:65:32:7c:e8:29:3c:b1:e6:c3:14:9f:c4:00:03:f3:d0:a2:
8f:af:88:1a:da:43:2d:10:cb:03:b8:1d:97:91:d7:95:cb:9a:
95:53:7b:35:26:7d:84:88:7d:43:3c:5f:c7:c2:18:b1:9d:3e:
7f:dc:51:fd:c1:24:98:a9:a9:85:2c:19:b3:5d:bd:14:3d:1b:
8c:6a:5c:8b:75:79:a8:cf:54:a9:da:7f:c1:91:94:bc:be:c8:
17:c8:a0:33:29:f6:79:70:ee:36:a3:0d:7a:cd:e6:18:36:09:
c1:56:81:af
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njk1QTExMC8GA1UEBRMoOTQxMTE2M0E3MzU3RUZEOEExMkQ2OUI2Qzk0NzY1NEY0
NURFNkUyQTAeFw0yNjA0MTcwNzU4NDlaFw0yNjA0MjQwNzU4NDlaMBgxFjAUBgNV
BAMTDTY5ZTFlODM5LTNkZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbTLLqTkgVwC9zgNWGb4G2cnkSy1LnstHUq07rKlmvq4lOjX1imoKNTqPtKN02
T+FybysMGK/020eWFhpRhXVHserd27+VGCCt1vWE7B4dGmwBWUiyJX+72hGRHWei
/M0Uckmco9Y/kJNV9Xecmqm3Z3jEeU6tsCArDstk7toyUfaXGQV3IFT88Acm6Y/l
pyZmAYr1Sc3rm0uDk3j89a4P9nCR7XGQ4NnNJmbKe97iauUFVK51xdnXz/9P00q9
0ikKETf+a6Kj37wG7ghpP+CNCpG9OCkrbFbakztjgshvendGeq/wfT5huEox1V+k
UTP4E+S9GCpVgOG5BmPpxSOTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOd2Sd/sV
vdlxzdTKMA8+HYo6gKswHwYDVR0jBBgwFoAUlBEWOnNX79ihLWm2yUdlT0Xebiow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzYzNTMwQ0ZFQzhG
MTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlpaExXbTJ5VWRsVDBYZWJp
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEJFV09uTlg3OWloTFdtMnlVZGxUMFhlYmlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
OTVBLzYzNTMwQ0ZFQzhGMTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlp
aExXbTJ5VWRsVDBYZWJpby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBuWY+HSuF4rgmfWq4znUcsw5Crai/YNNeVbr+6SVMwiIMZwiY+fE5zwdO8IFZs
0g1RrF8hkDcku9eSIK07s2Ck6knr7fbYV0OVrbJOYHqoFg3KjGdJncjHD/NMKtmT
2h6yBDsTV62gVfAmFDWVTQXZqHNITX4yvhgnLJhPcbzoqfUsA99ccCgFndGEt/7R
9xo1ZTJ86Ck8sebDFJ/EAAPz0KKPr4ga2kMtEMsDuB2XkdeVy5qVU3s1Jn2EiH1D
PF/HwhixnT5/3FH9wSSYqamFLBmzXb0UPRuMalyLdXmoz1Sp2n/BkZS8vsgXyKAz
KfZ5cO42ow16zeYYNgnBVoGv
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:49 2026 by rpki-client