
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json)
Hash identifier: ikRF5NRyDfInXih2+kPB8QpqMmes+XLtQ/ICAS9ZPhc=
Subject key identifier: CF:04:01:19:A8:54:A9:84:5B:C2:3E:25:EF:3F:6E:94:15:47:22:87
Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
Manifest number: 021E
Signing time: Mon 27 Jul 2026 04:23:16 +0000
Manifest this update: Mon 27 Jul 2026 04:23:15 +0000
Manifest next update: Mon 03 Aug 2026 04:23:15 +0000
Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: ABmQIbVh1XVZc2Y8Bvc6HXCcgO1whh0/+ryO8xZl2Kc=)
2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: wKye+Bf4sTbbkGL0Ip13QuqoroMtLnMn7BDQ5dOtrUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Validity
Not Before: Jul 27 04:23:15 2026 GMT
Not After : Aug 3 04:23:15 2026 GMT
Subject: CN=6a66dd33-8fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:eb:b7:9c:d8:4a:58:35:7d:77:c9:43:06:
26:d8:e7:d4:e7:01:ca:0d:18:27:8b:30:44:67:67:
e6:7e:e6:80:b8:74:e3:c7:a1:43:68:4e:2d:05:29:
96:a6:df:a3:56:c5:58:d9:9b:29:c7:ee:d7:89:01:
40:b2:e9:98:44:a9:e3:3d:a3:6d:70:a1:39:b4:dc:
41:0e:57:93:a0:53:8e:e3:74:b9:fd:9a:c0:b4:2a:
0c:16:a6:86:f4:e2:62:04:4d:e9:de:bd:58:91:90:
2e:10:05:53:6c:a5:d7:a0:99:c3:d6:45:49:a7:ea:
ae:f1:81:3b:c2:2f:84:9d:b0:9e:16:b6:85:66:d6:
6e:01:53:0e:f5:2e:50:14:81:85:1c:a7:29:8b:30:
95:91:f6:06:4f:6c:5d:f0:a8:a7:ac:33:50:85:89:
e1:fe:2f:1a:a3:cf:62:4f:06:59:96:86:9a:69:8e:
90:64:7e:94:34:78:26:33:78:bc:2a:28:c8:a0:73:
42:fb:51:15:14:55:16:4c:c0:db:f3:65:69:1e:ed:
74:e5:5c:7a:1b:ca:91:be:38:c4:9b:49:ac:52:b4:
66:2c:79:20:07:39:cb:d5:58:82:36:1d:a1:62:88:
84:e9:f8:c7:57:8f:6d:9d:7c:a2:bf:ed:0c:8d:18:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:01:19:A8:54:A9:84:5B:C2:3E:25:EF:3F:6E:94:15:47:22:87
X509v3 Authority Key Identifier:
keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ed:93:ad:d5:04:66:1c:62:58:75:e5:e8:71:1c:1f:2c:7d:
ca:49:bb:0e:0c:87:c3:70:e1:fa:69:57:e6:fd:5a:c2:4e:03:
7e:11:b5:f4:16:38:36:2b:cc:d0:20:2e:c7:a5:c0:cc:c5:5d:
ce:8d:63:96:a2:03:e8:3b:02:c8:39:e7:04:d2:f8:19:e6:c4:
2b:f1:2e:3d:ac:89:67:9a:3d:f0:33:f6:f0:81:5b:c9:42:2e:
50:32:22:af:04:71:15:41:e9:2e:e3:5c:d1:9a:c5:56:3e:f7:
d6:f0:32:8c:e6:aa:dd:25:df:c1:73:4d:4f:81:98:b8:db:79:
91:b9:c3:63:a5:b9:f4:aa:24:65:86:09:71:2c:a3:f0:0b:7c:
e6:0a:6e:b3:1b:e9:2a:c7:62:94:22:80:18:50:13:2d:e7:09:
68:23:24:ea:f8:b3:2a:95:72:32:1d:d4:a8:de:25:c2:2c:8b:
b7:aa:ed:ff:c5:fa:d3:de:75:9e:7e:59:31:37:75:0a:71:5f:
44:1a:96:15:36:f4:94:6b:d4:c2:63:f0:1a:f5:1b:3e:07:ce:
c3:0e:f8:4a:e6:72:07:8a:59:60:ca:ac:07:3a:3f:16:5e:fc:
69:32:64:87:00:ea:1d:01:aa:5c:44:1e:4a:e6:58:03:70:12:
0b:83:c7:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG
QzY1MjRFQ0EwHhcNMjYwNzI3MDQyMzE1WhcNMjYwODAzMDQyMzE1WjAYMRYwFAYD
VQQDEw02YTY2ZGQzMy04ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuC3rt5zYSlg1fXfJQwYm2OfU5wHKDRgnizBEZ2fmfuaAuHTjx6FDaE4tBSmW
pt+jVsVY2Zspx+7XiQFAsumYRKnjPaNtcKE5tNxBDleToFOO43S5/ZrAtCoMFqaG
9OJiBE3p3r1YkZAuEAVTbKXXoJnD1kVJp+qu8YE7wi+EnbCeFraFZtZuAVMO9S5Q
FIGFHKcpizCVkfYGT2xd8KinrDNQhYnh/i8ao89iTwZZloaaaY6QZH6UNHgmM3i8
KijIoHNC+1EVFFUWTMDb82VpHu105Vx6G8qRvjjEm0msUrRmLHkgBznL1ViCNh2h
YoiE6fjHV49tnXyiv+0MjRgQWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8EARmo
VKmEW8I+Je8/bpQVRyKHMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx
MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj
Ujh0VENRdzZPRkg4WlNUc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARO2TrdUEZhxiWHXl6HEcHyx9ykm7DgyHw3Dh+mlX5v1awk4DfhG19BY4NivM
0CAux6XAzMVdzo1jlqID6DsCyDnnBNL4GebEK/EuPayJZ5o98DP28IFbyUIuUDIi
rwRxFUHpLuNc0ZrFVj731vAyjOaq3SXfwXNNT4GYuNt5kbnDY6W59KokZYYJcSyj
8At85gpusxvpKsdilCKAGFATLecJaCMk6vizKpVyMh3UqN4lwiyLt6rt/8X60951
nn5ZMTd1CnFfRBqWFTb0lGvUwmPwGvUbPgfOww74SuZyB4pZYMqsBzo/Fl78aTJk
hwDqHQGqXEQeSuZYA3ASC4PH2A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:43 2026 by rpki-client