
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json)
Hash identifier: 8YugheD5ZbH6eBYol4rjp2tNK+zVAWiObMc+avdcp3I=
Subject key identifier: C4:85:F0:CC:BA:B3:F9:C9:E2:BF:B9:2F:9F:35:02:07:90:C5:6E:06
Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
Manifest number: 0208
Signing time: Sat 13 Jun 2026 03:04:29 +0000
Manifest this update: Sat 13 Jun 2026 03:04:28 +0000
Manifest next update: Sat 20 Jun 2026 03:04:28 +0000
Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: 8vouFNBWM9m9tM1Wx7Xc0CxCDFCfgWD9+cXh8gsoBe4=)
2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: wKye+Bf4sTbbkGL0Ip13QuqoroMtLnMn7BDQ5dOtrUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Validity
Not Before: Jun 13 03:04:28 2026 GMT
Not After : Jun 20 03:04:28 2026 GMT
Subject: CN=6a2cc8bd-bbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:57:84:e6:d2:e3:ae:50:38:ae:34:63:53:
b5:06:ab:0d:00:85:cd:e5:ab:e1:44:71:5f:49:f8:
06:9c:d1:b8:22:87:ac:cc:6d:b9:65:74:c9:59:e1:
a0:25:a9:e8:e2:2a:20:19:f1:1e:e3:47:8f:d8:20:
87:72:09:38:e7:58:ea:b3:74:db:60:99:de:e0:4e:
03:14:d4:bb:fd:99:24:e6:49:40:a0:7a:98:47:0e:
9d:69:db:46:5f:20:ae:b0:ab:d8:af:fc:9a:01:02:
7d:b8:fa:36:b5:5c:cc:05:85:82:53:1a:d9:d5:9d:
c4:e7:bc:20:cc:07:e0:8e:21:b2:85:3b:32:ab:06:
a8:d0:5a:87:6d:2b:b1:b3:64:d2:bf:91:c9:d4:c1:
11:00:3e:2b:71:5b:7a:64:0e:24:7e:6d:51:a9:37:
ac:75:65:a6:bb:29:33:49:0a:57:4b:91:6f:29:f8:
3a:41:28:44:c5:bb:cf:7b:ec:97:46:bb:b3:80:8e:
fb:00:64:c4:b4:7d:6d:a2:af:7e:a1:b8:75:91:1b:
00:c2:59:d9:f0:38:8e:c2:d8:25:08:45:1b:b0:74:
82:39:9f:a5:bb:b9:6b:8f:5a:80:b9:db:85:4f:13:
00:59:ea:42:8c:73:48:ee:bb:a6:88:9b:13:2f:71:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:85:F0:CC:BA:B3:F9:C9:E2:BF:B9:2F:9F:35:02:07:90:C5:6E:06
X509v3 Authority Key Identifier:
keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:43:31:a4:62:2c:26:5f:1c:f4:9b:fb:60:74:33:28:5e:
5e:64:d3:74:e5:0f:18:2d:f4:19:79:b5:da:b6:7f:32:36:d0:
0f:c3:f5:e3:56:3b:f3:13:34:5b:49:be:f6:f1:67:b9:38:75:
1b:00:6a:1c:c1:eb:b6:a1:f7:bb:18:b0:07:5a:87:8e:b2:7e:
33:b9:d5:f6:3e:24:a3:67:4c:d1:75:c4:49:2d:a1:38:a9:2f:
98:8f:0c:f8:30:76:d3:f2:de:63:34:f1:80:96:97:67:bc:8e:
14:07:f9:84:fe:6e:fb:09:10:e9:6f:9d:05:d3:ce:97:b9:27:
b0:bc:9d:d3:82:6b:54:ca:3f:3e:55:65:99:74:91:7e:2f:29:
d1:b8:c8:e0:c1:86:d2:d2:8d:87:f8:2f:90:5d:91:0e:69:0d:
5c:72:e1:cd:ff:42:d6:65:d6:2d:5e:14:8f:7e:65:e9:fa:75:
67:45:48:43:e1:58:eb:7c:55:48:81:ac:29:e8:49:2a:4f:93:
d9:7e:e8:e7:e6:1f:49:1d:91:be:0f:85:76:e0:fd:67:7e:30:
2c:6b:37:99:4e:71:d9:18:78:e1:f4:a7:e7:ef:5b:4f:c5:1e:
2c:11:2f:89:af:92:2b:47:cf:d5:ef:da:da:2c:5a:ae:a6:04:
96:95:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:15 2026 by rpki-client