
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier: FEjFgB6YaEiKxxDQN45Refrz6nXy65DgHd0hxg5GWrE=
Subject key identifier: 6A:07:F8:A7:D3:E0:F1:D2:86:4F:C3:1D:8D:6E:BB:2B:8D:23:6E:C7
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial: 05C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number: 05A6
Signing time: Thu 16 Apr 2026 23:08:23 +0000
Manifest this update: Thu 16 Apr 2026 23:08:23 +0000
Manifest next update: Thu 23 Apr 2026 23:08:23 +0000
Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: wY+VXE4YJnsKaNSpHfI5o3yTgR22TDEN66QWxAmlRYI=)
2: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 6NxbPpiEJs2yazc4XE7t1GVxt2/LOGH3NcLS2N1ULdM=)
3: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: QkZRGL4upm9/d4MEQ4FWarVe1YBkIIS5APd+6Rs1go4=)
4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: FpSEkpsQMaA9en+9841zTtAmY9K+gYFgxlRnEd7kAEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1481 (0x5c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Validity
Not Before: Apr 16 23:08:23 2026 GMT
Not After : Apr 23 23:08:23 2026 GMT
Subject: CN=69e16be7-3121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:e1:a5:9f:38:60:12:80:b5:f7:1e:1b:3c:
8e:b4:27:cb:16:c6:de:10:bb:1d:3c:7a:73:46:d7:
dd:b8:25:2d:29:eb:86:55:12:02:72:16:15:fe:c2:
f0:75:ee:bc:24:75:23:64:56:6b:2c:23:e3:57:5d:
f4:04:2b:9e:32:12:74:ed:21:0e:8c:26:c5:bf:34:
64:bc:9b:3b:17:cc:46:af:d0:d2:0a:b0:c2:96:d8:
ee:fd:84:da:e5:ff:76:10:fd:c6:f1:e6:9e:49:b9:
8b:6b:ef:a1:4b:01:57:0d:d6:3f:fa:aa:b4:61:2d:
61:95:ee:11:9a:74:25:ab:ca:4e:b0:c1:32:cb:58:
76:d1:b6:3a:34:74:88:34:84:86:02:b8:e5:d3:45:
2a:6c:5a:e2:10:ed:b5:46:12:e3:cb:1d:7f:8c:cb:
7d:48:d2:e7:c5:2a:78:93:27:4e:08:16:22:b4:8d:
36:fc:d3:33:d0:43:49:ea:9b:5f:55:0e:5b:1a:93:
ae:82:ed:40:08:18:96:82:d7:c6:92:7f:b8:bb:af:
ba:40:b7:e7:76:5b:29:a7:c2:c8:3f:b6:79:c5:69:
c4:43:e5:d2:a8:23:5c:5a:f0:7e:03:17:f7:48:3b:
5a:3b:28:55:c2:fa:d8:2a:45:83:0d:56:56:a6:db:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:07:F8:A7:D3:E0:F1:D2:86:4F:C3:1D:8D:6E:BB:2B:8D:23:6E:C7
X509v3 Authority Key Identifier:
keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:62:a8:f5:2a:ce:a3:c7:83:09:af:5e:c7:9a:79:1a:b3:45:
bc:7c:f0:f8:b9:db:96:2e:26:7f:15:9e:04:7a:24:dc:36:52:
be:7b:67:64:7b:36:96:c1:0d:59:04:02:e2:78:95:9c:57:be:
ea:40:d6:68:02:b8:e1:93:08:4d:89:20:4e:96:9d:c1:1b:57:
45:ea:59:b6:69:2e:be:29:e3:4e:6f:20:33:02:21:ef:f2:15:
97:28:73:f6:ec:ae:50:d3:5a:8a:89:83:a0:8a:81:9d:3c:79:
b6:18:84:1c:61:45:a7:2b:d9:a9:e4:64:59:8c:da:1d:5a:7d:
c9:3f:ce:b3:37:d0:ae:36:e4:45:46:ed:f7:f4:c0:5e:8e:17:
c7:2a:d0:3d:ff:8b:62:76:90:71:4b:1e:e9:e3:a9:ab:b4:5a:
64:79:b2:94:68:83:ee:ff:8e:ad:34:f1:af:a6:94:90:00:79:
89:92:f0:de:21:92:4d:e0:da:a1:07:c0:35:4e:93:df:3a:ed:
89:ff:50:b0:89:ba:14:85:77:b2:52:16:6f:b0:c6:2c:82:53:
2b:57:6a:42:4d:52:3f:b6:02:12:3e:dd:6f:ad:4a:4f:6e:ec:
4b:e6:73:b4:59:75:6b:cf:75:17:a2:b5:47:e0:3a:c3:d9:b1:
03:f4:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:12 2026 by rpki-client