
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json)
Hash identifier: KZd8OjoQ0zfKJk5XNHlZraJot1a58jTmWdVXPvaRA6g=
Subject key identifier: AC:C6:D9:B7:FD:EC:BA:89:F8:4F:35:0A:DE:14:DE:69:DB:CB:0E:04
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Certificate issuer: /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
Manifest number: 0280
Signing time: Fri 17 Apr 2026 01:35:40 +0000
Manifest this update: Fri 17 Apr 2026 01:35:40 +0000
Manifest next update: Fri 24 Apr 2026 01:35:40 +0000
Files and hashes: 1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: RQlsw/LQPy3ZapVxWvfQXleDBMRnikJffH1nzMdsIBs=)
2: 552D155464A711ED99D40117C4F9AE02.roa (hash: D5QNOEYZTaVxGTG0sg1pVADh30TxHcQUWw6CHAWGbF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Validity
Not Before: Apr 17 01:35:40 2026 GMT
Not After : Apr 24 01:35:40 2026 GMT
Subject: CN=69e18e6c-dafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:f8:c0:31:be:94:cb:3a:bd:ab:be:e0:4e:
fd:e7:01:d1:da:36:42:a0:fc:a0:c3:16:70:40:04:
14:09:3e:49:d7:c4:e0:0d:03:cb:0b:ce:1f:1f:2d:
41:2b:d3:f2:28:62:f0:23:b8:1b:be:55:5e:1b:d5:
a8:45:a6:f4:80:a4:03:7f:04:47:54:a8:64:e9:7b:
1b:3b:11:ed:9d:36:e4:61:1a:ad:d1:6d:e8:07:dc:
91:a9:be:46:2d:06:bf:26:28:f7:ef:b6:38:35:e2:
d0:91:59:71:8a:87:18:c7:e6:10:c6:bd:50:3f:71:
fe:03:70:79:5f:46:3d:c7:3f:9e:ef:3c:53:c2:53:
28:50:5c:0c:e9:b7:81:33:ab:0b:c5:1e:b2:93:14:
6a:9c:ed:83:d8:ed:29:70:b7:cc:7f:45:e3:77:9a:
e6:f8:9b:0a:e7:47:fe:35:56:c5:34:27:91:2d:6f:
8a:c9:e4:31:a5:28:da:d3:f0:ae:0f:e8:d3:43:0c:
41:d3:30:96:2d:8e:37:a6:51:2a:15:8f:75:7f:71:
22:8a:1c:97:9f:53:af:38:33:f0:05:9f:36:42:a8:
37:f4:b3:87:c9:68:aa:f9:f5:f1:e1:e8:01:96:08:
07:58:d6:02:e9:e9:57:63:37:0b:8b:e4:33:35:38:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:D9:B7:FD:EC:BA:89:F8:4F:35:0A:DE:14:DE:69:DB:CB:0E:04
X509v3 Authority Key Identifier:
keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b7:3f:02:c1:bd:d0:57:9b:06:d9:17:5d:dc:c8:09:ba:7c:
cd:e8:4b:27:9e:1e:26:d4:03:01:21:78:8c:9c:32:88:ea:e6:
72:7f:e3:51:b0:87:7e:cd:1b:5f:00:f2:58:5b:ce:26:e5:83:
bd:f6:42:99:da:a2:5a:8e:78:09:87:ad:31:72:1b:1d:f4:3b:
aa:6a:17:8c:92:e7:42:20:49:33:28:eb:41:aa:ee:f5:83:90:
2d:0c:c2:a2:5f:5f:18:83:d5:93:31:37:73:73:42:e0:a5:f5:
fe:f2:48:6a:d6:b9:6f:05:d2:99:fd:89:ac:a0:bd:32:84:6e:
fc:5d:d1:1d:62:4a:32:06:95:81:53:e5:82:3e:3d:b8:de:c1:
49:fd:79:ee:31:3c:e4:94:21:df:c6:e6:62:89:7e:2a:63:d6:
c3:d1:f4:24:48:26:2c:2c:6c:b5:36:af:71:44:40:26:dd:1b:
83:5d:11:52:c9:d7:25:3e:07:55:2c:9a:7e:11:31:0d:65:57:
c4:42:2c:a6:34:e0:47:0e:9f:e9:d5:cd:3d:4c:c9:1c:1d:fa:
4d:62:9a:c7:da:1c:f5:a8:b5:b2:23:5d:68:ae:19:cb:df:c3:
11:6f:15:6d:58:84:23:6e:c2:7d:42:dc:0a:df:93:a5:b5:36:
a6:b0:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:25 2026 by rpki-client