
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json)
Hash identifier: qg9i94yQ6AYJJglgYTcw2nhBlh/RPLmlKdxCPT2+FoM=
Subject key identifier: 67:96:C8:85:F2:BB:5E:1F:DA:28:AE:0A:A9:32:1E:19:41:23:F1:7E
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 0623
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
Manifest number: 05CC
Signing time: Fri 12 Jun 2026 23:16:33 +0000
Manifest this update: Fri 12 Jun 2026 23:16:33 +0000
Manifest next update: Fri 19 Jun 2026 23:16:33 +0000
Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: 0DUTL0MguxhLX/CdwOHzvXQFD8taJsi5Jusi5iGaKKM=)
2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=)
3: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=)
4: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=)
5: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=)
6: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=)
7: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=)
8: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=)
9: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=)
10: B8BE560A4A1311F1B8639EABC7833773.roa (hash: 0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Jun 12 23:16:33 2026 GMT
Not After : Jun 19 23:16:33 2026 GMT
Subject: CN=6a2c9351-0abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:41:bf:92:b0:3a:f0:ef:c4:ce:00:55:fa:
79:3f:6f:a2:56:2f:f2:3e:7b:02:fe:2a:08:51:2e:
ad:92:b1:5b:b9:5e:8f:c9:88:b7:80:2f:5c:2d:2a:
aa:28:d5:65:c2:4a:fc:8b:9b:b4:c1:1a:53:45:3c:
61:aa:9e:13:fd:5a:44:6e:0a:95:22:0f:f5:d6:c4:
73:3c:33:63:2e:34:bf:48:40:2e:6a:a8:92:5c:84:
5a:21:aa:a1:94:02:47:d3:c1:86:5d:88:ff:f9:2a:
03:5b:f3:84:fc:8d:90:34:a2:76:3f:b2:8f:58:a5:
1f:b2:4d:bf:7d:e2:48:9a:36:3a:37:39:42:ab:da:
20:4f:24:ac:ca:bb:57:c0:ed:6d:58:fd:41:78:77:
7e:e7:a2:ba:5c:f2:6b:cd:84:a9:b8:dd:42:ef:16:
3c:1f:49:b3:d5:19:b1:cc:50:6b:f3:97:b9:ec:86:
fe:1e:e3:e3:2a:32:6a:c9:be:c7:95:c5:34:1d:91:
6c:80:53:81:2c:cd:24:fb:e6:8a:2b:76:88:a7:04:
cb:e7:eb:8a:19:2b:7a:5d:49:9e:7c:ca:11:70:97:
7e:3b:2d:23:5c:1e:45:e2:bf:c0:e1:87:01:1e:9d:
d2:d3:de:1e:16:ad:94:bb:89:cf:62:b8:e8:a6:bd:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:96:C8:85:F2:BB:5E:1F:DA:28:AE:0A:A9:32:1E:19:41:23:F1:7E
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:7c:55:04:ad:75:29:ab:e6:ec:f1:fd:23:ce:56:9d:8b:42:
aa:28:bb:f5:8c:d6:c0:5c:5c:f6:7c:a5:d0:c7:01:33:ff:df:
73:fd:bf:3f:2f:94:d3:37:91:0c:a7:6d:06:60:a8:a3:49:b8:
bc:3e:8a:9c:1c:44:50:f1:47:35:3f:fa:14:1c:c8:04:09:81:
f8:7d:08:1b:d6:54:52:6c:c2:81:41:cf:40:a6:32:03:cd:77:
91:fc:58:2a:8a:4e:3f:d6:99:0d:d1:9b:74:ce:69:50:36:2f:
4b:9f:95:e3:87:82:82:35:1d:bd:f3:9b:14:ef:f1:ad:8d:be:
2a:29:99:56:b4:eb:77:79:a6:eb:b8:41:18:65:b8:b6:df:dd:
d7:b4:98:8d:2d:b1:3a:fc:13:fc:95:91:e2:99:dd:92:f4:8a:
34:bf:55:1f:18:3b:37:75:39:0c:5d:85:b6:a4:e1:fd:41:07:
d0:b7:42:76:a5:7e:84:3b:bc:65:5c:56:05:05:3c:e7:ea:e4:
fb:bd:90:7d:c1:98:4d:5e:cd:ba:77:94:36:fa:97:46:3f:8d:
ae:03:1d:69:c5:01:4c:3e:f8:72:f5:b9:23:ee:93:b9:21:6e:
63:f8:7b:7d:7b:3c:92:1c:f8:f5:cf:8c:0c:d2:fe:56:8a:b0:
cf:3d:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:10 2026 by rpki-client