
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier: IqZzUpbLhEjh6+DEE6GC0shjo7PYZLMeBycjkyTfht4=
Subject key identifier: E8:70:8F:03:E9:20:65:97:3D:72:54:46:D5:DA:81:70:46:C0:3F:64
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number: DF
Signing time: Thu 11 Jun 2026 08:55:14 +0000
Manifest this update: Thu 11 Jun 2026 08:55:14 +0000
Manifest next update: Thu 18 Jun 2026 08:55:14 +0000
Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: rjlxLZi1NpIJPvTh/N+Qtqy2RWeBljsSUBLYKazuIK0=)
2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Validity
Not Before: Jun 11 08:55:14 2026 GMT
Not After : Jun 18 08:55:14 2026 GMT
Subject: CN=6a2a77f2-3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:59:54:14:85:52:be:95:dc:af:8a:ab:c7:
79:e8:10:cb:c9:0f:0f:e5:91:aa:8b:86:44:94:0c:
29:04:84:82:d4:ac:29:0a:ec:87:fd:75:54:d1:11:
27:60:1e:1d:fc:35:b0:09:f9:d4:26:8b:f0:c2:07:
27:c1:47:4e:35:43:7f:4f:6b:ea:66:9a:9c:c0:1a:
b0:d6:55:5e:f0:ff:02:bb:55:19:06:cb:cd:5c:4f:
9a:d8:c3:10:03:1d:80:55:58:f6:85:d9:6a:d8:a5:
31:be:00:93:ff:5e:3e:56:ed:46:ed:b8:29:48:81:
13:e9:f0:1e:03:2b:24:77:2d:96:6c:dd:2f:99:f9:
14:ef:49:b7:47:e6:69:79:12:45:ee:ac:1a:71:78:
7b:4e:66:5c:45:68:08:0b:c3:85:ab:3c:4e:48:d6:
3e:2e:f1:ca:02:99:04:2c:9a:67:93:af:74:62:c8:
6a:28:50:b1:86:a6:fc:7c:90:c0:f5:ca:68:57:6d:
7b:a6:32:ec:ef:35:85:41:03:6d:be:bc:10:7a:d4:
a1:cc:4f:be:9e:94:60:d6:29:0a:86:7c:2c:00:1a:
9c:da:c0:65:ca:0e:2f:77:8d:96:f5:fe:da:80:42:
d6:c9:43:b8:a1:50:fd:ba:c9:06:65:8d:f0:ce:58:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:70:8F:03:E9:20:65:97:3D:72:54:46:D5:DA:81:70:46:C0:3F:64
X509v3 Authority Key Identifier:
keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:dc:a5:cf:85:bd:09:ec:59:9d:c1:72:f6:5d:7e:a7:b4:fe:
21:32:1e:ef:58:c8:71:2e:58:08:02:f3:37:be:8b:e0:ef:3e:
00:17:2b:6d:c8:35:5a:70:c4:a4:f5:18:7a:66:81:3c:1a:e2:
99:c5:43:7d:e1:58:ef:c9:4f:22:ec:0a:59:d2:e3:af:de:5a:
a9:16:1f:cd:10:eb:c7:4d:fa:c5:72:9c:62:11:0e:4e:8d:c4:
49:47:aa:0a:2f:a5:6b:2c:d8:d3:20:dc:69:fe:fe:c3:21:0e:
ea:9b:54:76:30:1b:ee:2d:df:0c:49:5f:d7:7c:e5:3d:a3:be:
3e:4c:a6:53:47:c4:5a:93:b0:fc:e7:10:30:18:93:1d:4b:8c:
a9:68:99:f0:ed:fc:90:f2:68:47:20:03:52:d9:ec:60:b0:7b:
47:28:b4:82:e2:91:21:b6:1d:00:d8:98:3d:56:a6:56:20:4e:
6c:67:be:06:c6:9e:3e:55:22:4e:76:45:4e:aa:1f:58:60:30:
f5:7c:b4:f9:e5:e5:7d:54:a3:56:a5:cf:41:a3:d3:23:3d:1a:
1d:12:08:07:dd:26:ee:62:dd:01:44:bc:82:cd:dc:18:ec:70:
40:88:fa:05:4f:8a:c4:25:3c:4f:d4:84:c5:2c:ea:81:b6:03:
ec:dd:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:41 2026 by rpki-client