
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier: lSyec+HB2pYFhGKpuo2++vc7ptvb1t6meKleJKr5Bs8=
Subject key identifier: 8E:76:45:9A:AB:D3:B5:63:95:9A:83:D3:76:5C:79:3E:8A:84:2B:82
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number: C3
Signing time: Wed 15 Apr 2026 06:31:29 +0000
Manifest this update: Wed 15 Apr 2026 06:31:29 +0000
Manifest next update: Wed 22 Apr 2026 06:31:29 +0000
Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: /JcC2vVxtanahyhLcqoQzYfsbbRJjFwJl6nuZ73h9PI=)
2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Validity
Not Before: Apr 15 06:31:29 2026 GMT
Not After : Apr 22 06:31:29 2026 GMT
Subject: CN=69df30c1-20ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:5c:e6:fc:45:ec:c3:4f:25:86:ea:5a:76:
91:ba:f0:d3:0c:72:b1:77:d5:a4:2f:d7:91:44:ca:
86:33:b8:24:25:3d:88:78:3a:82:f0:d2:f7:33:e3:
3b:f8:a6:3b:b7:7b:67:c8:a9:7a:6d:a3:56:79:bb:
84:79:8f:68:7a:4d:44:31:01:32:b3:f4:f9:dc:fa:
3a:7e:29:c1:ec:f3:59:0b:72:b9:98:ed:2f:20:5d:
98:95:cd:27:49:b0:d8:61:5c:e5:c1:89:6f:39:63:
2e:bc:ed:d1:7e:9f:1f:53:37:22:b8:63:b0:3f:16:
21:b3:f2:15:76:fd:f4:3c:9b:03:9b:b1:d5:3c:87:
ed:a8:59:8b:da:11:50:65:dc:03:0d:9c:d3:57:a2:
b3:06:52:71:21:92:4c:87:31:8b:7a:66:fd:8e:44:
97:b7:28:d2:e5:ee:7e:8a:3e:d0:57:2f:15:24:b6:
88:66:e3:a5:85:42:99:7f:33:db:cc:bd:9d:d3:99:
de:37:3f:8f:c4:bf:ef:42:b1:d0:fb:04:80:cb:e0:
09:c6:ed:4e:aa:1e:a1:86:a1:24:d8:14:45:2d:94:
bc:ff:82:a7:25:69:51:55:92:33:78:a3:3e:10:f5:
30:dc:ec:d5:c6:75:7e:1d:89:c8:e8:24:ce:22:0c:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:45:9A:AB:D3:B5:63:95:9A:83:D3:76:5C:79:3E:8A:84:2B:82
X509v3 Authority Key Identifier:
keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:c1:ab:bd:63:e1:85:75:48:b4:9d:e4:aa:b9:97:2d:45:34:
1e:99:dc:0b:fa:22:fa:4d:74:8f:af:91:1d:43:5c:6a:fe:f4:
98:2e:21:e8:ce:2e:f0:8f:0b:54:04:e5:45:87:0c:44:12:f4:
03:51:bc:9c:41:a3:14:0c:55:b6:bf:7f:2a:d2:0e:cf:db:57:
01:b0:e3:04:3a:69:83:26:88:d4:f0:72:83:16:e9:d9:46:26:
8d:9b:32:81:b9:b5:1c:07:c1:1c:78:68:27:7e:63:40:c1:8e:
46:e3:fd:8b:66:30:83:d6:a9:19:fc:62:76:9c:c4:a0:18:d7:
2b:f3:8c:4a:aa:b3:f3:bb:5e:65:8b:d3:9b:4d:5c:84:45:9c:
d1:43:28:e8:b0:2a:c5:d1:71:dc:2b:fb:ba:55:54:8d:c7:19:
a6:56:65:54:37:9e:14:1f:b9:6b:cf:ac:10:1b:83:e5:94:0f:
43:65:8d:5d:05:dc:54:b2:0a:ac:61:9f:50:5e:3b:87:91:7a:
05:98:01:06:53:e5:3c:c1:83:b9:42:ed:c2:83:c5:79:15:08:
83:f8:50:42:4c:de:9c:66:32:64:91:fa:72:1c:bf:cc:cc:3c:
60:ba:7b:85:38:41:2e:7e:45:96:ce:77:6c:3b:8d:56:47:0e:
30:13:af:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI5NkMxMTAvBgNVBAUTKDk1QjEwNDBDRjNCRkVDMDVDRTg0MURBRkE5QTk1MDhC
NzA5OTdGMUMwHhcNMjYwNDE1MDYzMTI5WhcNMjYwNDIyMDYzMTI5WjAYMRYwFAYD
VQQDEw02OWRmMzBjMS0yMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2tJc5vxF7MNPJYbqWnaRuvDTDHKxd9WkL9eRRMqGM7gkJT2IeDqC8NL3M+M7
+KY7t3tnyKl6baNWebuEeY9oek1EMQEys/T53Po6finB7PNZC3K5mO0vIF2Ylc0n
SbDYYVzlwYlvOWMuvO3Rfp8fUzciuGOwPxYhs/IVdv30PJsDm7HVPIftqFmL2hFQ
ZdwDDZzTV6KzBlJxIZJMhzGLemb9jkSXtyjS5e5+ij7QVy8VJLaIZuOlhUKZfzPb
zL2d05neNz+PxL/vQrHQ+wSAy+AJxu1Oqh6hhqEk2BRFLZS8/4KnJWlRVZIzeKM+
EPUw3OzVxnV+HYnI6CTOIgy2hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI52RZqr
07VjlZqD03ZceT6KhCuCMB8GA1UdIwQYMBaAFJWxBAzzv+wFzoQdr6mpUItwmX8c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjk2Qy80RDJCQThBMDEz
QTIxMUYwOTFFQjYzNkRDNEY5QUUwMi9sYkVFRFBPXzdBWE9oQjJ2cWFsUWkzQ1pm
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Qjk2Qy80RDJCQThBMDEzQTIxMUYwOTFFQjYzNkRDNEY5QUUwMi9sYkVFRFBPXzdB
WE9oQjJ2cWFsUWkzQ1pmeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlsGrvWPhhXVItJ3kqrmXLUU0HpncC/oi+k10j6+RHUNcav70mC4h6M4u8I8L
VATlRYcMRBL0A1G8nEGjFAxVtr9/KtIOz9tXAbDjBDppgyaI1PBygxbp2UYmjZsy
gbm1HAfBHHhoJ35jQMGORuP9i2Ywg9apGfxidpzEoBjXK/OMSqqz87teZYvTm01c
hEWc0UMo6LAqxdFx3Cv7ulVUjccZplZlVDeeFB+5a8+sEBuD5ZQPQ2WNXQXcVLIK
rGGfUF47h5F6BZgBBlPlPMGDuULtwoPFeRUIg/hQQkzenGYyZJH6chy/zMw8YLp7
hThBLn5Fls53bDuNVkcOMBOvBA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:25 2026 by rpki-client