
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File: lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier: FRQRgmUuklwWFMOJqgDO7teXCwOojDMItSTHjHhxsd0=
Subject key identifier: 03:C2:EB:9A:A6:D2:80:EC:9A:D2:8F:09:69:C0:4F:61:60:88:61:88
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 085E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number: 07CD
Signing time: Thu 16 Apr 2026 21:44:56 +0000
Manifest this update: Thu 16 Apr 2026 21:44:55 +0000
Manifest next update: Thu 23 Apr 2026 21:44:55 +0000
Files and hashes: 1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: 2kkEnfArcRpk6Xk8CSAaZQTjVDEJ1iUdSU8PhigReEI=)
2: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: 3gzqvoyJahMiUTAGxhxWgq/nkiebEBW1ewsgydg+Lfs=)
3: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: cd6DQhMr0DKnGYuNxc7IhMqZVQK0SntWSeiPqohUc+Y=)
4: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: /vTD507iMveUOAK08YQKX6Cvj1AQ2vYplHbXKmdAyEM=)
5: 15434774090211EEA1C06509C4F9AE02.roa (hash: TJTe6tgUzGyLs9qs0NOqJwafzleo9nZn+ooC3NLooxI=)
6: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: erd/byvZQbud2olu7o9OIZ0H+fhYsFHIOFSRXbecrlg=)
7: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: IuZs9cBuodHJUbBn26tMDBdFhK8V7rtB1oDVHJpZbwY=)
8: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: x9U/FNhD8zZb+3b9larzovs/oo5vOjChKwd8wNBXpVU=)
9: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: DeOg1+xoYDUkAWfjRHY3bgB+e63XrSZC94dKT/SU52M=)
10: BB9AC51E2F0D11F1B2108CA79A833773.roa (hash: V/FIY6IBA9sOHywqWzg37fABITREQi7xjxyw7WXMzYE=)
11: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: I/a3fxw/xnNebSv9Uo7B0A6DjmrZz7zmfH8nOiEwMdE=)
12: 168FD534090211EEA1C06509C4F9AE02.roa (hash: nMWB/DllOnZzjZfTlqtdAYQIcLE3kT837Y0NymlixsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142 (0x85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Apr 16 21:44:55 2026 GMT
Not After : Apr 23 21:44:55 2026 GMT
Subject: CN=69e15857-42b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:b7:e9:79:1a:c3:f2:73:df:fe:7d:61:56:
9c:9b:75:0e:a6:a9:ca:71:a1:53:0b:93:45:1e:38:
f0:2c:79:d9:8f:61:37:99:19:97:9c:8f:b5:88:b5:
7b:27:6d:3c:57:ed:21:d3:5b:1a:82:47:83:8c:49:
2e:22:5a:89:13:01:33:d0:1f:9d:71:96:76:21:94:
a6:ae:e8:9a:43:93:df:c5:a0:e6:97:b2:4d:15:28:
a5:b9:d0:83:e7:02:b7:3e:9c:33:44:59:90:ac:7a:
2d:01:e8:7d:d7:97:7b:d0:1c:73:0f:2f:bb:d2:27:
ef:81:94:fc:dd:c0:a1:91:66:7f:dd:57:72:17:13:
7f:6a:27:fa:55:d6:cf:24:95:c4:c0:90:aa:cc:21:
6c:3e:01:a0:3a:e7:3d:39:16:19:7e:92:20:5a:a9:
61:55:b7:84:11:5c:08:28:93:6a:66:fe:e3:04:05:
38:a5:7f:a4:6f:cb:d2:d1:ad:73:c1:9c:92:a3:55:
bd:33:8f:9c:23:e2:99:5f:df:11:cc:66:98:98:fc:
69:e4:be:70:fe:2a:77:40:cf:45:61:db:3a:e0:fd:
84:38:fb:0d:1e:e9:49:99:48:33:fe:cc:eb:83:29:
c0:f3:e0:51:a1:39:59:42:26:b8:e6:1e:f5:cb:7d:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:EB:9A:A6:D2:80:EC:9A:D2:8F:09:69:C0:4F:61:60:88:61:88
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:eb:b2:7b:c5:45:53:02:fb:08:33:3a:64:22:5e:aa:05:af:
49:0f:d9:77:dd:a6:a9:fa:88:e1:6b:40:dc:64:d2:79:de:67:
2c:09:7a:48:07:fc:88:08:fb:ea:8a:ef:cd:26:7c:e6:d2:2e:
c5:f6:ce:18:ce:7f:87:bb:04:c9:8c:b3:47:13:e8:4b:5e:4b:
bb:26:dd:e4:5d:10:5d:62:31:25:16:ea:32:27:99:1b:10:a5:
f8:99:06:3d:38:6e:be:f7:49:5b:81:3b:e1:6e:49:21:68:c2:
8e:95:fc:fa:96:53:ee:02:be:ff:ed:aa:47:52:8d:33:a4:a1:
57:ba:0f:e3:63:1f:97:4e:37:8f:f3:c7:6b:9b:7d:3a:ec:38:
50:e6:16:5f:f5:2a:8a:e1:5d:a0:70:95:83:7f:a1:ea:95:d7:
f4:17:d5:a4:8d:4d:5a:73:24:8a:88:2d:9b:0a:34:e9:22:24:
55:c8:27:b6:ad:ca:3d:5f:9d:3f:8d:8b:40:f1:a1:f8:2c:8b:
67:c0:2e:a2:08:0b:fc:a3:f2:c7:9f:9f:ce:04:70:6b:32:b7:
3f:ee:b8:97:71:9c:f5:0c:5a:d0:bc:76:89:06:04:f0:fe:82:
1f:6f:73:51:a1:4d:16:d2:09:1b:5e:fd:04:d5:e8:4c:fd:49:
92:32:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:31 2026 by rpki-client