
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier: nFKguC1TnIFpCcjJfn+dMYDRxdEUCJM4JLhJTPEeIj4=
Subject key identifier: 90:E3:40:AC:DD:F5:53:84:BC:15:C4:ED:D3:9E:01:9B:2B:D2:3F:38
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number: 45
Signing time: Fri 27 Mar 2026 07:57:38 +0000
Manifest this update: Fri 27 Mar 2026 07:57:37 +0000
Manifest next update: Fri 03 Apr 2026 07:57:37 +0000
Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: OS8Yv5j2QrkYKXbQy7HSNj1c+b0GXJ2PPJrjao234DI=)
2: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=)
3: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=)
4: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Mar 27 07:57:37 2026 GMT
Not After : Apr 3 07:57:37 2026 GMT
Subject: CN=69c63872-bd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:11:85:fc:9a:38:07:e3:f7:f9:07:d8:5b:65:
c0:06:36:b4:25:21:5f:f1:17:a5:76:be:45:0c:d6:
24:c1:90:76:7c:dd:24:f6:34:0a:11:61:30:44:69:
f6:19:dd:92:54:47:89:6f:32:07:f8:c2:bb:3c:e0:
17:e6:97:e3:a1:7f:99:96:22:fc:14:30:41:d6:6f:
b8:a7:3a:8d:e6:0c:2b:42:0f:99:92:40:16:bf:87:
22:68:15:ad:ff:47:77:fc:b6:e5:91:12:24:60:cd:
0c:dd:ff:d6:55:fb:0b:ff:67:de:e4:69:41:36:1f:
cb:e7:1f:93:83:4e:a8:26:21:d5:41:62:4f:7f:08:
f9:04:ae:da:a9:59:55:d7:3e:be:95:64:90:c4:5b:
4a:dd:97:06:a2:23:15:fc:ba:6f:aa:c5:75:fc:33:
33:1a:3a:3e:ae:9c:55:35:05:63:a1:cd:49:6d:ac:
e6:e1:b4:37:ab:b3:7f:bc:c3:57:b1:12:99:91:63:
3c:cd:43:31:0b:e5:f1:04:91:e3:11:69:cf:50:bc:
14:37:fd:49:47:8c:12:a8:f0:4c:b7:6d:2f:59:bd:
76:68:b5:dc:f5:f9:7e:5d:13:92:09:ad:96:ca:62:
64:c3:f5:28:7c:0a:e2:64:aa:5c:64:04:ea:87:7c:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:40:AC:DD:F5:53:84:BC:15:C4:ED:D3:9E:01:9B:2B:D2:3F:38
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:21:6d:ab:c0:07:99:15:52:a2:28:c2:a6:2d:7e:fd:78:
1a:7c:c2:77:33:5c:6e:e8:63:e5:33:27:06:f5:48:b3:27:24:
b0:43:cc:51:e1:b5:5e:ff:94:69:8a:0c:3c:83:31:5b:a4:2f:
8c:4e:75:31:72:54:e7:0e:16:56:8e:80:42:03:a3:d3:52:c6:
6c:bf:88:a8:dd:10:b3:7d:97:68:3b:6f:31:98:8e:da:59:98:
c0:1a:88:ff:c4:62:9f:ce:82:21:1a:0a:34:e3:34:61:d5:12:
ba:8f:e0:68:0e:d5:2f:6f:d1:16:8f:a8:e2:84:35:75:3b:e3:
45:df:3a:eb:c1:db:ac:ab:fb:d0:4a:f7:19:fc:e2:69:c5:f3:
9a:8d:f3:4c:f0:9d:f2:5d:c8:9b:de:7b:30:7f:b0:8c:7e:16:
11:37:e1:1f:53:e1:8f:91:29:7d:74:29:d3:c7:83:2a:00:55:
f5:ee:76:30:2a:f6:2d:cd:66:8f:b5:92:33:de:77:6e:ae:08:
a8:28:86:ac:a9:29:58:b2:9d:97:5c:46:cb:73:3d:89:30:b0:
62:79:f8:d3:b1:70:be:90:7d:89:c6:d7:4a:07:58:9f:98:dd:
4e:55:5d:c7:f0:d5:45:a3:61:16:4f:49:bf:fb:bf:2a:a7:d0:
ad:72:fe:53
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njk1QTExMC8GA1UEBRMoOTQxMTE2M0E3MzU3RUZEOEExMkQ2OUI2Qzk0NzY1NEY0
NURFNkUyQTAeFw0yNjAzMjcwNzU3MzdaFw0yNjA0MDMwNzU3MzdaMBgxFjAUBgNV
BAMTDTY5YzYzODcyLWJkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlEYX8mjgH4/f5B9hbZcAGNrQlIV/xF6V2vkUM1iTBkHZ83ST2NAoRYTBEafYZ
3ZJUR4lvMgf4wrs84Bfml+Ohf5mWIvwUMEHWb7inOo3mDCtCD5mSQBa/hyJoFa3/
R3f8tuWREiRgzQzd/9ZV+wv/Z97kaUE2H8vnH5ODTqgmIdVBYk9/CPkErtqpWVXX
Pr6VZJDEW0rdlwaiIxX8um+qxXX8MzMaOj6unFU1BWOhzUltrObhtDers3+8w1ex
EpmRYzzNQzEL5fEEkeMRac9QvBQ3/UlHjBKo8Ey3bS9ZvXZotdz1+X5dE5IJrZbK
YmTD9Sh8CuJkqlxkBOqHfNN/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkONArN31
U4S8FcTt054BmyvSPzgwHwYDVR0jBBgwFoAUlBEWOnNX79ihLWm2yUdlT0Xebiow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzYzNTMwQ0ZFQzhG
MTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlpaExXbTJ5VWRsVDBYZWJp
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEJFV09uTlg3OWloTFdtMnlVZGxUMFhlYmlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
OTVBLzYzNTMwQ0ZFQzhGMTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlp
aExXbTJ5VWRsVDBYZWJpby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB4IyFtq8AHmRVSoijCpi1+/XgafMJ3M1xu6GPlMycG9UizJySwQ8xR4bVe/5Rp
igw8gzFbpC+MTnUxclTnDhZWjoBCA6PTUsZsv4io3RCzfZdoO28xmI7aWZjAGoj/
xGKfzoIhGgo04zRh1RK6j+BoDtUvb9EWj6jihDV1O+NF3zrrwdusq/vQSvcZ/OJp
xfOajfNM8J3yXcib3nswf7CMfhYRN+EfU+GPkSl9dCnTx4MqAFX17nYwKvYtzWaP
tZIz3ndurgioKIasqSlYsp2XXEbLcz2JMLBiefjTsXC+kH2JxtdKB1ifmN1OVV3H
8NVFo2EWT0m/+78qp9Ctcv5T
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:24 2026 by rpki-client