
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier: +KjIOaqC2uXOx7C1pKh/thHdUjL35t9EhG6RqHk8LuA=
Subject key identifier: E7:9F:E6:6F:CA:C5:FD:31:C4:67:A5:55:30:EF:F2:DE:8F:01:46:91
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number: 80
Signing time: Thu 23 Jul 2026 09:37:14 +0000
Manifest this update: Thu 23 Jul 2026 09:37:13 +0000
Manifest next update: Thu 30 Jul 2026 09:37:13 +0000
Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: lPVtWXqwCGg8crbPlVzlQwcfvQwcEjgx4owX4dMAWwc=)
2: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=)
3: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=)
4: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Jul 23 09:37:13 2026 GMT
Not After : Jul 30 09:37:13 2026 GMT
Subject: CN=6a61e0c9-750d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:15:9f:56:04:a6:8b:d6:70:53:dc:8a:b1:
1d:7a:e8:bd:32:8e:39:8a:5e:b2:6c:17:dd:2d:ea:
2f:22:18:04:a8:db:54:b2:6d:64:7c:41:0b:44:fa:
34:32:d5:0b:e6:04:93:ca:22:77:47:15:b0:d7:1f:
3a:b3:df:6c:23:4f:35:ae:84:59:65:36:77:be:82:
99:0a:0f:10:05:58:82:64:03:97:db:54:c7:11:13:
9d:b1:6f:bf:41:ba:52:f8:7d:89:18:83:85:a8:10:
ee:4c:d7:4b:a3:99:f8:60:bc:50:fc:d7:5b:26:af:
17:e1:1d:59:ab:0c:1b:a5:b6:45:93:45:9b:ef:81:
24:b9:e3:c2:4f:a6:9b:8b:4a:0f:08:ba:81:b9:26:
5c:39:f5:0e:35:75:13:93:a4:b6:f7:b0:c1:a5:ef:
54:c2:45:ee:58:bc:61:3f:21:ee:cb:65:19:7e:7e:
11:c6:6f:88:bf:af:66:51:5f:80:c3:33:34:a3:dc:
90:85:6a:2c:79:0f:03:55:23:da:7c:ea:69:bf:e8:
fc:c1:96:77:58:df:da:b4:d1:a7:bb:da:93:99:d1:
20:35:3e:c0:6b:b3:bf:52:42:2c:7a:71:f8:63:e4:
7e:8f:f4:04:ea:99:b1:27:1a:24:70:9f:02:ed:ef:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9F:E6:6F:CA:C5:FD:31:C4:67:A5:55:30:EF:F2:DE:8F:01:46:91
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:c6:d1:72:48:94:0c:bc:8f:91:4b:62:74:5d:f5:1c:c7:0c:
70:81:cf:46:8b:8e:2f:5d:61:86:91:6f:1a:22:0e:42:2b:61:
79:0f:bb:13:34:27:33:61:95:21:c7:4d:55:6b:02:22:20:59:
25:66:d5:92:df:ec:62:29:7f:e5:e0:71:3d:80:7b:20:e2:08:
c7:1b:c4:98:44:5b:66:58:3d:38:8f:6e:47:90:13:d0:d1:81:
4e:10:2f:63:0a:d3:78:3e:d1:fe:e5:85:c5:0f:9d:65:3b:c9:
99:a5:06:38:e6:e7:1e:83:80:1d:15:13:f8:03:25:53:4e:aa:
1f:09:52:90:b2:ff:d9:2e:7a:56:5a:85:20:74:ec:8f:2b:b6:
3c:7f:68:b2:bd:14:f5:67:13:e9:5c:7b:91:16:e7:98:4d:2c:
07:20:86:5a:22:09:c7:e4:5a:94:82:4f:be:35:bc:f6:d2:e3:
0d:13:fe:99:61:55:3f:d4:42:6b:54:30:7a:a0:cd:26:bb:f2:
50:b3:22:b1:69:33:2c:91:9e:0d:e3:6f:6c:98:e1:3b:c8:51:
7f:d6:99:41:f3:43:36:46:39:a8:33:f2:36:55:33:91:b5:ed:
fd:18:df:54:50:a3:f2:1b:31:55:d0:d3:2b:75:83:39:07:ad:
8d:49:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:14 2026 by rpki-client