
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json)
Hash identifier: Jajr+P9MHqVkhNc11MA7KRO4J17sdHnseGOiyL3qVO4=
Subject key identifier: 84:AC:61:84:B0:DB:99:1A:15:A6:DA:6A:7E:F5:8F:5C:AC:12:DE:BA
Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
Manifest number: 83
Signing time: Wed 25 Mar 2026 06:52:56 +0000
Manifest this update: Wed 25 Mar 2026 06:52:56 +0000
Manifest next update: Wed 01 Apr 2026 06:52:56 +0000
Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: vM67v1WTeqqVqGA42O8NkH42SueJDl8OqpvziNk2Jao=)
2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: VYc3OiknOZk5D+JuTCHA3ZgN5xV+C9RS9FUO4Z+WkyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Validity
Not Before: Mar 25 06:52:56 2026 GMT
Not After : Apr 1 06:52:56 2026 GMT
Subject: CN=69c38648-1029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:56:10:c6:81:b1:d9:ef:e8:f3:42:00:8f:
8e:26:a3:6d:f2:69:56:29:d4:13:86:91:c3:6a:db:
69:92:50:0a:71:2f:b9:d5:d6:97:c2:4a:8b:34:df:
bc:d9:c9:0d:a2:43:ec:39:8b:51:27:22:e6:a6:38:
96:40:cb:53:fb:2d:df:4a:dc:3a:81:9f:66:5a:ea:
f8:d9:86:96:0d:70:65:4b:42:23:34:50:24:67:c4:
86:27:ad:75:b3:bc:da:0b:fe:cc:09:30:7f:3e:97:
a0:ee:56:05:db:7d:9f:e1:98:e0:40:af:cf:5a:bc:
bc:d1:03:4a:f8:9b:e7:9b:89:cd:6a:b7:94:ae:9f:
cf:13:68:53:83:b2:8b:e8:b7:d8:4f:b2:05:c2:69:
10:04:75:bc:ad:ed:63:d0:4a:2f:2f:3e:57:bf:12:
bf:7c:8e:86:1f:41:65:a8:1e:a9:13:10:48:0b:55:
99:bb:d2:a1:7c:7d:75:d4:7e:b5:db:ab:b2:ac:6e:
f4:58:e7:38:a8:28:ae:ec:f2:2f:ca:2d:f5:d1:f2:
72:1e:4b:c7:dd:0b:84:26:8d:6d:80:90:d1:d2:a7:
06:b8:7a:46:93:a2:25:97:64:35:f8:9e:f1:dc:31:
63:c9:71:2e:03:8a:c8:33:79:e6:07:71:be:c0:d4:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:61:84:B0:DB:99:1A:15:A6:DA:6A:7E:F5:8F:5C:AC:12:DE:BA
X509v3 Authority Key Identifier:
keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f5:6b:05:58:70:15:9b:0c:61:55:dd:bb:ba:35:18:a7:28:
08:77:96:de:62:52:a0:f1:0e:b4:9f:37:ed:21:dc:22:dd:49:
72:84:32:b4:c1:59:25:fa:9d:1e:52:da:1d:95:9f:c2:1c:43:
53:4c:24:b6:c8:cf:44:61:ec:e9:6e:f1:7b:c5:d3:d8:49:59:
cf:2d:bd:27:00:5b:d7:0d:64:82:b0:5c:ca:15:9a:74:5f:c5:
7e:55:8d:f3:2e:7b:37:00:c5:55:7e:66:a3:0e:15:c7:03:b4:
e7:6b:11:33:7d:9a:aa:82:39:29:1d:a0:d0:6d:61:2f:32:f7:
5a:38:ae:1d:b5:3f:52:fc:a7:63:d9:a5:ba:db:93:50:ec:14:
4e:71:c9:91:a2:95:86:58:66:33:ca:ed:b6:98:3d:29:89:78:
41:12:89:3e:ad:49:16:0d:a6:b9:74:d0:d0:f7:19:33:99:56:
9c:ba:80:5d:b1:ac:18:d6:73:1e:5e:27:21:92:3c:7b:00:28:
61:01:dc:50:de:20:70:be:cf:f5:d0:9f:40:3b:45:25:25:e3:
05:e0:63:38:d9:18:63:43:48:49:e1:3d:7a:b1:5a:29:0a:00:
9f:79:c7:0b:47:f5:9c:3f:8b:4e:70:ba:84:35:b9:f8:83:52:
cf:f5:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:52 2026 by rpki-client