
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json)
Hash identifier: HTog7gDWDoP7GtBCN9LkmX3LBbp6wlvJYgLCG010SKk=
Subject key identifier: 42:1D:24:E4:22:B1:5A:8E:AF:94:BD:CE:CB:FD:AA:1C:F7:C6:BB:EA
Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
Manifest number: 9B
Signing time: Mon 11 May 2026 07:32:04 +0000
Manifest this update: Mon 11 May 2026 07:32:04 +0000
Manifest next update: Mon 18 May 2026 07:32:04 +0000
Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: 1p2fa/E8Qb7ggxJX/5D66nHYsxVgPlW0LJEcg+zJZHI=)
2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: VYc3OiknOZk5D+JuTCHA3ZgN5xV+C9RS9FUO4Z+WkyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Validity
Not Before: May 11 07:32:04 2026 GMT
Not After : May 18 07:32:04 2026 GMT
Subject: CN=6a0185f4-528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:11:22:f3:33:ee:bd:b0:fc:64:5a:52:2b:
88:1e:e1:e1:63:71:92:f7:db:08:3d:34:8a:47:22:
76:07:a9:a9:b6:2a:d9:5a:98:27:f7:51:9a:05:1e:
25:e9:07:7d:7b:85:b8:69:df:3e:32:90:3c:1a:0a:
28:b7:48:c9:0a:67:63:e1:48:bf:fe:34:9c:86:56:
8e:92:e2:74:43:6c:0d:71:74:9f:41:01:05:2c:30:
1c:ef:fe:8a:81:45:4d:35:15:ba:cf:55:ee:b9:4b:
24:3c:f9:89:0e:78:a0:42:53:56:e8:d1:d0:aa:54:
39:12:9f:75:6f:1d:ec:70:10:41:26:12:27:57:74:
59:5a:78:33:f8:60:ce:30:4e:db:dc:87:7d:6d:57:
78:92:d9:e5:05:c8:a2:c2:73:45:c8:29:b2:8d:50:
ff:d6:16:2e:e8:3a:76:99:b3:d6:23:24:80:b2:6b:
6b:5f:ec:aa:2c:d8:1b:e1:e4:02:00:83:12:af:1d:
76:04:de:d0:e8:39:6c:cd:2b:b7:f7:b9:55:58:fb:
12:24:3d:f1:57:92:b5:3c:fb:7d:94:a7:fb:b3:ef:
ec:a5:76:c8:03:cf:8e:e7:75:3a:48:39:ce:05:e0:
91:58:34:b6:f9:af:63:eb:48:52:e9:08:b5:d6:25:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1D:24:E4:22:B1:5A:8E:AF:94:BD:CE:CB:FD:AA:1C:F7:C6:BB:EA
X509v3 Authority Key Identifier:
keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:74:9f:6e:67:5b:1c:38:09:96:e5:88:96:bb:bf:f5:23:48:
a0:76:b0:cd:f7:6d:a2:58:c7:4d:1b:a5:82:c0:71:ad:36:90:
07:8f:53:53:16:2a:83:e6:27:12:73:82:62:7d:18:19:88:77:
30:f3:fc:d4:05:e5:b4:f6:69:3e:28:dd:d6:0b:fa:b4:04:78:
88:8f:ed:6d:93:66:e1:06:a4:e3:11:9e:dc:7f:e5:01:e4:67:
7d:c6:68:a9:28:e6:8b:68:a3:1d:7a:41:0d:1d:d4:fb:b0:f3:
18:8f:36:da:47:7e:84:75:23:e0:98:21:06:26:e3:9a:92:68:
d5:be:de:6a:5f:3b:b7:10:ab:2e:a7:6e:5a:2c:c0:95:89:f1:
e4:f1:c1:b8:56:eb:8a:fc:29:f2:de:4a:7b:ea:b8:c5:d3:89:
c8:65:68:f4:4a:05:ad:7e:31:87:99:63:ec:41:02:1f:76:72:
9f:d6:c0:53:1a:b3:22:4b:eb:6b:e3:63:3b:da:4b:2d:1e:e0:
58:f7:72:06:34:05:93:bc:17:cb:0a:84:6e:5d:48:62:4b:2d:
5f:35:64:2d:68:fc:0f:a6:98:e2:90:77:c2:ab:6b:7f:75:08:
29:cb:5f:20:a1:ca:9f:7d:ca:d7:07:53:5d:da:50:bb:5e:e1:
b9:51:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:34 2026 by rpki-client