
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json)
Hash identifier: bccM1W8Vx5qV7xzwGsXzsd3ez+VH1caMamk+VRQE9Sc=
Subject key identifier: E4:BD:29:89:29:2A:EE:14:39:86:46:F9:D6:9C:A2:1A:21:73:5B:A7
Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
Manifest number: C1
Signing time: Thu 23 Jul 2026 08:47:26 +0000
Manifest this update: Thu 23 Jul 2026 08:47:25 +0000
Manifest next update: Thu 30 Jul 2026 08:47:25 +0000
Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: 6gh7/O73mXhGP7+IZAcjs8h2X/kfa7UUzje5nfrBzXE=)
2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: TZHZVxW7CCxI2mCLIvTu0gRF/uCRxB2tLN96dmNIMvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Validity
Not Before: Jul 23 08:47:25 2026 GMT
Not After : Jul 30 08:47:25 2026 GMT
Subject: CN=6a61d51e-30d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:b0:e4:d6:9e:32:7d:2e:87:27:69:c0:2d:
0f:67:32:33:93:38:9f:01:54:a1:c7:11:5e:26:28:
5b:55:d6:dc:1e:5b:64:99:b3:33:73:e8:93:c9:64:
ec:03:93:9e:9f:96:b7:02:c3:22:77:cc:12:c1:4b:
12:93:ef:16:e0:0f:e8:d3:35:33:aa:0b:30:6c:10:
9e:89:8a:ec:7c:96:f8:ca:05:7b:c8:0e:b5:f8:66:
af:85:44:70:a5:f4:c8:f8:4f:71:3e:c6:89:40:b3:
de:ce:5a:1c:f2:1f:d4:30:51:2d:43:59:d6:d1:b1:
29:cf:ff:02:2c:e2:3f:17:73:3e:92:43:e6:44:8b:
f5:9e:4a:89:78:37:5c:e8:1f:f6:ce:48:c3:1f:14:
eb:87:09:1b:4b:fe:79:ad:a9:14:4d:2c:fc:4c:8d:
59:a6:0a:ee:d0:a1:c5:42:9c:8c:fb:ea:82:2e:3b:
3e:13:01:76:5f:9d:cf:51:91:db:4d:f4:64:89:31:
84:8b:02:d4:2f:2f:4b:bd:8b:29:8f:4d:bb:2d:b4:
7c:a1:95:36:0f:8d:81:d9:bf:f7:ad:31:de:15:ca:
f5:d3:d7:b1:cc:7b:77:be:8f:d7:7f:ed:61:b0:93:
57:5f:cf:b7:57:c4:22:9e:d4:11:e6:7b:f4:3a:d5:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:29:89:29:2A:EE:14:39:86:46:F9:D6:9C:A2:1A:21:73:5B:A7
X509v3 Authority Key Identifier:
keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:2a:25:b6:40:a1:72:17:2b:87:ff:43:39:d0:28:97:67:
16:f2:96:a5:e4:fb:59:58:0f:f7:29:11:21:95:26:7a:b8:a1:
c3:57:25:ac:c0:c1:3d:11:fd:60:30:54:39:39:c0:c9:8d:4a:
94:bc:43:86:32:8f:2f:df:4a:9e:b5:67:63:d0:01:47:c2:0c:
87:07:7b:3d:06:ec:7e:dc:de:e4:29:68:7c:4f:a7:86:ee:ec:
69:5c:6c:5a:9f:4d:34:d7:de:9e:4a:ee:2c:9f:76:1d:8e:08:
ad:a1:b1:af:13:15:f3:7b:63:eb:06:4f:df:3f:ac:27:fc:36:
42:15:51:68:30:62:b6:86:87:67:ec:e3:11:53:e6:aa:15:e7:
39:01:21:ba:8f:16:e3:f1:f2:6b:b2:08:53:75:aa:b1:5d:d5:
e0:75:43:10:be:01:bf:f2:9e:6c:49:95:59:44:71:e2:57:0f:
8f:35:74:04:a4:58:e0:c3:29:bf:45:e3:47:15:6e:b8:5c:d4:
4d:8d:3e:19:da:d6:fb:c4:6f:8d:3f:22:82:03:4c:46:bc:bb:
7f:dd:71:41:a6:e4:87:b6:fb:5e:6f:40:ec:04:01:1c:7f:e3:
22:0b:06:f2:e7:94:41:73:ab:57:6a:7e:ba:f8:06:56:21:ce:
66:eb:b7:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBEQzMxMTAvBgNVBAUTKDVDQkY4QjA0NDA2RkZGNTMyNjkzMDdCQTc0OTI3MjFG
REMzRkIxMkIwHhcNMjYwNzIzMDg0NzI1WhcNMjYwNzMwMDg0NzI1WjAYMRYwFAYD
VQQDEw02YTYxZDUxZS0zMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpyw5NaeMn0uhydpwC0PZzIzkzifAVShxxFeJihbVdbcHltkmbMzc+iTyWTs
A5Oen5a3AsMid8wSwUsSk+8W4A/o0zUzqgswbBCeiYrsfJb4ygV7yA61+GavhURw
pfTI+E9xPsaJQLPezloc8h/UMFEtQ1nW0bEpz/8CLOI/F3M+kkPmRIv1nkqJeDdc
6B/2zkjDHxTrhwkbS/55rakUTSz8TI1Zpgru0KHFQpyM++qCLjs+EwF2X53PUZHb
TfRkiTGEiwLULy9LvYspj027LbR8oZU2D42B2b/3rTHeFcr109exzHt3vo/Xf+1h
sJNXX8+3V8QintQR5nv0OtUKnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOS9KYkp
Ku4UOYZG+dacohohc1unMB8GA1UdIwQYMBaAFFy/iwRAb/9TJpMHunSSch/cP7Er
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMERDMy9EMDYxRjU0MjYx
NTYxMUYwOTFCMTBFNkFDNEY5QUUwMi9YTC1MQkVCdl8xTW1rd2U2ZEpKeUg5d19z
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MERDMy9EMDYxRjU0MjYxNTYxMUYwOTFCMTBFNkFDNEY5QUUwMi9YTC1MQkVCdl8x
TW1rd2U2ZEpKeUg5d19zU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMb8qJbZAoXIXK4f/QznQKJdnFvKWpeT7WVgP9ykRIZUmerihw1clrMDBPRH9
YDBUOTnAyY1KlLxDhjKPL99KnrVnY9ABR8IMhwd7PQbsftze5ClofE+nhu7saVxs
Wp9NNNfenkruLJ92HY4IraGxrxMV83tj6wZP3z+sJ/w2QhVRaDBitoaHZ+zjEVPm
qhXnOQEhuo8W4/Hya7IIU3WqsV3V4HVDEL4Bv/KebEmVWURx4lcPjzV0BKRY4MMp
v0XjRxVuuFzUTY0+GdrW+8RvjT8iggNMRry7f91xQabkh7b7Xm9A7AQBHH/jIgsG
8ueUQXOrV2p+uvgGViHOZuu3DA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:13 2026 by rpki-client