
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier: wWGcYZcP5lWWhxJa4UPnuqRQ2SBMI9oE/TJWVsRG4iM=
Subject key identifier: 0A:CF:BF:49:0D:EC:B4:D8:85:F9:67:D0:96:D9:F0:91:4B:84:75:18
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number: 05B2
Signing time: Sun 10 May 2026 23:14:36 +0000
Manifest this update: Sun 10 May 2026 23:14:35 +0000
Manifest next update: Sun 17 May 2026 23:14:35 +0000
Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: SvcIqeOxOh0NOFUGvNP6hkogu/jVQD1C1z1+3KrfikE=)
2: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 6NxbPpiEJs2yazc4XE7t1GVxt2/LOGH3NcLS2N1ULdM=)
3: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: FpSEkpsQMaA9en+9841zTtAmY9K+gYFgxlRnEd7kAEM=)
4: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: QkZRGL4upm9/d4MEQ4FWarVe1YBkIIS5APd+6Rs1go4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Validity
Not Before: May 10 23:14:35 2026 GMT
Not After : May 17 23:14:35 2026 GMT
Subject: CN=6a01115c-eeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:a1:d5:af:d3:9c:ea:46:e2:d2:72:fa:f7:
53:c1:aa:68:0b:0e:ba:75:e7:d9:7d:52:08:cd:3b:
7d:b0:ec:84:2d:b3:2b:a7:54:ad:50:1e:17:d9:8a:
30:0d:97:9e:a9:d0:dc:3b:81:fc:04:07:c0:4a:b5:
db:88:ae:e2:f4:8b:8a:3a:a9:1e:ce:3e:74:7b:ca:
cf:3b:e6:6e:a7:55:e4:95:ca:12:57:74:07:ce:4c:
72:73:b7:cc:a4:0c:e0:93:2c:8c:b3:f1:17:a9:36:
ad:08:ab:ec:8d:e9:01:4c:b2:83:2b:82:65:f8:ea:
0a:79:02:ea:49:cf:8e:bd:e3:7d:16:84:86:2e:3c:
df:11:fa:bd:38:47:d3:b7:98:9e:51:37:41:8c:4e:
6f:6a:f4:6f:50:93:ac:d9:53:e7:ff:fa:1b:df:95:
f4:c0:49:d5:26:18:c6:fa:f2:3b:0b:75:e1:d8:a8:
2e:4e:87:02:fd:17:eb:d1:10:a0:04:7c:78:4c:87:
2f:cf:eb:76:09:05:48:83:83:33:f4:e5:d0:d9:fc:
e5:95:27:b9:2c:57:67:62:ef:4d:ad:af:e7:e9:16:
74:7b:e8:91:b9:06:b0:f7:46:c4:99:68:e0:3c:b0:
ad:a9:04:fd:8c:1e:55:69:82:0b:08:0c:76:47:b7:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:BF:49:0D:EC:B4:D8:85:F9:67:D0:96:D9:F0:91:4B:84:75:18
X509v3 Authority Key Identifier:
keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:80:e1:b5:44:71:e8:e1:6d:ef:9b:28:f3:f7:79:45:17:7c:
5c:58:81:2c:cf:37:20:fa:7c:c0:36:69:58:d3:b4:fc:4d:36:
b5:f9:1a:4d:1a:92:7a:d4:4f:d7:2e:64:72:dd:26:6e:72:c0:
4a:c2:59:ae:29:57:e4:91:f1:82:73:df:bd:2d:db:86:ba:3b:
25:ce:ad:b8:37:e1:fb:c9:aa:e4:9c:c2:01:8b:0b:e8:71:8f:
9b:4b:51:95:86:cd:c7:52:96:4e:3c:84:42:14:c9:68:ec:07:
6d:5c:29:fe:62:9d:08:c1:fe:d0:92:13:d5:f0:d0:9b:96:d5:
be:b3:ec:74:1f:58:70:5f:96:d1:9c:38:b9:ee:fa:a8:d2:c6:
1d:1a:1e:d4:5e:67:f1:c9:7a:42:a8:a4:3b:ad:de:62:36:23:
d6:54:88:f3:f7:35:65:4e:13:cf:53:31:3f:8e:5f:7a:6c:d2:
9e:a6:e6:10:db:db:c1:75:d8:e7:99:11:d2:86:3e:c6:e6:ee:
f0:59:91:99:a9:a4:f9:7f:25:c6:20:81:eb:e5:e2:c2:8b:3c:
a6:24:59:39:a6:9e:42:63:ab:21:de:b9:20:2d:d0:b5:63:5d:
3e:b6:a4:27:6c:05:d7:a8:e9:dd:ab:4a:3e:27:03:ab:d0:33:
18:d4:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:58 2026 by rpki-client