
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier: +u2BQfRrAbqzsyRQa66WmDWwS8eIuOL1pcWiRWk4BWE=
Subject key identifier: BB:25:1C:0A:0E:47:C4:F8:7F:DB:25:43:F4:65:4F:E7:2B:34:46:C2
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial: 061F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number: 05F9
Signing time: Tue 22 Sep 2026 22:40:14 +0000
Manifest this update: Tue 22 Sep 2026 22:40:13 +0000
Manifest next update: Tue 29 Sep 2026 22:40:13 +0000
Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: kjcY+YJqO7+Bck/WouHl68p5As2FFB+Sd35Olt+Cxq8=)
2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: XBM3DlKoBDVofgPqbooQZ6dKrRlGCNt1SrNFpBQtq4Y=)
3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ=)
4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1567 (0x61f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Validity
Not Before: Sep 22 22:40:13 2026 GMT
Not After : Sep 29 22:40:13 2026 GMT
Subject: CN=6ab303cd-8a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:e8:26:5d:84:c4:8e:28:a4:c4:df:2a:69:
25:20:d4:8d:b0:64:99:c8:eb:63:5f:2a:0a:c1:a4:
17:15:fb:c3:53:a7:3a:5d:e8:41:88:5d:d4:80:43:
3e:bf:88:ee:fa:2e:59:23:28:c8:e8:cf:ff:82:5b:
f5:fe:1f:99:02:eb:bb:c4:04:7a:d0:39:ef:6b:9e:
9c:d2:1f:ca:a1:a0:4d:db:83:e0:1f:9f:e1:e7:00:
e9:5b:74:ff:51:bb:35:f5:94:29:3f:90:5d:82:4d:
c9:a1:b5:8e:09:ec:c2:2b:48:6a:bb:14:13:51:82:
1c:d4:78:a3:94:0d:67:38:54:5c:7b:32:cb:25:c6:
7f:49:fb:92:39:1c:18:e5:02:e6:f4:06:10:f5:3d:
32:75:94:87:29:4e:be:b6:5e:84:56:41:c8:b1:8a:
fc:0e:19:bf:6e:db:b3:53:44:e7:cd:36:27:2d:41:
e1:f1:c2:86:50:a0:bf:bf:48:31:e3:19:21:43:76:
44:b3:75:a0:02:e7:bf:c2:e5:ec:4c:03:6c:71:41:
9a:17:38:b9:a9:16:47:12:b2:b7:61:dc:33:ea:d8:
d1:ce:16:dc:6d:e5:a7:2d:0d:79:f5:26:2a:86:49:
34:cd:e5:76:8b:a8:77:c2:51:fc:ae:af:a5:04:16:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:1C:0A:0E:47:C4:F8:7F:DB:25:43:F4:65:4F:E7:2B:34:46:C2
X509v3 Authority Key Identifier:
keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:92:29:c9:23:c0:19:bb:1e:b2:75:77:08:08:ec:d9:32:05:
41:73:3f:1d:be:74:72:ba:4c:4d:40:d4:6e:8a:b5:a7:56:b3:
54:3f:42:4a:48:55:44:ce:36:2a:bb:8d:e7:a9:75:97:57:48:
07:1f:5c:c1:88:bf:40:3f:73:61:5d:87:2d:87:45:97:e4:12:
89:76:5e:52:21:18:2c:79:cb:3d:b3:9d:ff:2f:7a:49:64:5f:
54:2e:1a:96:b4:11:52:7b:e9:ea:a0:e3:5c:4b:21:90:b7:a4:
31:82:f5:74:d8:68:69:94:40:be:ce:e1:da:bf:df:cb:2e:77:
8a:e1:35:92:35:ab:e8:d6:9e:47:3e:2a:a1:b5:23:e2:09:53:
4d:be:4e:62:c7:22:52:e3:47:71:81:5e:52:9e:b8:bd:3a:8b:
68:88:de:20:40:ad:d9:69:e8:0a:93:bc:c9:66:46:8c:ba:2a:
3f:bf:bc:a5:52:55:2c:db:7d:0f:9a:ce:0c:43:87:a0:30:54:
41:31:92:aa:8c:b3:c0:0a:f6:f0:f7:dd:1c:ec:f6:29:a2:a6:
77:3c:ec:2e:93:07:b9:79:d0:52:30:0a:6c:8b:24:5e:e1:26:
30:08:77:4f:8e:af:a2:f5:02:9e:80:ba:6e:0f:12:48:bb:74:
1b:5d:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:31 2026 by rpki-client