
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json)
Hash identifier: buJeZ8nf0wYJbF7nzspgqacyDQ3zsU3PP2pblURjIhc=
Subject key identifier: 09:66:6C:A6:5D:D5:20:89:9F:9E:88:1A:CB:FF:55:98:8E:EE:A9:56
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 0637
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
Manifest number: 05E0
Signing time: Wed 22 Jul 2026 23:56:25 +0000
Manifest this update: Wed 22 Jul 2026 23:56:24 +0000
Manifest next update: Wed 29 Jul 2026 23:56:24 +0000
Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: 4rcMvD5mS3gp50N133woU/b/22WMD6TK20pI1Ti4QiU=)
2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=)
3: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=)
4: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=)
5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=)
6: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=)
7: B8BE560A4A1311F1B8639EABC7833773.roa (hash: 0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=)
8: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=)
9: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=)
10: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Jul 22 23:56:24 2026 GMT
Not After : Jul 29 23:56:24 2026 GMT
Subject: CN=6a6158a9-0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:ab:d3:20:45:60:b9:a4:a6:c9:38:ba:d5:
42:6e:d8:f4:37:d7:2f:74:54:41:23:90:f5:27:98:
49:f0:be:2c:0c:d9:78:8e:19:b1:85:df:be:db:23:
cc:a0:e9:e9:a1:64:01:e4:96:34:bd:a6:96:6f:ba:
b8:e3:87:17:26:be:c0:bb:32:5f:4e:bb:7c:55:c9:
81:58:c0:a9:e4:77:e8:80:d7:46:2a:3f:d6:da:55:
d9:c6:61:51:24:86:66:4e:a2:27:53:48:35:f3:a6:
10:ad:23:9a:2c:9e:f9:84:fd:e9:f0:a1:5d:37:35:
db:27:6d:90:d1:73:f6:9b:34:dc:59:ac:1a:01:0c:
32:59:c9:e6:c8:8c:c9:e5:f5:59:3d:1e:a7:29:a0:
a8:f2:c6:c7:11:43:60:fe:27:39:af:b1:27:55:4e:
b1:8a:f7:35:b7:f9:e4:89:5b:1c:30:9e:99:55:66:
22:cc:8f:28:13:38:05:db:bd:27:fa:3a:17:ac:8b:
1b:14:93:d3:31:26:81:93:3e:fc:22:48:0f:3b:b4:
22:38:14:73:66:d5:19:e8:de:e9:5c:74:69:f0:9f:
26:70:36:2c:be:4b:cf:fe:e9:8e:2b:51:fc:94:76:
33:e8:28:2e:51:51:05:b4:c1:89:8d:7a:fb:f3:1d:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:6C:A6:5D:D5:20:89:9F:9E:88:1A:CB:FF:55:98:8E:EE:A9:56
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:bf:e8:49:b7:49:f1:b4:dc:5a:61:5e:5c:c2:93:11:06:
0b:ff:15:bf:70:3f:73:29:6d:9e:f8:14:96:79:a8:a1:3e:8d:
de:d1:b3:d0:92:73:2e:6a:54:7f:6a:76:3f:ba:98:0f:1b:4c:
16:17:34:e2:4e:49:85:a2:50:c3:90:c9:96:5f:e2:f7:35:14:
08:5e:fe:2d:c8:84:cb:e3:61:1d:76:45:43:03:41:e5:64:93:
dc:65:51:e9:75:f1:36:ab:06:2a:3d:4f:df:3e:35:cc:99:fb:
c7:ad:f6:e1:f1:5a:0a:c1:d4:8d:96:9e:fd:81:51:d7:7d:41:
b9:de:f8:32:82:ec:3b:58:d5:4f:15:1b:bf:7e:37:7c:2b:a8:
42:97:42:1e:ed:12:b6:30:22:34:a7:22:87:ae:54:a0:d2:82:
c7:09:42:e7:f2:0f:00:fd:f0:d8:15:8b:bb:b9:59:e7:ed:65:
63:6b:d4:61:9d:01:e7:c7:b3:df:bd:e2:0e:1f:4f:31:43:37:
49:fd:5b:58:8a:4a:d1:22:3b:81:bf:52:ac:52:43:93:e6:d1:
bc:bc:e3:aa:64:05:16:ac:3f:4a:e3:c9:d8:15:52:ef:1f:38:
9f:e1:52:5b:1d:58:5d:63:2f:5b:09:37:b1:72:4a:e9:db:82:
64:60:f2:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy
MEM4RkQ1N0IwHhcNMjYwNzIyMjM1NjI0WhcNMjYwNzI5MjM1NjI0WjAYMRYwFAYD
VQQDEw02YTYxNThhOS0wOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRKr0yBFYLmkpsk4utVCbtj0N9cvdFRBI5D1J5hJ8L4sDNl4jhmxhd++2yPM
oOnpoWQB5JY0vaaWb7q444cXJr7AuzJfTrt8VcmBWMCp5HfogNdGKj/W2lXZxmFR
JIZmTqInU0g186YQrSOaLJ75hP3p8KFdNzXbJ22Q0XP2mzTcWawaAQwyWcnmyIzJ
5fVZPR6nKaCo8sbHEUNg/ic5r7EnVU6xivc1t/nkiVscMJ6ZVWYizI8oEzgF270n
+joXrIsbFJPTMSaBkz78IkgPO7QiOBRzZtUZ6N7pXHRp8J8mcDYsvkvP/umOK1H8
lHYz6CguUVEFtMGJjXr78x0cbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlmbKZd
1SCJn56IGsv/VZiO7qlWMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2
MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy
d0x0WS1TRVo1bGdneVAxWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALOy/6Em3SfG03FphXlzCkxEGC/8Vv3A/cyltnvgUlnmooT6N3tGz0JJzLmpU
f2p2P7qYDxtMFhc04k5JhaJQw5DJll/i9zUUCF7+LciEy+NhHXZFQwNB5WST3GVR
6XXxNqsGKj1P3z41zJn7x6324fFaCsHUjZae/YFR131Bud74MoLsO1jVTxUbv343
fCuoQpdCHu0StjAiNKcih65UoNKCxwlC5/IPAP3w2BWLu7lZ5+1lY2vUYZ0B58ez
373iDh9PMUM3Sf1bWIpK0SI7gb9SrFJDk+bRvLzjqmQFFqw/SuPJ2BVS7x84n+FS
Wx1YXWMvWwk3sXJK6duCZGDyFg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:00 2026 by rpki-client