
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier: +zvsMUOJWNR/ETmTrGkVOCbpseA1VJaPC4Bd3y+mQ5U=
Subject key identifier: 2B:4C:7D:29:EB:55:C9:41:E6:7F:60:24:0F:26:67:5D:12:8C:61:CC
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number: D0
Signing time: Mon 11 May 2026 06:54:53 +0000
Manifest this update: Mon 11 May 2026 06:54:52 +0000
Manifest next update: Mon 18 May 2026 06:54:52 +0000
Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: FRR//RSVat5BZnawG5BQ9hU6Q/xKaTDNkunoSOvvumc=)
2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Validity
Not Before: May 11 06:54:52 2026 GMT
Not After : May 18 06:54:52 2026 GMT
Subject: CN=6a017d3c-b67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:3a:67:e4:b8:c9:2a:9c:5f:03:d0:67:39:
23:fa:3b:ca:f1:4d:68:d1:45:c3:dd:fa:7d:97:00:
71:16:0e:68:44:f0:49:ad:00:c9:e9:ef:7c:a7:4d:
ba:bd:82:e4:37:4f:4e:53:ab:83:88:22:5b:1c:c7:
b6:e5:61:af:ce:a4:96:bd:78:d4:5a:cb:b5:94:65:
e2:76:e4:c7:6f:05:19:a5:fc:77:cd:a2:01:c4:91:
e7:63:bf:76:24:f0:b9:99:ce:36:66:7e:38:21:8e:
b6:e9:a7:69:c2:bf:60:5f:13:6d:bd:14:d5:eb:ed:
7c:d8:91:00:16:4f:f5:ad:c0:31:44:a3:cc:1f:99:
da:66:60:a1:07:38:88:32:fc:20:03:5e:cf:a3:f0:
ac:37:64:36:b5:de:96:14:a0:5b:48:79:1c:37:4f:
c4:e3:3b:05:dc:b1:aa:69:44:6b:f2:fe:90:c9:b1:
39:48:a9:b2:87:85:ec:a6:3d:2b:6d:9a:86:71:28:
d7:75:1e:4e:0e:35:d6:2e:73:16:fe:38:dc:1f:ad:
7e:68:78:c2:0a:ea:bd:0f:a3:d6:5d:4a:b5:1f:b5:
e8:3c:76:7e:c2:16:2b:d5:63:f4:c3:af:be:a9:b6:
2c:53:7a:86:cd:9d:c4:46:15:4c:d6:85:65:24:cc:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:7D:29:EB:55:C9:41:E6:7F:60:24:0F:26:67:5D:12:8C:61:CC
X509v3 Authority Key Identifier:
keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:ab:90:2a:42:b0:17:7a:48:2c:78:90:8c:38:76:fe:c2:
29:2e:f3:7b:31:35:fa:99:fb:67:f5:1b:b5:8b:59:61:3e:10:
0c:d0:92:75:65:63:70:c9:e2:46:b9:62:a4:61:52:33:1b:37:
bf:9e:c2:9b:12:c7:c6:31:0a:4d:96:56:5c:84:e3:d0:06:27:
a5:cb:fe:26:1a:e1:a7:52:7d:72:24:c4:78:a1:85:cc:c2:d3:
d1:93:d5:76:76:37:92:0a:36:51:a8:b5:d7:bd:9b:7a:2a:81:
a5:f6:93:b3:23:67:d9:09:a6:88:b5:0d:c9:66:ac:de:23:2d:
9a:51:f6:79:58:9e:2d:35:8f:76:ec:cf:cf:72:80:56:53:ff:
f1:c8:90:a2:2e:76:5b:26:1b:27:2d:6f:9c:44:ae:e3:d6:85:
04:f5:7c:2d:4e:06:f1:d8:58:11:6b:06:99:35:81:d1:5a:3a:
82:0a:f4:3f:2c:7c:17:74:bf:cb:09:4c:61:53:12:7b:d1:3e:
5b:58:56:cc:50:c0:99:c4:ac:fc:af:6a:98:3f:47:55:e0:48:
94:04:ea:f9:3d:9e:91:b0:d7:30:ba:2a:cf:44:7b:38:dd:f7:
f2:83:ed:7a:6d:47:71:c9:3b:6c:19:e6:a0:15:03:ff:ab:19:
1d:02:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:26 2026 by rpki-client