
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier: 3zp6keVNcWkK6e9cQTXLerwkAxT/u7xtcMu+5YwG9Us=
Subject key identifier: 7E:98:3B:A3:29:2D:CC:71:BD:5F:98:2A:52:B5:F3:F1:29:83:41:3A
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number: 0114
Signing time: Wed 23 Sep 2026 05:47:03 +0000
Manifest this update: Wed 23 Sep 2026 05:47:02 +0000
Manifest next update: Wed 30 Sep 2026 05:47:02 +0000
Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: 8E2OdG2t/VMY9O5odxilk2o9Q0usV00cXAZSL2x2x0A=)
2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Validity
Not Before: Sep 23 05:47:02 2026 GMT
Not After : Sep 30 05:47:02 2026 GMT
Subject: CN=6ab367d6-e627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:98:e4:77:60:ad:48:d2:d9:31:1d:d0:ba:
1c:cf:66:46:8e:90:2b:6f:92:fc:4e:2d:26:fb:ff:
2a:69:1d:b3:63:11:e8:17:0c:89:a8:ca:b9:6a:54:
aa:e6:92:e4:f4:2c:a2:ae:e6:af:cf:f5:b0:f8:05:
12:aa:2f:07:ba:2a:9c:06:54:6d:86:2a:c9:df:c7:
5e:e0:38:37:45:75:4a:3b:da:be:47:45:bc:d3:4d:
05:5a:c5:d9:a4:86:05:c5:47:17:9d:e4:a2:4e:57:
b2:41:c3:8c:65:79:d7:9c:b7:c0:c4:ae:85:8d:d4:
1c:10:37:a4:86:d9:1e:cf:8e:06:4a:25:ad:8e:22:
ba:18:c9:a0:50:85:9c:e5:75:21:64:4b:23:69:d7:
71:20:df:27:85:a3:64:55:b3:59:57:bf:1b:7a:ce:
61:61:d1:94:99:da:c9:ef:d6:82:88:9c:3e:16:c2:
d7:4e:27:90:c9:4c:be:d3:77:c9:ab:53:07:3a:f0:
9f:bb:27:df:ea:1d:78:7f:0e:f6:38:13:cf:85:21:
ac:68:a1:96:cb:79:26:8d:d5:e2:3a:76:3e:c0:32:
5c:15:ba:28:88:55:5a:32:ba:8d:c7:7c:a6:13:d2:
90:9a:b1:a3:63:c6:4b:e2:00:8c:c3:2c:8b:3a:6d:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:3B:A3:29:2D:CC:71:BD:5F:98:2A:52:B5:F3:F1:29:83:41:3A
X509v3 Authority Key Identifier:
keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:12:eb:04:6e:01:88:12:03:3c:0f:04:ae:41:9f:e0:81:3a:
61:8f:4c:82:20:ef:1e:5a:2d:6d:85:15:72:70:bf:3c:96:82:
a9:e0:30:64:60:1b:32:53:7c:15:e6:bf:98:d9:04:71:e9:ef:
a1:68:b4:28:ad:70:9c:d0:f7:1e:86:5e:63:d5:ae:cf:2a:16:
cf:3e:18:e4:de:db:4f:e2:ef:7d:c2:2b:cb:67:87:ea:d7:02:
8f:3b:ed:d6:46:23:9d:c8:4f:93:2e:9b:e7:30:5e:d8:a5:3f:
ab:41:66:aa:5e:63:9b:50:69:c2:bb:64:14:a2:89:dc:f5:37:
4b:33:23:02:a8:c3:b5:14:61:e8:20:fb:f0:97:a0:12:bd:d7:
91:ce:ea:b6:19:0c:04:8a:c6:d6:72:89:41:d9:86:4b:a9:52:
cc:26:29:1a:8f:40:71:85:54:03:f3:a8:06:a9:5c:3c:f6:ec:
15:b5:af:52:ca:db:49:a3:5e:6e:ca:3a:5d:30:b6:fe:80:33:
00:3b:3a:c2:6d:80:ce:fa:7c:b3:f2:fc:92:25:97:a1:e9:33:
35:d8:24:34:08:e6:21:2a:07:17:38:00:25:12:1c:b3:8a:7c:
73:58:66:ed:e1:53:e7:09:a7:26:87:75:78:a3:e4:0b:d0:84:
87:9c:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:36:32 2026 by rpki-client