
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier: 4QYoqyFzq3l7YvGGyGRT9dy6fMaSZ3mvrpdaCk/+X/A=
Subject key identifier: 53:B6:8D:AD:39:D3:7A:62:F7:8A:5F:22:DF:C9:84:A9:BE:66:90:19
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number: 4A
Signing time: Sun 05 Apr 2026 07:41:49 +0000
Manifest this update: Sun 05 Apr 2026 07:41:49 +0000
Manifest next update: Sun 12 Apr 2026 07:41:49 +0000
Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: UXM0DuEzdGajzLHVuSEyTJ3p07Br6QeUIvKSOnYqEe8=)
2: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=)
3: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=)
4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Apr 5 07:41:49 2026 GMT
Not After : Apr 12 07:41:49 2026 GMT
Subject: CN=69d2123d-748b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:11:c3:d1:25:fd:42:97:0f:05:9a:fd:40:
b5:6d:d7:07:8d:f3:ce:fa:fd:28:06:2b:5a:5a:19:
d6:a4:63:0e:88:de:c3:a0:2b:61:79:bf:51:31:3b:
df:12:ef:dd:5e:ed:19:4f:57:2a:bb:7b:5d:64:4d:
5a:a8:93:6c:a5:03:ae:79:b9:53:2a:42:c6:1d:6e:
48:c9:85:a6:76:b6:00:5a:91:64:21:39:24:f8:6b:
36:bb:6a:3e:f4:69:76:98:83:16:97:18:9b:5a:55:
71:ec:e8:f5:1b:0c:b6:63:24:a8:16:21:74:05:37:
04:43:2c:64:a7:41:9b:dd:b1:b3:28:2c:f0:d2:28:
e5:3e:7a:4a:57:8f:b9:c3:1b:95:ba:dc:1c:28:4d:
c9:85:f4:3e:b6:fe:1a:20:a1:4e:fe:9e:62:ea:5d:
70:47:37:4e:56:46:1e:2f:33:73:3b:fe:c0:e6:9f:
54:6e:46:44:f4:84:cd:7a:d1:d2:18:7d:19:30:f5:
df:76:07:2f:ce:af:bb:52:cc:46:ed:19:02:76:0d:
45:33:54:58:5c:15:fb:f8:5e:6a:30:1d:1f:c1:92:
70:8e:84:1a:a0:7c:b4:69:62:20:68:a8:7c:07:99:
5e:a6:7c:96:f8:75:92:15:05:31:5f:51:d2:01:6e:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:8D:AD:39:D3:7A:62:F7:8A:5F:22:DF:C9:84:A9:BE:66:90:19
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:9a:1a:a6:fb:f4:f2:20:d1:64:c8:3c:1a:8c:5e:ea:aa:
42:ea:fe:5c:27:d9:1f:04:98:9b:81:94:9f:11:e1:eb:dc:7d:
4f:f4:9f:40:e7:eb:08:cf:e1:0b:73:1c:37:96:17:2f:d7:bc:
c7:a7:7c:98:15:43:1c:49:85:91:99:cc:0a:ac:e2:64:d9:69:
a8:1b:6a:70:20:0a:a9:f1:3d:0f:bb:d7:64:f2:f0:8b:46:d3:
ec:e6:f2:85:68:db:d6:24:ab:50:bc:15:9b:56:14:6c:94:f9:
1a:b5:1a:24:39:59:51:2d:79:6e:63:f9:2b:47:6b:7b:6c:1e:
f9:3a:31:43:68:1c:2f:f5:30:6f:98:6a:2e:2b:8d:35:86:9f:
36:bc:e6:4f:78:ab:24:42:f4:02:ef:39:93:4e:44:78:00:f4:
4d:2c:2e:62:3a:47:9b:25:9e:58:ef:36:e7:77:70:8a:c5:58:
59:4c:60:35:3f:48:bd:94:6e:e0:97:cc:87:9f:38:2b:ba:01:
42:3f:43:9d:81:58:34:2c:a9:44:3a:81:4a:e5:78:5a:ed:3b:
a1:9a:b4:73:32:0f:52:2b:ef:0a:92:72:c4:17:75:74:aa:84:
ee:b2:10:19:8a:69:72:91:6c:2c:df:44:f2:30:0e:6e:05:2c:
24:45:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:12 2026 by rpki-client