
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json)
Hash identifier: LZWlvetWWmO/8nSKIz+pvmHRXzwNPooC4hksEhoAaYo=
Subject key identifier: 9B:2B:87:95:D9:BF:77:C7:76:B0:FE:60:65:D1:45:C1:30:FA:4C:8F
Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
Manifest number: 85
Signing time: Sun 29 Mar 2026 07:18:19 +0000
Manifest this update: Sun 29 Mar 2026 07:18:19 +0000
Manifest next update: Sun 05 Apr 2026 07:18:19 +0000
Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: /K1fQBOT55h0yoTKVxQ1yF8Y54x9SJVO6dV/KWckBzM=)
2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: VYc3OiknOZk5D+JuTCHA3ZgN5xV+C9RS9FUO4Z+WkyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 07:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Validity
Not Before: Mar 29 07:18:19 2026 GMT
Not After : Apr 5 07:18:19 2026 GMT
Subject: CN=69c8d23b-7ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:ce:50:e7:63:48:42:7f:37:73:a8:d8:18:
9d:81:64:06:1d:93:f7:03:8a:bb:32:79:52:15:cf:
79:b4:c3:96:13:84:37:5b:ac:96:03:22:26:3b:bb:
30:cb:09:86:62:c8:d0:e5:46:01:99:d2:09:2f:17:
52:e2:60:1b:e6:03:1a:f0:34:d9:0c:b8:03:7b:39:
b7:fc:ba:a6:46:a6:a5:fc:93:ea:70:de:2c:29:90:
6b:ca:c8:a8:10:1b:b4:c0:c9:72:ba:b2:20:5f:f9:
b7:43:2a:82:9a:83:3d:e2:b9:81:ff:fd:8e:40:1a:
09:52:a8:ed:9d:74:98:55:5d:a1:5f:56:02:e5:34:
06:f4:89:d1:bc:cf:12:d8:df:ea:d7:e7:6a:f9:cc:
ae:a6:eb:28:f3:40:17:0a:be:c1:ce:c1:ac:5f:3b:
ab:f3:c2:96:47:c9:35:c3:5b:fe:a4:71:7e:40:d8:
84:66:4c:ec:cf:0a:b5:35:46:e1:9e:5f:7e:17:b4:
a2:6c:0a:e8:51:9f:60:81:85:af:f1:29:3d:23:5d:
87:17:69:c1:4c:63:7d:2a:c4:ef:a2:f2:c9:28:f3:
35:ac:8e:1f:a5:36:c7:33:0f:50:cd:de:8a:e1:ab:
6a:9e:93:a4:2e:fe:65:f5:32:dc:5c:e7:4c:d2:5a:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:87:95:D9:BF:77:C7:76:B0:FE:60:65:D1:45:C1:30:FA:4C:8F
X509v3 Authority Key Identifier:
keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0f:9a:ba:6b:ed:f8:ae:f4:64:77:26:00:bc:42:a9:e7:5a:
16:ec:5d:12:23:26:8d:c2:6f:3e:5e:e1:ea:8f:5b:1d:1d:82:
79:de:94:e9:18:56:ca:da:f1:d0:a9:a2:3d:15:8a:ed:f9:88:
ba:9d:63:ca:e9:10:9b:b7:52:cb:32:33:0b:0d:4f:ef:d9:07:
28:51:7d:d5:ba:3e:6b:3b:b6:28:21:2d:d9:01:26:37:95:8d:
1e:91:9d:1f:ca:3b:88:f1:a1:ca:88:ee:93:a6:3d:b7:5d:a6:
a1:8a:54:99:8b:d5:80:70:dd:4b:a3:f4:37:78:1f:68:5e:37:
f6:05:c0:b2:d9:b7:60:b5:d4:56:db:c0:ac:bd:cc:0d:ad:37:
49:44:4f:5a:44:02:3f:8f:ce:4a:fc:11:df:5b:c2:68:44:93:
5b:4f:37:a7:6f:3e:eb:69:f2:a4:48:f6:87:28:91:76:cb:53:
86:c8:9e:b0:22:16:6e:c8:38:cf:6e:82:cb:06:38:e2:b7:12:
ff:0c:47:aa:1b:0b:e0:3a:7a:77:d4:5f:17:c8:2d:3f:5a:fa:
b2:87:6a:de:33:f3:27:74:d2:47:9b:85:8c:f5:65:ea:73:ed:
7a:15:3d:b1:59:cd:1e:c3:e4:38:50:40:a0:82:78:89:70:59:
b0:8b:d8:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBEQzMxMTAvBgNVBAUTKDVDQkY4QjA0NDA2RkZGNTMyNjkzMDdCQTc0OTI3MjFG
REMzRkIxMkIwHhcNMjYwMzI5MDcxODE5WhcNMjYwNDA1MDcxODE5WjAYMRYwFAYD
VQQDEw02OWM4ZDIzYi03Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxnOUOdjSEJ/N3Oo2BidgWQGHZP3A4q7MnlSFc95tMOWE4Q3W6yWAyImO7sw
ywmGYsjQ5UYBmdIJLxdS4mAb5gMa8DTZDLgDezm3/LqmRqal/JPqcN4sKZBrysio
EBu0wMlyurIgX/m3QyqCmoM94rmB//2OQBoJUqjtnXSYVV2hX1YC5TQG9InRvM8S
2N/q1+dq+cyupuso80AXCr7BzsGsXzur88KWR8k1w1v+pHF+QNiEZkzszwq1NUbh
nl9+F7SibAroUZ9ggYWv8Sk9I12HF2nBTGN9KsTvovLJKPM1rI4fpTbHMw9Qzd6K
4atqnpOkLv5l9TLcXOdM0lrFuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsrh5XZ
v3fHdrD+YGXRRcEw+kyPMB8GA1UdIwQYMBaAFFy/iwRAb/9TJpMHunSSch/cP7Er
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMERDMy9EMDYxRjU0MjYx
NTYxMUYwOTFCMTBFNkFDNEY5QUUwMi9YTC1MQkVCdl8xTW1rd2U2ZEpKeUg5d19z
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MERDMy9EMDYxRjU0MjYxNTYxMUYwOTFCMTBFNkFDNEY5QUUwMi9YTC1MQkVCdl8x
TW1rd2U2ZEpKeUg5d19zU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATg+aumvt+K70ZHcmALxCqedaFuxdEiMmjcJvPl7h6o9bHR2Ced6U6RhWytrx
0KmiPRWK7fmIup1jyukQm7dSyzIzCw1P79kHKFF91bo+azu2KCEt2QEmN5WNHpGd
H8o7iPGhyojuk6Y9t12moYpUmYvVgHDdS6P0N3gfaF439gXAstm3YLXUVtvArL3M
Da03SURPWkQCP4/OSvwR31vCaESTW083p28+62nypEj2hyiRdstThsiesCIWbsg4
z26CywY44rcS/wxHqhsL4Dp6d9RfF8gtP1r6sodq3jPzJ3TSR5uFjPVl6nPtehU9
sVnNHsPkOFBAoIJ4iXBZsIvYEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:30 2026 by rpki-client