
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier: xiTiLsTi8y3zgQt20Djg+q4/duzu4BTcuSB9xnnaeYs=
Subject key identifier: 9A:96:DA:61:14:A3:F6:9D:84:70:99:B7:0F:04:BA:6D:ED:E2:AF:41
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial: 056C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number: 054F
Signing time: Sun 02 Nov 2025 23:27:48 +0000
Manifest this update: Sun 02 Nov 2025 23:27:48 +0000
Manifest next update: Sun 09 Nov 2025 23:27:48 +0000
Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: 7GUGq8eP+Aj0vYRyS2utC7KBv6hPK5eg/XfDpz60LQQ=)
2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k=)
3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 0eC5c42+O3/zR7ToxD38Dr0t546Zok3PpDvZy47K3EU=)
4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: fCn+m1Y3s4qDIZUNYo4x+QJzX9KNTkFwagXKOoylYkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Validity
Not Before: Nov 2 23:27:48 2025 GMT
Not After : Nov 9 23:27:48 2025 GMT
Subject: CN=6907e8f4-7f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:53:04:63:88:2b:08:04:18:77:04:5c:ad:
d1:5b:0c:00:9c:93:52:35:ec:01:e4:a5:a3:a4:0c:
77:ea:97:4c:d1:91:f8:d9:bc:7e:5e:c1:50:db:44:
61:4c:14:6f:18:c1:0e:5f:62:dc:e2:a3:1e:31:a2:
bf:e3:88:1b:dc:12:a2:b3:86:f5:e7:4b:3d:76:3f:
20:02:61:94:73:5c:67:5b:89:00:5b:ee:1a:b2:d1:
d2:14:04:ca:da:2e:18:c8:61:83:8b:91:b2:7d:6c:
5a:d7:09:d0:62:0e:a8:dd:4f:58:9f:cd:31:bc:cf:
9a:ec:d0:c4:97:77:f0:22:7a:72:11:84:ca:cc:36:
2d:68:97:b0:6b:9d:55:f9:a5:5d:d4:db:89:17:ba:
6c:a9:09:bf:0d:60:f1:b0:e6:72:6f:78:41:1a:8f:
62:b2:56:b1:33:57:71:f2:80:d6:89:f8:14:da:a0:
c3:2a:f0:e5:18:28:50:ba:ab:50:f2:6e:73:ec:ff:
ce:8a:75:d1:49:4b:22:db:cc:41:da:aa:2d:1d:ab:
bf:da:4b:0a:f5:cb:2b:7e:eb:73:95:3f:1a:72:33:
29:96:6c:95:b0:a5:e7:db:8d:ae:37:dc:4a:68:a3:
63:8e:fa:62:c2:19:0c:c0:75:9a:fd:be:94:c2:40:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:DA:61:14:A3:F6:9D:84:70:99:B7:0F:04:BA:6D:ED:E2:AF:41
X509v3 Authority Key Identifier:
keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:ce:8c:a0:5a:3b:bd:ce:ca:4a:bb:41:ef:a4:72:cd:cd:
54:a9:8c:f0:4c:59:8d:c9:37:b2:01:91:e2:02:1b:f7:cf:67:
d9:ab:82:b8:f4:fe:e4:10:b2:5d:82:a2:6b:84:b9:3d:4b:b2:
56:34:cd:5b:08:39:76:6d:cc:46:4c:0d:56:a7:49:4f:78:37:
a0:63:7a:f6:e3:05:80:1b:f9:fb:f7:b4:43:49:1b:1f:a7:67:
60:fd:6f:ee:73:f1:38:2a:84:d2:de:3c:9f:8c:0a:47:e8:eb:
2d:21:b5:24:2e:40:45:a4:6f:4a:7b:0f:93:6d:00:aa:28:a8:
ae:a4:c5:74:d5:8a:92:99:a4:f4:b5:4d:ff:73:58:53:6a:49:
94:2a:9e:14:2b:21:32:57:53:e1:ac:be:40:61:59:4d:dd:4f:
18:52:f3:00:d2:e5:8d:d6:8f:0c:18:6a:ae:8f:58:e3:02:fc:
81:a8:4f:c9:20:9f:2a:d3:af:42:df:94:5f:31:f3:f5:15:e1:
2f:9b:2f:0a:d3:19:b5:28:34:95:ad:73:6b:ba:b2:b6:bf:65:
a1:e4:4f:a0:f2:94:40:98:25:18:38:27:40:29:a7:9d:79:41:
8d:7d:28:bb:06:12:55:99:39:f8:2c:68:39:f0:22:2b:a7:3d:
ea:18:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:00 2025 by rpki-client