
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier: EeJKeZrtl5oasK4EVNTw/Y5Tb/CXOiMhgFgMzoJN5Xk=
Subject key identifier: FC:5C:B4:13:EC:5D:5C:7E:D0:99:F3:EF:5C:6C:A7:30:25:7F:EC:BA
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial: 05DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number: 05B9
Signing time: Wed 20 May 2026 23:14:14 +0000
Manifest this update: Wed 20 May 2026 23:14:13 +0000
Manifest next update: Wed 27 May 2026 23:14:13 +0000
Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: QhTia+p48ymQ7tdEoYUSd15/FMDhoD/m/RAR8mUmabo=)
2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: XBM3DlKoBDVofgPqbooQZ6dKrRlGCNt1SrNFpBQtq4Y=)
3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ=)
4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Validity
Not Before: May 20 23:14:13 2026 GMT
Not After : May 27 23:14:13 2026 GMT
Subject: CN=6a0e4045-f546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:13:9c:c5:64:66:67:aa:96:25:65:62:09:
cb:97:88:20:8b:b7:08:42:db:06:da:4a:b1:24:5c:
5e:cb:61:fe:53:a7:11:18:06:2f:f8:5c:fb:21:71:
39:1a:b6:05:5c:7c:28:e0:77:dd:01:b7:5d:ce:0e:
99:d1:c6:74:a9:a4:b4:a5:b0:28:52:ac:57:e0:1d:
c5:56:7d:03:8f:e6:86:3d:8d:ed:6a:cd:8e:d4:11:
4c:88:03:81:2b:f9:4c:6f:9c:48:42:5f:d0:7c:df:
68:3c:62:9d:04:d7:9f:c0:ff:58:0c:45:6b:47:99:
6e:ca:18:90:cf:fd:2d:fd:ed:9c:90:f1:20:df:9b:
05:ff:32:53:7c:42:8c:c5:22:f5:91:e0:40:2c:69:
82:f5:0a:d4:f2:77:e6:84:ac:76:6b:8c:2d:02:5a:
30:81:e9:ac:ea:92:22:93:56:b4:b7:23:ab:6b:20:
f1:78:72:08:68:80:dd:7c:d1:4f:83:99:2e:1a:7e:
96:0f:8d:e0:5d:fd:02:b5:75:b8:26:c4:67:13:b4:
ef:e6:47:8a:b3:c4:27:78:1d:87:f7:db:0b:64:43:
58:96:ef:93:6f:b4:db:62:0d:0e:94:07:58:d0:b1:
6b:bb:e8:c0:ee:53:d8:c0:a7:7a:aa:40:be:4d:64:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:B4:13:EC:5D:5C:7E:D0:99:F3:EF:5C:6C:A7:30:25:7F:EC:BA
X509v3 Authority Key Identifier:
keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:15:b5:4d:03:65:41:ef:a5:af:58:80:2e:e5:40:21:c6:2e:
33:a0:64:0b:61:1e:12:e6:6d:91:86:05:74:02:93:41:b8:b0:
a9:e8:df:db:53:67:e8:7d:cd:4a:bf:52:49:c1:7e:93:2e:0b:
5d:05:70:8c:15:f6:d6:5a:89:86:57:8e:b1:0f:58:1a:e6:ab:
da:0e:5a:5b:dc:a9:a3:ca:9f:2f:fe:13:15:99:60:95:41:13:
54:23:5a:68:92:94:90:a5:9e:12:39:7e:35:03:b5:36:11:e9:
a2:21:a2:d5:4a:66:ee:9e:f8:c0:b2:56:4c:37:51:71:58:e1:
35:90:1f:fa:50:ad:26:80:d3:0e:e5:5d:e4:11:60:6b:b0:4f:
c7:66:c5:e6:8d:0c:6b:09:d5:94:89:09:18:4e:e9:d7:8f:8a:
c5:34:1d:d9:8a:d5:a2:ae:a2:81:ce:52:bb:12:ff:0f:ed:9a:
8e:ea:81:ff:96:2d:c8:e7:2b:4f:12:3b:c6:b3:7c:89:56:1c:
b2:f9:fb:6d:4d:54:fc:f2:e2:43:ed:db:cf:39:86:38:86:6e:
02:50:77:26:4d:d0:95:f6:4b:ba:ef:50:1c:d6:e5:88:02:62:
4b:c3:83:8d:d6:d1:9a:aa:f6:d7:0e:a1:d2:4a:c6:fe:33:0c:
26:c1:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:13 2026 by rpki-client