
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier: gTl28AIwhgOAOH3wRCEye23lwsAwz13k/Dd7Q9+M8CY=
Subject key identifier: 29:6A:6F:9A:70:69:26:E4:F9:53:D0:CF:0A:DB:9D:F6:F5:46:B2:F8
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial: 05F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number: 05D0
Signing time: Sat 04 Jul 2026 23:26:27 +0000
Manifest this update: Sat 04 Jul 2026 23:26:27 +0000
Manifest next update: Sat 11 Jul 2026 23:26:27 +0000
Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: 6t/vuz2VYkX3QCkIVq4XwgG2wEnlF2THGKkqJHBe/fI=)
2: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ=)
3: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=)
4: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: XBM3DlKoBDVofgPqbooQZ6dKrRlGCNt1SrNFpBQtq4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 23:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Validity
Not Before: Jul 4 23:26:27 2026 GMT
Not After : Jul 11 23:26:27 2026 GMT
Subject: CN=6a4996a3-6e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:5f:25:38:64:9b:37:d7:f5:6e:c2:2e:75:
fd:5c:c8:38:43:17:4a:a1:59:ac:20:75:69:5b:43:
c3:e0:b0:6d:53:69:03:3c:ed:78:b8:51:93:05:76:
2f:18:25:1c:13:66:a8:cd:e8:df:3e:7c:39:b2:ec:
05:04:37:f9:3e:bd:dd:e5:19:bf:6b:5b:29:8d:1a:
09:8b:d5:ed:fd:5f:f0:6b:95:55:aa:ad:e7:c7:72:
47:fc:02:d1:36:d4:84:f6:56:92:3e:50:45:ef:e6:
36:26:2f:e7:e7:94:90:90:78:46:19:fe:30:d4:dc:
13:44:58:75:96:77:81:11:21:68:c7:da:86:03:10:
67:83:58:d9:2f:72:b7:25:52:47:77:c9:ba:7e:14:
99:51:55:df:c3:4f:43:9c:43:bf:6f:ea:50:36:7a:
63:61:7e:fb:bd:05:79:00:15:df:a9:8a:eb:d8:8d:
dc:2a:d9:76:f7:00:0c:58:33:a4:fb:2a:f6:54:f7:
c5:a8:3b:21:35:be:6d:e6:3f:e8:4c:f0:fb:22:26:
ee:e2:7d:d1:ec:54:21:cb:d7:d1:b1:38:db:a1:6f:
70:b9:aa:d5:7e:10:2f:09:8d:d3:53:ca:a8:f8:c6:
fc:ec:c0:f6:78:4f:9d:04:19:73:43:e3:c1:2c:c7:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:6F:9A:70:69:26:E4:F9:53:D0:CF:0A:DB:9D:F6:F5:46:B2:F8
X509v3 Authority Key Identifier:
keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:ba:c1:81:c6:0a:d3:29:bc:fa:4c:78:7d:95:f2:a4:f1:b5:
d8:fe:b8:74:61:fd:44:e9:41:8d:b4:03:71:fc:9c:dc:0f:61:
24:b7:76:00:69:fa:d3:76:36:82:81:89:3c:15:a7:71:a9:93:
ef:cf:09:bd:08:24:ef:5a:8d:5f:f1:96:c7:ae:b4:1a:02:c6:
4a:ba:92:8f:48:a0:b2:24:b1:55:0b:8c:16:ff:6e:00:11:db:
a4:9a:dd:23:1d:6f:8c:21:0c:fe:ac:86:0f:21:d8:90:e5:e6:
56:55:8f:85:1a:34:13:ac:5f:f7:37:dc:ac:0b:02:b7:35:4f:
ef:f0:e1:4a:74:26:47:ef:ec:c0:b5:d0:01:f7:70:14:2b:37:
d5:3a:a8:de:26:b0:b0:0b:99:48:e6:34:b0:2e:bf:13:6a:26:
0c:a4:0c:c2:44:c1:1c:10:3d:0c:30:fe:63:f9:fb:84:1b:d1:
18:e8:0b:1d:47:33:f2:a6:ae:bb:55:41:c6:08:36:4c:58:11:
b1:eb:69:87:8c:81:a6:1e:5f:13:a3:d5:c0:02:99:c4:61:fe:
1a:1d:fd:6e:29:c5:5f:6c:a0:ba:ef:67:60:85:1e:ea:c2:b5:
e5:51:7e:e5:24:59:1b:61:c9:8a:2d:de:9d:07:81:5a:34:fd:
be:77:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:34 2026 by rpki-client