
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json)
Hash identifier: QzAFaCXtC1aWda4O5w/3KON0vuiqBKBCfbY++wVzffs=
Subject key identifier: 54:9E:FD:5C:52:0F:E7:54:3B:90:9C:DC:81:85:FF:78:2D:37:0B:70
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 065E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
Manifest number: 0607
Signing time: Tue 06 Oct 2026 23:10:59 +0000
Manifest this update: Tue 06 Oct 2026 23:10:58 +0000
Manifest next update: Tue 13 Oct 2026 23:10:58 +0000
Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: U5rF/uzXCUf6RlQfwEIEPhKUuAJpWcAYvyAeNmPoY3g=)
2: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=)
3: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=)
4: B8BE560A4A1311F1B8639EABC7833773.roa (hash: 0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=)
5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=)
6: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=)
7: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=)
8: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=)
9: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=)
10: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Oct 6 23:10:58 2026 GMT
Not After : Oct 13 23:10:58 2026 GMT
Subject: CN=6ac58002-23bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:aa:77:06:e3:b9:2d:82:d0:ce:3c:64:0c:
88:2a:d1:29:ee:ad:62:dd:45:20:92:6b:ed:00:dc:
f9:de:46:03:2a:f8:b9:34:d6:04:75:66:a6:af:73:
07:4e:7a:50:1f:86:7f:32:e5:18:1b:10:c2:2e:0e:
ef:e1:3c:6f:a9:f0:62:b0:ec:e1:d5:bd:72:9f:5c:
99:4a:a8:db:20:2a:5a:63:1d:79:d1:f8:14:ba:94:
80:a9:97:66:52:4e:3b:e7:5d:54:16:3f:83:10:3c:
cf:0e:d1:06:d1:dc:37:51:2f:09:77:04:5c:3d:6d:
b2:49:2b:48:e9:9e:d1:2d:54:73:c4:2b:37:f8:d6:
13:a0:25:6c:12:e3:55:10:1b:a0:b4:24:2c:bf:92:
9d:66:5d:2c:12:62:93:39:87:d9:c7:c2:bc:3c:19:
b2:18:c3:cd:5d:6a:33:ce:49:3f:93:50:36:cf:9b:
81:95:04:43:e8:5c:17:ce:96:1a:ac:f0:0f:75:05:
52:39:22:c3:d1:49:21:51:0e:3a:8f:83:93:0b:7e:
ca:26:e8:15:06:a8:5f:0f:13:ff:0e:7d:40:cc:28:
33:8b:d1:03:db:1f:31:a4:5d:26:32:10:84:57:52:
86:9c:8b:28:be:84:a5:5c:6f:85:39:4c:fc:83:8d:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:FD:5C:52:0F:E7:54:3B:90:9C:DC:81:85:FF:78:2D:37:0B:70
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d6:f8:a1:e2:2f:98:cf:02:c1:2f:c4:52:53:fe:21:e6:ed:
59:58:d6:63:d1:22:1e:c2:de:e1:6f:0f:43:05:33:94:18:74:
04:ad:f8:8a:c3:0c:8e:50:0f:7f:a9:b9:b9:65:ea:e1:11:d1:
46:35:2b:65:c4:12:95:23:2f:c2:06:a7:72:50:f2:40:6c:a2:
c4:ef:6b:a9:65:5d:1f:ee:a8:71:fd:05:1b:91:75:36:2a:3a:
37:44:2d:1d:b7:13:e6:e6:40:e2:74:76:8d:8b:a5:76:2f:c3:
9f:c7:09:69:ff:e6:db:c6:9a:af:a4:95:b1:f6:38:6c:b9:73:
73:a6:4c:18:31:47:d1:81:c1:57:af:33:ea:d0:bc:17:70:a8:
a7:15:ac:ec:72:47:84:fb:30:bd:64:e0:01:cb:c7:24:55:41:
d9:28:90:9a:d4:4a:e9:66:41:03:37:5e:91:1a:ee:5e:6f:5d:
16:6b:67:44:9b:84:c9:33:93:51:64:a2:d1:db:2c:ef:34:76:
ba:f2:e6:d6:35:96:5a:dc:9d:a8:77:20:90:3a:b2:7b:a3:a8:
40:9e:4a:27:fe:19:f8:88:34:bf:63:2d:41:74:ad:f3:23:09:
d1:19:1d:39:e1:dc:43:ad:36:81:84:0c:81:48:52:f7:02:31:
e6:7f:d9:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy
MEM4RkQ1N0IwHhcNMjYxMDA2MjMxMDU4WhcNMjYxMDEzMjMxMDU4WjAYMRYwFAYD
VQQDEw02YWM1ODAwMi0yM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqOqdwbjuS2C0M48ZAyIKtEp7q1i3UUgkmvtANz53kYDKvi5NNYEdWamr3MH
TnpQH4Z/MuUYGxDCLg7v4TxvqfBisOzh1b1yn1yZSqjbICpaYx150fgUupSAqZdm
Uk47511UFj+DEDzPDtEG0dw3US8JdwRcPW2ySStI6Z7RLVRzxCs3+NYToCVsEuNV
EBugtCQsv5KdZl0sEmKTOYfZx8K8PBmyGMPNXWozzkk/k1A2z5uBlQRD6FwXzpYa
rPAPdQVSOSLD0UkhUQ46j4OTC37KJugVBqhfDxP/Dn1AzCgzi9ED2x8xpF0mMhCE
V1KGnIsovoSlXG+FOUz8g41tlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSe/VxS
D+dUO5Cc3IGF/3gtNwtwMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2
MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy
d0x0WS1TRVo1bGdneVAxWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXdb4oeIvmM8CwS/EUlP+IebtWVjWY9EiHsLe4W8PQwUzlBh0BK34isMMjlAP
f6m5uWXq4RHRRjUrZcQSlSMvwganclDyQGyixO9rqWVdH+6ocf0FG5F1Nio6N0Qt
HbcT5uZA4nR2jYuldi/Dn8cJaf/m28aar6SVsfY4bLlzc6ZMGDFH0YHBV68z6tC8
F3CopxWs7HJHhPswvWTgAcvHJFVB2SiQmtRK6WZBAzdekRruXm9dFmtnRJuEyTOT
UWSi0dss7zR2uvLm1jWWWtydqHcgkDqye6OoQJ5KJ/4Z+Ig0v2MtQXSt8yMJ0Rkd
OeHcQ602gYQMgUhS9wIx5n/ZTw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 11:22:21 2026 by rpki-client