
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json)
Hash identifier: jipqtBqXgSOfbq47yZlbpyUPtMGqjpx4IH9N2H/XiY4=
Subject key identifier: E7:4F:F6:D1:2A:D9:0C:B3:52:39:EF:E5:63:FC:21:8D:CB:7C:71:59
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
Manifest number: 83
Signing time: Fri 17 Jul 2026 08:58:03 +0000
Manifest this update: Fri 17 Jul 2026 08:58:02 +0000
Manifest next update: Fri 24 Jul 2026 08:58:02 +0000
Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: puZhcGkcTdm5ewjwTE5TFNlBtDr/Vwc+EXeGw5/OX3I=)
2: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=)
3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=)
4: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Validity
Not Before: Jul 17 08:58:02 2026 GMT
Not After : Jul 24 08:58:02 2026 GMT
Subject: CN=6a59ee9b-fd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:f7:53:e6:db:8e:23:c7:9a:ba:f0:7c:94:
fa:6b:29:7e:d2:85:0b:ff:7a:9f:5e:e2:2a:e0:b1:
f6:be:d9:ca:83:37:7b:d5:35:ff:ea:0c:ea:c0:43:
df:d4:a3:14:ee:18:44:f9:63:08:1d:3c:98:17:fd:
57:e3:6d:4c:bc:a9:15:14:0b:d7:12:b9:ce:4c:7b:
6e:fe:0e:b6:c4:b6:44:1f:49:b1:76:e0:f9:ee:40:
6f:8c:2e:8b:7a:89:66:0f:49:81:c5:01:b7:ef:8c:
54:14:bf:e9:63:20:3d:5b:84:95:ac:7b:8d:53:88:
d7:c4:da:1a:e8:5b:39:de:3d:c3:e0:b3:83:a5:fd:
9f:b0:c6:b5:49:b1:fb:37:7c:c5:3b:a4:a9:02:6d:
e7:62:e3:1f:d2:17:e0:b8:ec:fc:4d:cf:81:ee:e1:
a6:a1:01:21:13:59:70:29:01:76:f4:b8:85:e8:90:
c2:3d:a7:c9:62:71:c4:a8:27:fb:3e:d9:2d:cb:24:
aa:64:10:6b:b9:d2:33:16:39:4d:cc:b1:7f:56:d6:
4b:53:d7:34:a1:c7:95:15:30:69:69:df:d4:b3:a7:
45:3d:58:e8:90:13:e4:7f:e5:20:f7:53:1f:ec:fb:
a6:39:89:78:b9:56:63:e1:be:c3:ce:14:47:e2:6b:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:F6:D1:2A:D9:0C:B3:52:39:EF:E5:63:FC:21:8D:CB:7C:71:59
X509v3 Authority Key Identifier:
keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:7e:97:3d:1e:35:d3:2b:7b:61:8c:eb:bb:92:b3:09:1c:0a:
5d:d6:ba:b3:4f:e0:cc:90:50:1a:ff:be:3a:4f:49:3c:82:ca:
ff:f3:8a:14:0e:77:b9:f3:cf:cc:6e:4e:2b:61:8e:ba:5a:0a:
d3:b6:15:14:30:b5:ec:f8:79:d6:9e:77:a9:e4:06:d2:63:12:
86:fd:e4:6e:e4:a4:07:7f:65:9e:8f:c0:e2:3c:a1:86:73:10:
ee:96:31:68:70:44:cf:17:3e:62:40:0c:66:00:f4:78:3c:15:
44:9b:12:db:b9:27:ad:9f:25:f6:b0:f2:f7:9e:e7:af:c6:3b:
ec:e4:4d:f1:78:bb:1e:b3:e3:37:84:30:f3:a0:dd:d9:30:0f:
a5:45:cf:b7:35:32:98:38:92:dd:53:9b:ed:e8:18:89:da:81:
5f:68:68:7e:48:df:3f:8a:45:42:f4:2b:75:cb:a9:c6:33:48:
6f:3c:a7:6a:d5:06:fb:d7:68:d5:5f:02:ad:dd:e0:4e:51:e5:
8c:68:d0:21:10:5e:8e:23:50:0e:fe:74:a9:c2:dc:c8:ff:be:
6d:a5:b2:12:9b:e9:3e:fd:e1:a9:25:69:f6:5e:38:0c:2a:a1:
14:d5:35:88:b1:ec:78:5e:73:ee:20:e4:be:2b:40:89:14:6a:
29:03:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:51 2026 by rpki-client