
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json)
Hash identifier: wvqGXNdX3rPIGYuNmNpRYR8Ng/yvqnXUETPTfZT9EUw=
Subject key identifier: CE:13:2E:9C:8D:96:86:EF:2F:A5:0B:18:F1:E2:20:69:0A:1D:88:53
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
Manifest number: 6D
Signing time: Mon 01 Jun 2026 08:46:24 +0000
Manifest this update: Mon 01 Jun 2026 08:46:24 +0000
Manifest next update: Mon 08 Jun 2026 08:46:24 +0000
Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: KSThzgqC9TXQG3I5ilTkmDX6uSFrwFtvReKFCI3D0Zo=)
2: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=)
3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=)
4: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Validity
Not Before: Jun 1 08:46:24 2026 GMT
Not After : Jun 8 08:46:24 2026 GMT
Subject: CN=6a1d46e0-f4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:68:02:9c:dc:8d:5b:9c:4d:d9:05:9d:75:
20:c3:ae:cc:2b:2c:b8:01:d2:6e:cc:66:ba:9c:8f:
53:ed:05:1a:c8:1e:da:32:3f:c9:60:3e:ee:53:b3:
fb:64:31:49:91:a6:de:33:c9:e0:d3:e1:b5:93:dd:
b5:51:17:18:5c:e2:b7:f8:02:84:57:3a:f7:dc:e6:
ab:66:61:07:00:99:cc:a6:ab:6d:69:1d:1b:d6:7c:
f3:02:a3:24:f6:38:b6:68:9a:be:b7:21:52:99:05:
3e:af:16:cf:92:bd:59:6a:ee:f9:4c:09:d9:ef:7c:
78:d5:52:11:bf:77:ed:84:da:c6:52:c9:c0:f8:4c:
07:13:0e:ff:57:84:7d:10:09:9a:b5:0a:01:ba:5a:
97:16:f5:26:de:a4:ee:9c:87:f7:eb:78:68:b2:b7:
86:5e:33:b9:c2:d0:5a:d9:2a:8c:cb:c0:1d:e6:6d:
69:dd:75:a4:81:e2:d8:d1:68:a8:c7:d7:23:f7:c1:
4c:8f:f3:41:fa:31:2b:69:49:eb:4c:88:8b:f9:27:
95:62:23:f6:36:6c:d4:eb:8c:69:fb:f9:cf:17:0f:
d1:ed:b5:c2:7f:4e:ee:d4:5a:e2:d1:95:e2:58:fb:
b6:90:db:0f:2a:f4:89:1a:43:39:5b:8d:16:70:de:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:2E:9C:8D:96:86:EF:2F:A5:0B:18:F1:E2:20:69:0A:1D:88:53
X509v3 Authority Key Identifier:
keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:bd:0e:5c:9a:f8:60:20:37:d0:02:7c:28:7d:12:19:b4:
89:48:99:cb:2c:aa:66:40:61:83:5d:55:80:28:c0:0a:c4:a0:
49:6f:34:16:99:df:58:3b:6d:4f:bc:a5:44:17:86:42:98:60:
6b:b4:60:dc:3e:da:db:1e:c9:7c:c2:e5:a8:27:31:a4:a0:92:
eb:5b:ba:6f:29:5a:c9:50:0f:c3:20:68:f8:61:c6:12:bf:68:
d0:5a:92:4d:ea:53:f8:a3:68:24:4c:7b:bd:2f:0f:c8:54:b2:
97:a8:0e:5a:5f:48:4a:c0:2d:44:30:d0:63:e9:3e:bb:fd:8b:
44:7d:5c:4f:9b:b7:2d:57:3a:f5:4f:f3:fd:ff:82:5a:c8:9c:
81:eb:aa:9c:f0:55:51:50:94:8f:ff:73:37:8b:e7:e6:78:14:
1b:67:14:7d:ff:6d:9a:86:8e:2e:1b:82:1d:e3:20:ea:8e:61:
61:4e:f8:4f:e9:b8:f1:e0:27:92:c9:5b:8b:86:7d:72:20:52:
0d:82:a3:92:de:21:4c:77:65:85:38:58:92:71:2a:d5:a5:e8:
19:b4:65:22:6b:ee:5f:57:81:66:2a:72:ef:d5:35:73:c3:aa:
f9:f8:12:8f:62:ed:f5:39:8d:65:a3:24:32:18:6d:50:d4:88:
8f:18:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:43 2026 by rpki-client