
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier: H7zjlg8ueybyrTSBmPsnzvJUY8+K4EQwbqsvSEHatDs=
Subject key identifier: 25:8B:BC:8D:60:D4:27:FD:23:52:B1:5A:4E:0D:D4:6E:FE:EC:CE:37
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number: 0102
Signing time: Wed 19 Aug 2026 06:51:04 +0000
Manifest this update: Wed 19 Aug 2026 06:51:04 +0000
Manifest next update: Wed 26 Aug 2026 06:51:04 +0000
Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: pPSMOWOGaum4COU+zcR8skFJGdds3U/4SmdvsIoBik0=)
2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Validity
Not Before: Aug 19 06:51:04 2026 GMT
Not After : Aug 26 06:51:04 2026 GMT
Subject: CN=6a855258-6598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:09:db:83:79:34:86:c1:ec:62:5d:85:3d:
c4:62:e0:80:82:aa:ad:86:fc:16:9b:ca:d8:12:55:
cd:86:63:8d:45:aa:93:16:fd:b6:22:4d:7f:68:a8:
38:c7:55:19:26:f5:96:80:bd:cb:fc:91:26:82:98:
ce:b7:26:d9:56:37:03:ad:cb:01:14:5a:aa:cf:83:
34:df:21:c5:a5:39:55:44:98:b9:8e:4d:79:6c:2c:
94:7d:94:c5:0c:1d:99:de:4e:d4:cc:65:ef:17:9f:
13:1c:2e:35:15:d4:e9:27:b9:e1:82:0b:8d:a1:05:
55:e7:52:90:0b:06:8c:41:73:4d:a8:c8:8c:9c:94:
f5:90:9f:74:28:87:49:03:ad:5c:e9:50:22:32:8e:
43:6e:5d:01:33:9b:ec:89:e7:d5:36:0a:c9:ac:a0:
fd:c2:e1:fc:3f:09:62:ce:16:b3:f0:e3:cf:55:0b:
c7:08:ec:0a:0f:91:ba:9c:bd:9e:f9:f2:74:6e:06:
30:1e:0c:6a:4b:47:27:0e:bd:f8:38:cf:1a:1f:17:
8a:c4:c9:00:ac:27:bf:eb:ab:9a:3c:6d:11:0b:d9:
25:48:18:67:04:a4:0c:b0:fe:b0:c3:2e:f8:d4:fb:
d4:bf:5a:4e:02:82:d9:a5:8c:ff:9f:dc:51:85:42:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:BC:8D:60:D4:27:FD:23:52:B1:5A:4E:0D:D4:6E:FE:EC:CE:37
X509v3 Authority Key Identifier:
keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:a0:88:66:a6:54:51:61:66:7a:35:c1:5a:45:71:93:f1:
75:7e:63:1c:78:82:5f:68:0a:a8:d9:bf:c4:0d:bf:59:ea:f4:
ac:79:16:c5:b2:73:ef:3d:f1:a6:f0:1b:ba:fe:86:1f:a1:e0:
d5:a5:4b:c9:8e:75:4b:14:53:d9:20:2c:61:34:1c:27:1f:d0:
c3:d1:5f:0f:98:03:9c:b1:d3:7e:8a:f9:00:9f:71:ed:b4:f8:
bb:a2:35:3b:eb:d1:28:18:2a:bd:ae:04:d4:75:c9:eb:1d:bc:
2c:43:95:ae:94:31:64:26:fd:b0:a1:36:80:4a:8e:5f:c7:35:
0a:66:05:9c:f0:b6:e0:25:f7:7f:d2:2c:3b:5b:23:bf:5c:07:
38:1a:dc:09:45:e7:82:c7:50:60:5d:fc:1d:0c:d7:66:1f:7b:
29:89:8c:0e:28:ab:7e:e1:41:b3:3f:18:76:54:b3:55:2f:b6:
8d:2e:f3:d6:ec:f7:82:c5:ea:9a:63:81:cb:5b:53:c1:a2:ca:
5b:62:ba:c7:08:8f:e1:13:da:a8:e9:76:fb:f5:b5:4d:18:ba:
74:94:fe:7b:18:56:65:40:a2:d8:64:55:be:55:ef:80:fc:27:
ef:cd:25:d1:f2:0e:cf:5d:9e:9f:97:d1:93:bc:96:7d:aa:8c:
eb:08:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:20 2026 by rpki-client