
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
File: LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json)
Hash identifier: QfBZ4THDBfvPOrNPcg2CRQUg0QyD8Tc8VnmkctmKrKM=
Subject key identifier: 40:B2:36:30:76:EB:9E:97:E3:2C:2A:78:42:CF:77:B4:34:8A:4C:B1
Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Certificate serial: 07CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
Manifest number: 07C2
Signing time: Thu 16 Apr 2026 21:19:43 +0000
Manifest this update: Thu 16 Apr 2026 21:19:42 +0000
Manifest next update: Thu 23 Apr 2026 21:19:42 +0000
Files and hashes: 1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: 4vPAoybt83XrzOfNrCQpzCT+6KLFk6QIbaM7loWSbcM=)
2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: YPebFSMqaNrqN2HNE3zF4t6DH6zSmT3n+GWl59Oat/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Validity
Not Before: Apr 16 21:19:42 2026 GMT
Not After : Apr 23 21:19:42 2026 GMT
Subject: CN=69e1526e-50ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:0d:3c:bf:46:77:5e:86:bd:a5:2d:91:30:
d8:10:23:93:ff:46:f4:e8:8a:58:52:08:93:6d:bb:
c4:13:f7:2d:77:4f:d2:09:d1:10:d4:ed:fe:ea:b6:
51:a4:4e:c0:68:b7:96:f7:42:4b:ea:16:ef:e9:3d:
ec:54:e6:9f:8c:49:37:7a:1c:aa:83:f4:70:88:05:
dd:7d:ae:22:93:71:b7:77:43:60:a2:d0:03:8d:5b:
7e:00:29:da:39:5e:7b:63:f5:5c:9e:f2:18:2f:de:
7b:cd:43:ae:aa:26:cb:e5:c2:28:0b:14:4d:bf:ea:
ef:28:9f:e0:d3:08:24:c7:44:0d:9a:ed:ab:86:f8:
b9:3f:ab:b9:fb:99:25:26:02:71:46:3f:9d:82:96:
f2:92:71:e2:e5:68:93:64:c8:70:b5:96:e3:92:4b:
9e:c7:70:7a:84:7a:41:45:19:7f:13:a4:1b:b9:19:
1d:e9:0c:69:ca:2d:fd:90:74:9e:22:52:5d:97:ec:
34:1a:75:c1:46:44:c0:1a:0c:f0:49:8b:15:0e:46:
9e:02:bd:4b:f4:ac:94:c9:3f:c6:cd:bb:4b:9b:c8:
be:1f:0f:47:30:e0:46:0e:ba:a8:e8:89:e5:69:d9:
a0:80:21:82:9c:93:13:e6:91:95:41:bb:8a:9b:50:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:36:30:76:EB:9E:97:E3:2C:2A:78:42:CF:77:B4:34:8A:4C:B1
X509v3 Authority Key Identifier:
keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4c:98:75:d9:f1:43:47:74:40:64:f1:6a:cc:5c:db:11:28:
82:ea:ad:99:00:ec:ec:be:dd:d3:2f:33:5d:8c:0f:07:8b:7a:
b3:91:08:50:90:65:bf:db:8e:4f:42:fd:cd:a9:7d:a1:de:bb:
d4:c4:5b:79:53:f0:12:d9:9d:0b:08:7e:7c:8b:fb:b4:f3:1b:
80:50:08:5f:44:cf:aa:4e:4e:4d:33:df:1f:8a:61:9c:94:63:
69:da:0e:cb:7e:61:c8:b2:da:e2:c7:83:ef:b2:b1:11:a1:cd:
9a:a3:bc:1a:89:1c:76:3b:aa:80:5b:14:ba:07:0c:cf:7f:a7:
d9:11:c1:60:02:a8:15:e6:9e:b7:bd:ef:d3:49:eb:72:52:2c:
05:37:f6:26:76:5c:67:70:14:32:4a:48:a9:4a:8b:c7:f7:d8:
08:d4:7e:e6:18:80:c7:89:dd:3f:8e:6b:56:cc:f7:26:2e:80:
fb:c9:83:f3:8f:00:a0:c0:b3:ea:81:d8:9a:cd:0f:1a:e2:f8:
9f:f6:5f:86:d5:80:34:3e:7f:db:29:43:8d:0d:7a:39:a3:9d:
c1:2c:de:2d:04:63:c6:c6:f9:76:34:d3:72:da:11:af:3f:c8:
cd:92:73:4e:04:58:c7:0b:90:d8:54:81:96:5f:fb:bb:07:d8:
30:46:a7:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5
MjhFQTdCMzkwHhcNMjYwNDE2MjExOTQyWhcNMjYwNDIzMjExOTQyWjAYMRYwFAYD
VQQDEw02OWUxNTI2ZS01MGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbgNPL9Gd16GvaUtkTDYECOT/0b06IpYUgiTbbvEE/ctd0/SCdEQ1O3+6rZR
pE7AaLeW90JL6hbv6T3sVOafjEk3ehyqg/RwiAXdfa4ik3G3d0NgotADjVt+ACna
OV57Y/VcnvIYL957zUOuqibL5cIoCxRNv+rvKJ/g0wgkx0QNmu2rhvi5P6u5+5kl
JgJxRj+dgpbyknHi5WiTZMhwtZbjkkuex3B6hHpBRRl/E6QbuRkd6Qxpyi39kHSe
IlJdl+w0GnXBRkTAGgzwSYsVDkaeAr1L9KyUyT/GzbtLm8i+Hw9HMOBGDrqo6Inl
admggCGCnJMT5pGVQbuKm1AlBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECyNjB2
656X4ywqeELPd7Q0ikyxMB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC
MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzI3OC8yQUUwQUQ2MDNCMzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BU
X1BZT21OQVhBeTZTanFlemsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATUyYddnxQ0d0QGTxasxc2xEoguqtmQDs7L7d0y8zXYwPB4t6s5EIUJBlv9uO
T0L9zal9od671MRbeVPwEtmdCwh+fIv7tPMbgFAIX0TPqk5OTTPfH4phnJRjadoO
y35hyLLa4seD77KxEaHNmqO8GokcdjuqgFsUugcMz3+n2RHBYAKoFeaet73v00nr
clIsBTf2JnZcZ3AUMkpIqUqLx/fYCNR+5hiAx4ndP45rVsz3Ji6A+8mD848AoMCz
6oHYms0PGuL4n/ZfhtWAND5/2ylDjQ16OaOdwSzeLQRjxsb5djTTctoRrz/IzZJz
TgRYxwuQ2FSBll/7uwfYMEan5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:57 2026 by rpki-client