
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: +DauIY/ok0qISfhqzHRsis8nhg6yLzsyNwdEIS0sYY0=
Subject key identifier: 79:58:71:BB:5D:08:A2:7A:B5:D8:49:5A:4F:3E:80:8D:2C:47:4F:8E
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 04FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 04F7
Signing time: Mon 02 Mar 2026 00:49:38 +0000
Manifest this update: Mon 02 Mar 2026 00:49:37 +0000
Manifest next update: Mon 09 Mar 2026 00:49:37 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: qZuo0io21EYmwDooFz4mow+Rpy3SxRQEw6cVIsvAzj0=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Mar 2 00:49:37 2026 GMT
Not After : Mar 9 00:49:37 2026 GMT
Subject: CN=69a4dea2-bd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:bd:da:84:91:df:f1:19:25:84:f2:a4:e7:
8d:a2:27:f4:4e:69:fe:73:09:d8:dd:11:ea:ce:50:
0a:8a:5a:06:80:fb:3e:6e:21:3f:1f:41:7a:a3:71:
aa:fc:b3:80:59:fa:45:74:4b:40:bd:ce:88:e1:87:
ab:ee:d3:f9:b3:4a:63:4c:20:c6:98:49:b8:ab:56:
b2:15:c4:6f:c5:3b:94:1c:d5:f9:67:e0:33:4d:09:
5c:db:27:08:30:c8:c1:59:a0:7e:8b:6e:2d:56:64:
25:c3:32:1e:61:19:eb:f5:c0:c0:68:a0:6c:7e:26:
77:b2:8c:5f:bb:01:e2:d1:89:dd:8b:5e:ca:aa:45:
77:0b:22:21:78:fd:ea:e8:4b:0a:69:6c:ef:ea:60:
64:b7:95:b4:d6:4d:ab:30:fc:e1:70:a9:67:c0:d5:
26:ab:e3:68:92:33:ff:d7:6d:3d:84:fa:b5:95:35:
fd:4b:84:b7:b3:92:63:05:93:c9:2b:0f:fd:c3:37:
33:86:e6:01:38:67:ce:1e:b0:a7:d1:87:f7:a9:2b:
9c:25:54:a8:4b:1e:70:55:e6:c8:38:63:cb:72:e2:
1d:aa:88:fd:49:80:6c:94:d1:ee:6d:da:f0:47:14:
a2:bb:ea:14:3c:79:5c:b3:52:a4:76:e7:70:78:1f:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:71:BB:5D:08:A2:7A:B5:D8:49:5A:4F:3E:80:8D:2C:47:4F:8E
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:a6:f6:44:c9:b1:f8:1b:aa:c6:35:10:7f:03:5e:71:a1:fe:
21:0f:f8:eb:00:62:f3:3e:58:ab:be:b7:ef:04:78:c1:4e:90:
98:df:4d:67:a1:3b:0f:66:77:da:66:79:a6:be:45:5e:17:25:
90:5e:a1:13:08:e1:41:9c:ba:48:5a:8c:64:37:b4:9b:93:d1:
1e:38:6b:20:c4:d1:a8:c2:54:23:76:ea:b9:2a:57:cb:78:95:
77:9f:84:1e:19:0f:e5:e8:f9:55:dd:11:ca:91:45:e0:dc:a8:
bf:fc:fb:1f:f7:16:d4:5a:30:5c:f7:63:e1:aa:b0:1d:a5:d4:
b5:fa:81:6c:4a:2a:9f:26:90:8b:31:72:02:2c:1d:59:cb:93:
14:3b:09:40:1c:e1:2b:77:da:4e:e1:9c:92:90:db:98:59:d3:
6e:54:c0:b7:4c:e8:88:03:ee:af:9a:86:70:93:e4:32:94:db:
2b:37:a3:e7:34:5f:c4:39:94:95:62:34:eb:77:b4:d3:d2:cf:
fd:d4:c1:bf:62:88:26:63:98:a9:cd:66:a6:02:b1:40:dc:8a:
d3:7b:6d:9f:a3:a6:17:02:60:ca:8c:1f:62:d7:8d:81:4d:cf:
77:f6:27:8b:90:bc:ac:96:62:77:83:c6:a0:8a:ad:29:90:0a:
2b:d6:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:25 2026 by rpki-client