
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: B/HkcVbyamCMtFbdt+QFzUCwq0fDQNOh3HPVlxcnlJ8=
Subject key identifier: 85:03:76:B2:28:4C:C1:6D:32:BC:1F:A2:EB:F8:3B:02:A1:47:94:E5
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 054A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 0543
Signing time: Wed 29 Jul 2026 00:07:26 +0000
Manifest this update: Wed 29 Jul 2026 00:07:25 +0000
Manifest next update: Wed 05 Aug 2026 00:07:25 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: pxo7ZuZb41IhObAXHhunzaY/bRoIQ+ET5I0ZSetC7SA=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Jul 29 00:07:25 2026 GMT
Not After : Aug 5 00:07:25 2026 GMT
Subject: CN=6a69443d-84d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:18:e7:b4:6f:cc:80:69:6c:bf:f5:c3:08:
32:99:01:83:90:de:ee:0a:05:67:b0:1b:b9:af:0d:
3e:67:e7:d7:eb:0f:69:92:1b:63:2d:3b:6d:b3:38:
c9:3d:f0:8f:ab:62:b8:3a:58:1e:95:39:3e:21:db:
58:54:8a:06:07:40:60:ec:47:d8:c0:d9:c1:d2:4b:
3f:ff:77:f3:aa:b4:78:b0:16:d4:2f:3a:98:3b:0f:
bf:62:10:7b:1d:83:78:1a:d2:4b:da:89:32:58:54:
6c:28:1b:d4:39:6f:6c:f4:dc:32:31:fb:26:4e:3c:
53:c0:ee:6e:fd:e2:ed:a8:93:3c:14:4e:c3:92:95:
1f:30:ff:26:74:e5:6d:0d:aa:95:7b:b6:6c:3a:2a:
ab:be:77:c0:de:4f:f6:19:c3:d2:22:ab:aa:33:22:
ae:24:fe:85:fe:d6:fc:0f:9e:75:4c:2f:57:b5:9d:
c2:13:f3:ae:1a:d0:53:63:74:74:b2:1f:b6:61:96:
4b:50:dc:15:2a:09:0d:da:f4:7a:45:d6:28:1c:d3:
39:33:1d:37:19:26:86:dc:c0:1e:b9:9c:aa:a2:3c:
8f:e6:05:31:37:de:35:b1:f2:cf:2c:40:6b:00:37:
b9:89:6c:61:5f:0d:44:6d:91:28:be:9f:67:e6:41:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:03:76:B2:28:4C:C1:6D:32:BC:1F:A2:EB:F8:3B:02:A1:47:94:E5
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:59:5c:8a:50:d8:3c:a0:d4:4f:8f:ac:e7:81:8a:17:2f:53:
44:95:0a:f2:fc:9a:c3:58:6d:4c:fc:c9:89:c3:0a:bb:66:71:
db:6c:1f:6f:ef:84:eb:84:d3:5d:7c:7f:ea:0f:2b:82:65:19:
48:b8:cd:90:77:9a:f0:01:d7:da:c8:de:26:cc:16:58:a0:47:
0f:f6:fc:25:21:21:68:e1:fe:ca:58:1d:b0:ab:08:42:55:65:
d4:a1:1c:d2:86:a4:47:8b:43:6a:fb:29:cb:b9:4c:dc:bc:6e:
6a:30:76:c3:21:50:2f:ff:a4:13:20:55:17:78:c6:0b:e8:7a:
e5:ef:71:e5:7e:d3:a8:4c:55:a1:31:03:98:6a:2a:8b:5c:b9:
64:c3:88:e0:c9:92:81:22:f7:e7:97:cc:87:f6:d4:7e:4d:3c:
66:41:6f:ca:ae:f5:42:fd:ad:bd:76:d4:ce:04:91:d0:21:bf:
da:30:13:e8:f0:4c:d1:42:81:4a:0c:c1:c5:23:6a:70:4d:90:
65:70:4f:82:5a:95:1d:ae:65:33:60:33:dd:4a:e6:41:b9:66:
72:56:df:35:86:5a:50:88:7d:88:be:bc:52:c3:89:3e:98:e1:
bb:1f:ff:fa:c0:39:79:60:e1:48:d9:9e:41:40:39:f5:d4:a4:
1e:1e:a8:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5
QkQxQUUzM0YwHhcNMjYwNzI5MDAwNzI1WhcNMjYwODA1MDAwNzI1WjAYMRYwFAYD
VQQDEw02YTY5NDQzZC04NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyPEY57RvzIBpbL/1wwgymQGDkN7uCgVnsBu5rw0+Z+fX6w9pkhtjLTttszjJ
PfCPq2K4OlgelTk+IdtYVIoGB0Bg7EfYwNnB0ks//3fzqrR4sBbULzqYOw+/YhB7
HYN4GtJL2okyWFRsKBvUOW9s9NwyMfsmTjxTwO5u/eLtqJM8FE7DkpUfMP8mdOVt
DaqVe7ZsOiqrvnfA3k/2GcPSIquqMyKuJP6F/tb8D551TC9XtZ3CE/OuGtBTY3R0
sh+2YZZLUNwVKgkN2vR6RdYoHNM5Mx03GSaG3MAeuZyqojyP5gUxN941sfLPLEBr
ADe5iWxhXw1EbZEovp9n5kFUmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUDdrIo
TMFtMrwfouv4OwKhR5TlMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD
MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa
NXFMOW5PalVnNzJiMGE0ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm1lcilDYPKDUT4+s54GKFy9TRJUK8vyaw1htTPzJicMKu2Zx22wfb++E64TT
XXx/6g8rgmUZSLjNkHea8AHX2sjeJswWWKBHD/b8JSEhaOH+ylgdsKsIQlVl1KEc
0oakR4tDavspy7lM3LxuajB2wyFQL/+kEyBVF3jGC+h65e9x5X7TqExVoTEDmGoq
i1y5ZMOI4MmSgSL355fMh/bUfk08ZkFvyq71Qv2tvXbUzgSR0CG/2jAT6PBM0UKB
SgzBxSNqcE2QZXBPglqVHa5lM2Az3UrmQblmclbfNYZaUIh9iL68UsOJPpjhux//
+sA5eWDhSNmeQUA59dSkHh6oYA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:47 2026 by rpki-client