
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: hMdTRp+iHEPNILjGXPlOK4RCJXdm01QriAn6LAEog+E=
Subject key identifier: 4D:79:9B:FC:0E:B4:44:CE:8C:6C:20:19:71:0A:FA:1B:33:DA:4B:F2
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 056F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 0568
Signing time: Thu 08 Oct 2026 23:31:07 +0000
Manifest this update: Thu 08 Oct 2026 23:31:06 +0000
Manifest next update: Thu 15 Oct 2026 23:31:06 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: HpdyozCS6EjPHPOwxxaXJFOSRuu2qatG7impAOf6Yr4=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Oct 8 23:31:06 2026 GMT
Not After : Oct 15 23:31:06 2026 GMT
Subject: CN=6ac827bb-931d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:73:6a:1f:5a:c1:c1:38:64:65:f9:d1:46:
0d:85:06:6e:a7:d0:47:85:f9:12:00:a8:b1:75:c7:
55:a9:65:78:9b:c8:55:92:dc:45:42:72:ea:48:8d:
82:f9:55:f2:7f:43:c2:6a:b9:80:f9:94:68:23:e0:
df:13:a0:8f:95:d4:81:72:1e:a3:2e:80:c4:0a:be:
cf:c1:62:38:21:33:f2:17:2d:29:41:b4:f1:11:c7:
ac:73:8d:63:9e:07:59:a5:a7:51:1f:21:23:47:29:
2e:6d:06:85:f8:62:e5:d6:49:12:e3:89:d4:ca:82:
07:81:e7:e6:7a:83:ae:d4:6c:b7:30:5d:18:84:eb:
fa:18:60:6c:51:43:5c:2c:ad:97:16:3a:d6:e1:b0:
10:82:ea:fc:5b:10:fc:50:9a:c3:ca:36:fe:0b:61:
1d:34:81:73:b6:f6:91:92:82:db:37:15:53:c4:5c:
b4:3f:c6:74:dc:a7:15:5b:02:4f:a9:d9:ab:62:3f:
41:25:23:cb:06:6e:cf:ef:69:fd:a3:68:6d:8f:05:
5f:57:ed:49:82:2c:c5:86:61:19:b4:4b:15:4f:6e:
08:5a:b0:0a:33:ca:41:5f:9e:f5:1b:80:9a:56:df:
02:8f:cc:49:2e:cc:97:26:dc:e7:77:6e:1c:9f:ac:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:9B:FC:0E:B4:44:CE:8C:6C:20:19:71:0A:FA:1B:33:DA:4B:F2
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:60:35:f2:e4:a9:1b:7c:82:bf:31:ff:a2:41:57:53:90:
4b:7e:12:c9:c8:be:5d:fc:37:88:29:7b:1b:54:ae:73:2a:ff:
4c:66:0d:d9:66:73:19:f1:73:e8:89:89:23:f7:e5:7d:61:de:
d3:e9:b0:d7:17:6c:bb:c6:ee:92:ba:55:6a:06:15:f5:9b:68:
1c:d6:66:5f:49:f0:52:23:9a:33:47:ac:ec:9b:72:a5:25:20:
27:cb:b5:3f:5b:5d:3c:df:bf:ec:39:4a:e1:25:be:7a:50:f9:
69:e1:42:cd:78:ca:17:5c:3c:0c:42:e4:77:c9:94:e8:c4:0b:
e0:9a:66:1f:6a:99:30:ba:84:05:d7:61:88:ea:6e:81:f3:e6:
e0:2a:72:98:cf:60:bd:97:cd:b6:65:df:97:85:5b:9f:0e:50:
59:c3:41:b6:3e:6f:16:f8:7b:ba:ff:f7:97:2a:2e:e1:c3:d2:
74:a6:05:c1:90:ea:a4:2b:77:a6:a8:aa:3e:19:42:05:9c:8b:
e7:07:d1:6c:67:3a:e6:d5:a5:9c:b6:42:7c:98:5c:b6:38:c1:
e3:f8:30:68:5d:1a:13:81:c3:11:ce:43:33:a4:84:29:a1:0a:
eb:74:51:f0:a4:30:9e:cd:4c:c6:23:c3:49:cd:85:af:78:43:
f1:be:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:52:23 2026 by rpki-client