
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: QQRVY7kzBfbJWSAN0+HKQp/7zs2FxZreZxLFsmaI008=
Subject key identifier: 24:E6:02:70:47:AA:CF:5B:51:FC:B4:8B:45:09:5E:A0:57:B5:B1:EC
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 0533
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 052C
Signing time: Fri 12 Jun 2026 23:34:31 +0000
Manifest this update: Fri 12 Jun 2026 23:34:31 +0000
Manifest next update: Fri 19 Jun 2026 23:34:31 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: jYkzHegjuiAjA8vB4N/uJF7cRNM1qtipfLoC4R5k2MM=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1331 (0x533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Jun 12 23:34:31 2026 GMT
Not After : Jun 19 23:34:31 2026 GMT
Subject: CN=6a2c9787-72e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:e0:63:a9:02:9e:6c:a2:72:83:dc:f6:fd:
e8:52:e3:9e:49:a9:e4:02:5a:40:7e:a2:63:46:bb:
48:39:a2:79:4e:a6:fb:e2:29:03:5f:7c:50:fb:77:
66:4e:3e:23:03:82:75:a8:05:bf:ec:88:09:70:cc:
46:63:a5:06:02:5a:00:2d:01:d5:2d:b9:2e:32:69:
97:40:02:b6:7c:d6:6f:f6:56:a9:0a:9f:9d:c0:2c:
65:87:27:65:cf:9a:e6:4c:3d:c4:d5:0b:3d:b1:99:
b6:06:2f:04:a8:0d:ab:c5:52:cc:42:09:67:df:db:
85:fb:cf:8d:68:4a:97:b7:78:af:77:11:96:d8:6f:
b2:8a:06:85:83:f2:78:ee:3b:6c:0b:ec:a2:c7:5a:
b5:8b:c4:57:f0:2c:6a:e3:3a:ed:7e:ea:20:10:bb:
2d:3b:fb:82:a1:f8:96:16:2b:8f:ef:ce:e2:fc:b8:
91:d8:e1:40:14:e1:8f:02:27:27:a8:6a:fc:de:e7:
3c:39:3a:dd:6f:f3:df:85:e2:ec:9d:f7:35:25:6f:
a3:5c:51:0e:69:a6:86:da:9d:7e:50:a3:64:21:40:
c8:59:8f:8d:d2:fe:4c:39:b3:cf:1f:7e:5a:41:3d:
30:50:58:37:9c:9e:df:e7:96:49:d3:70:ff:f9:40:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:02:70:47:AA:CF:5B:51:FC:B4:8B:45:09:5E:A0:57:B5:B1:EC
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e4:10:e5:88:97:6f:fe:1f:9b:df:94:3d:3b:da:e6:f7:51:
98:51:cd:dd:08:a4:5c:c8:80:fd:c9:e9:7a:f7:33:0d:1a:b0:
1a:77:ed:91:2e:80:27:21:78:bc:87:55:43:f6:6d:cc:cf:13:
11:95:d6:a2:3c:9a:9d:b9:37:4f:aa:6a:9d:1c:42:01:93:2c:
89:22:f1:cf:f8:2c:eb:9b:f0:f0:da:9c:30:13:50:8f:81:11:
b1:ea:a5:62:af:54:54:dd:6e:c3:eb:26:df:47:ed:6a:56:24:
b5:c9:e5:4a:48:60:3d:54:ef:77:1d:d9:03:b0:59:43:8c:86:
ae:34:a0:5f:ff:c9:76:8c:41:7c:84:51:31:b1:cc:8b:6a:d1:
1b:7f:7b:a0:26:a5:08:45:11:cf:30:84:37:da:66:a9:7b:94:
db:bf:a1:0f:10:ee:ab:22:48:96:68:21:bf:95:01:08:34:22:
86:18:ed:31:36:09:54:ea:de:fa:a4:2a:59:8d:c5:b7:0b:03:
39:92:95:9e:bc:38:04:2d:67:4c:59:2b:fd:65:4d:72:af:9c:
db:ed:97:81:80:09:50:9b:3f:6f:19:0c:f1:28:a9:58:b6:ce:
a3:f7:e2:d0:da:c2:cc:ac:6d:e5:1a:60:17:65:38:9d:46:04:
89:b4:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:45:06 2026 by rpki-client