
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
File: l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json)
Hash identifier: m0gpb4yyDKQT74QrALVul013/CScjfmQmDEBqMZfqcs=
Subject key identifier: E5:46:6F:52:3D:9A:7C:5A:23:2F:45:82:2C:75:F7:9B:B2:E6:5D:E0
Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Certificate serial: 06CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
Manifest number: 06BE
Signing time: Sun 20 Sep 2026 22:15:08 +0000
Manifest this update: Sun 20 Sep 2026 22:15:08 +0000
Manifest next update: Sun 27 Sep 2026 22:15:08 +0000
Files and hashes: 1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: UXXEXp9e66z+1RUlktU6YjueqkzbX/kDf3yp0r16x+o=)
2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: 3hykLcorYgLEfCJWHrkkPwMpO+Se/Lm85HODusfioqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Validity
Not Before: Sep 20 22:15:08 2026 GMT
Not After : Sep 27 22:15:08 2026 GMT
Subject: CN=6ab05aec-822c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:6c:75:56:85:4a:d4:48:f5:4c:31:f9:4f:
92:14:cc:cb:46:08:fe:05:f5:bb:2c:95:c5:6c:e7:
51:8b:f9:b1:f7:8c:d6:a8:60:51:0b:60:84:04:6b:
df:94:9d:50:8b:71:8b:8e:11:2a:c9:47:af:8d:3b:
0a:ac:65:1b:2e:b9:a6:e5:6d:99:34:a2:bf:8a:01:
6d:c1:16:81:f2:12:5b:e2:4f:75:af:bf:1d:d4:11:
84:a3:9d:69:e8:ed:7d:53:18:3c:78:c3:3c:6c:55:
b7:73:84:b9:4d:9e:d6:ee:ca:5d:6b:c9:8c:e3:66:
50:7d:6d:14:46:3f:6a:ab:c1:66:ca:e9:33:ad:5a:
b3:d2:f3:67:68:6f:9c:85:ec:b4:4d:91:62:f2:c5:
6d:dc:c6:9c:74:88:f0:8d:c3:85:8b:f4:97:82:65:
c7:9c:4e:0c:2e:fa:a6:f6:6c:e3:3a:e9:17:f1:01:
bc:25:1c:97:ce:e9:81:d9:48:b9:8f:60:79:43:3a:
d2:fc:e9:62:9f:c4:d9:14:12:d9:31:62:95:e5:10:
19:a7:7c:2b:ca:6e:1d:7f:b7:c6:76:af:50:ff:68:
e6:7d:6f:60:3f:0c:e1:65:3f:94:12:6f:97:79:89:
42:f4:38:16:4b:60:7f:dd:98:ca:63:7a:d9:73:ed:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:6F:52:3D:9A:7C:5A:23:2F:45:82:2C:75:F7:9B:B2:E6:5D:E0
X509v3 Authority Key Identifier:
keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:01:45:64:d3:95:f9:11:8f:48:ed:cc:0a:b5:e4:cd:e4:05:
58:b0:27:38:72:c2:cf:34:54:d9:6c:1c:8a:a4:4e:8c:b6:7d:
4d:1b:f2:1f:ac:14:f1:be:42:64:89:23:58:61:96:9e:c2:90:
29:ff:6e:4c:be:b0:1c:00:cb:df:79:cc:58:18:b1:b5:da:16:
af:53:ff:17:a1:74:38:ad:b4:80:78:6b:e3:26:72:87:a3:bd:
dd:96:79:a9:65:d4:ac:40:b8:e4:8e:35:22:05:a4:df:8e:4e:
ad:f3:1d:f3:7c:b6:c5:b2:81:a8:22:2e:a4:2a:de:c9:bc:f7:
86:e5:3e:c4:cd:24:f8:e1:ca:82:7b:c5:38:c5:51:6e:d7:39:
f0:79:87:7c:e3:14:88:63:2d:20:3a:4c:38:be:1c:c9:0a:75:
b3:9d:2a:96:eb:00:ed:72:50:1c:1f:97:cf:41:1d:28:2e:44:
09:aa:1c:b1:95:ac:bc:f9:99:9d:f6:c3:e1:39:31:f6:05:cf:
7d:16:97:0c:03:6d:49:42:1c:be:0a:00:7a:04:cd:28:44:63:
5c:a4:1b:d5:41:6e:d8:a8:c1:f8:d0:cb:47:d1:9c:4f:c7:13:
58:69:47:f0:3e:ba:b0:07:de:45:52:ab:34:31:b9:1d:80:39:
6c:70:9b:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQzExMTAvBgNVBAUTKDk3QkI1NEIzRDIzQzM3QzNERDNFMDE2OUNBOTc0RDI3
REJBOUYwNTAwHhcNMjYwOTIwMjIxNTA4WhcNMjYwOTI3MjIxNTA4WjAYMRYwFAYD
VQQDEw02YWIwNWFlYy04MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHxsdVaFStRI9Uwx+U+SFMzLRgj+BfW7LJXFbOdRi/mx94zWqGBRC2CEBGvf
lJ1Qi3GLjhEqyUevjTsKrGUbLrmm5W2ZNKK/igFtwRaB8hJb4k91r78d1BGEo51p
6O19Uxg8eMM8bFW3c4S5TZ7W7spda8mM42ZQfW0URj9qq8FmyukzrVqz0vNnaG+c
hey0TZFi8sVt3MacdIjwjcOFi/SXgmXHnE4MLvqm9mzjOukX8QG8JRyXzumB2Ui5
j2B5QzrS/Olin8TZFBLZMWKV5RAZp3wrym4df7fGdq9Q/2jmfW9gPwzhZT+UEm+X
eYlC9DgWS2B/3ZjKY3rZc+1a+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVGb1I9
mnxaIy9Fgix195uy5l3gMB8GA1UdIwQYMBaAFJe7VLPSPDfD3T4BacqXTSfbqfBQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFDMS9EOTJFNjlBQUMx
RUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44UGRQZ0ZweXBkTko5dXA4
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w3dFVzOUk4TjhQZFBnRnB5cGROSjl1cDhGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTFDMS9EOTJFNjlBQUMxRUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44
UGRQZ0ZweXBkTko5dXA4RkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIwFFZNOV+RGPSO3MCrXkzeQFWLAnOHLCzzRU2WwciqROjLZ9TRvyH6wU8b5C
ZIkjWGGWnsKQKf9uTL6wHADL33nMWBixtdoWr1P/F6F0OK20gHhr4yZyh6O93ZZ5
qWXUrEC45I41IgWk345OrfMd83y2xbKBqCIupCreybz3huU+xM0k+OHKgnvFOMVR
btc58HmHfOMUiGMtIDpMOL4cyQp1s50qlusA7XJQHB+Xz0EdKC5ECaocsZWsvPmZ
nfbD4Tkx9gXPfRaXDANtSUIcvgoAegTNKERjXKQb1UFu2KjB+NDLR9GcT8cTWGlH
8D66sAfeRVKrNDG5HYA5bHCbWQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:18:08 2026 by rpki-client