
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier: SHoebVlvJbz/t1ClFpLuTFi+9fCjlQIMBx0s+X8yC0U=
Subject key identifier: EB:CA:4B:FC:0F:3E:C6:03:61:4B:9B:9D:40:64:62:F9:15:B4:E2:11
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial: 0D7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number: 0D71
Signing time: Tue 28 Jul 2026 18:07:42 +0000
Manifest this update: Tue 28 Jul 2026 18:07:42 +0000
Manifest next update: Tue 04 Aug 2026 18:07:42 +0000
Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: YwkuQ/Eu21UQr9H20kHHbQYH57gseFXss3jlccd/orY=)
2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: glrqd12FYLCjxlnpQQmc9rytFHslPrUcTMQsV2ywiP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Validity
Not Before: Jul 28 18:07:42 2026 GMT
Not After : Aug 4 18:07:42 2026 GMT
Subject: CN=6a68efee-e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:c8:4d:3d:56:fd:6b:f9:2f:ec:30:82:da:
8a:aa:48:b8:ea:e6:42:1c:94:c9:5f:73:3d:0b:d6:
c4:ed:4f:54:7e:b8:9e:86:cf:72:47:83:33:c5:2d:
c1:30:06:ee:67:57:aa:b6:05:ab:ed:5d:aa:34:90:
18:0f:82:d9:af:b5:25:4e:cb:d8:13:30:4e:a5:6c:
bf:ad:2b:58:9c:7d:0d:1a:a2:6d:a0:38:3e:21:7a:
87:3a:a7:8e:d2:73:d7:96:c0:31:82:d7:b7:5b:6a:
7d:3b:8c:66:11:d2:97:bc:ac:c0:ed:e1:3a:48:fd:
7e:f8:ac:54:53:7e:69:75:98:a3:7f:7e:a5:85:4c:
f1:b5:eb:2d:96:13:a0:04:5d:42:63:5c:27:22:f2:
9e:07:fc:52:fa:07:60:83:91:44:fc:81:43:41:b0:
94:a0:a2:8e:8d:07:33:3d:63:e5:b3:45:aa:91:31:
3f:e8:db:8f:d5:0b:6f:a4:7d:b9:37:06:18:ca:cd:
16:18:71:e1:67:6c:47:b3:e3:10:8f:4c:f7:a1:8e:
7b:b8:98:6a:9c:38:6c:8a:0f:33:bc:87:03:e0:c8:
e7:b2:ad:60:d1:59:ef:2a:5d:f5:c9:b4:29:f2:af:
c7:cb:e0:90:aa:40:ed:e5:7d:8f:15:37:ee:be:fd:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CA:4B:FC:0F:3E:C6:03:61:4B:9B:9D:40:64:62:F9:15:B4:E2:11
X509v3 Authority Key Identifier:
keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:06:97:00:4d:00:eb:bd:e5:9f:29:18:85:8b:ec:28:e9:d8:
39:2f:3e:5f:d1:d8:81:6f:2f:83:85:d1:46:a3:f4:b0:18:8c:
d3:5b:36:29:c1:38:5d:a7:46:10:88:83:1d:93:e9:57:06:ab:
45:b7:f3:aa:09:d9:c1:94:51:54:d7:4b:5a:f5:ee:97:b0:06:
49:0e:03:69:dc:08:88:78:7a:f8:41:8c:89:8e:cd:5b:81:59:
7f:ad:3b:5c:4e:47:d1:54:df:30:8f:db:b0:ca:7b:c5:3b:7d:
56:d0:e6:8f:2e:76:8b:d6:a8:58:2d:a1:f4:c5:7f:4a:0f:e1:
a2:5f:e8:e2:7f:c2:47:85:1b:64:f5:4a:ac:f3:3b:89:8c:b5:
78:b8:fd:15:f5:1e:9c:64:6e:f7:c2:6f:85:d7:ce:ef:47:c2:
eb:44:cc:97:e2:9f:94:a9:f3:73:ad:71:ff:9e:f2:41:8f:90:
78:5e:6a:88:22:82:7d:67:b1:ea:8d:aa:b3:57:43:44:56:d8:
00:72:26:43:78:bd:a1:b7:df:d8:1d:41:91:c8:3a:8f:2e:85:
18:72:6a:1f:58:43:b4:6c:21:e3:4a:26:9b:7c:e6:62:3d:c6:
31:04:7c:54:59:9b:23:80:29:db:f7:f0:9a:21:2b:3b:cc:63:
24:14:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:25 2026 by rpki-client