
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier: RsUYOoAhqCZQjwsDF3F1ZrzwETTg/x6ttVlxcS7P5+c=
Subject key identifier: 9F:E3:BC:85:AC:37:73:21:4B:05:C4:94:06:65:DA:7D:5F:8F:A8:AE
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number: 0C
Signing time: Sat 07 Mar 2026 08:23:44 +0000
Manifest this update: Sat 07 Mar 2026 08:23:43 +0000
Manifest next update: Sat 14 Mar 2026 08:23:43 +0000
Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: CuxPcXg1TKgHBJCUX8eUf2MfZug8JR8Hp8+G4hRnBDA=)
2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Validity
Not Before: Mar 7 08:23:43 2026 GMT
Not After : Mar 14 08:23:43 2026 GMT
Subject: CN=69abe090-a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:f8:bf:7c:1a:de:74:2e:54:de:12:85:f4:
88:af:29:1a:a9:81:d3:23:2e:03:d4:e4:72:60:cf:
06:0a:7b:87:7f:b9:3a:82:07:7b:89:1a:6a:83:d5:
1a:2a:89:ec:53:b2:d4:12:da:ec:90:06:99:69:9c:
4f:5b:b5:91:5b:db:3c:ae:9f:51:4a:d5:7f:bc:f4:
5a:fd:e6:ef:dc:a0:ca:fc:25:24:7d:f0:5a:37:20:
a1:eb:4d:74:f7:27:76:a9:6b:a0:55:f7:bb:c4:77:
df:7a:06:45:56:57:25:00:ac:68:21:01:42:ce:1d:
94:a4:1c:ce:45:82:a1:9e:9c:0b:60:db:45:19:be:
ae:52:1a:bf:6b:19:14:00:82:92:65:f4:f3:85:57:
1b:5b:7d:13:f9:93:e9:92:f9:7c:5a:78:59:22:9f:
d1:bd:01:51:33:13:41:fd:f2:b9:f8:00:5f:d8:ac:
af:91:08:33:27:b2:72:47:76:75:91:aa:25:1f:f5:
8f:8f:75:56:7d:65:f7:f0:67:b8:26:f8:e3:52:67:
e6:ef:b0:e9:54:35:b3:12:34:db:a2:28:a1:8b:6b:
90:09:d6:62:17:4d:b5:fd:fe:53:0c:54:96:f5:09:
6a:19:8b:f9:0f:ca:e0:c0:21:f8:78:88:fb:b7:9d:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:BC:85:AC:37:73:21:4B:05:C4:94:06:65:DA:7D:5F:8F:A8:AE
X509v3 Authority Key Identifier:
keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:79:ee:6f:c2:c7:a7:a2:b4:08:f7:a5:d4:50:04:18:42:
e9:01:57:a1:f2:af:23:17:3f:36:0a:a3:5d:f6:f5:ae:b0:5b:
dd:d3:16:74:cd:fc:1a:fa:23:97:ef:44:a2:81:94:db:33:5c:
55:f0:16:6d:45:5b:67:3b:40:3d:9e:3f:4f:0c:7f:92:02:72:
6a:1d:3c:7c:99:8f:e6:00:18:e6:75:3b:62:b2:16:c4:4f:8c:
d8:35:ea:95:71:77:17:38:52:d8:d0:fe:b2:ab:69:8d:4c:2c:
40:bc:62:b6:f3:99:3d:d9:b5:3e:e5:7e:7a:4b:d1:c5:f3:9b:
3c:e4:15:ea:31:a3:1d:a4:3b:ce:c7:67:cf:d3:b8:41:e7:1a:
e7:1d:8d:c6:9a:ef:85:0f:21:71:30:da:37:d0:c3:a6:d8:c4:
d2:28:c1:b4:07:f9:d6:ae:e4:19:69:e3:22:8d:51:78:de:b6:
44:e6:fa:42:0f:52:d2:bf:19:93:05:c3:33:ab:e2:50:d9:1a:
6f:ed:2f:a2:09:8c:73:05:ae:04:e2:9b:96:0d:aa:e1:92:9f:
5a:b8:8b:5c:e4:87:d7:28:a4:13:2b:92:46:1c:f4:cc:c1:92:
10:4e:5b:b9:62:a3:89:a2:38:18:13:6a:9d:d0:b0:66:22:b4:
28:7a:c4:71
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MDZGRjExMC8GA1UEBRMoOTdCNDQ2MjE2Mzc5ODU3NzAwQUQ2NUI5RkFGRUVDN0M5
MjJDMjJEODAeFw0yNjAzMDcwODIzNDNaFw0yNjAzMTQwODIzNDNaMBgxFjAUBgNV
BAMTDTY5YWJlMDkwLWE1YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJnfi/fBredC5U3hKF9IivKRqpgdMjLgPU5HJgzwYKe4d/uTqCB3uJGmqD1Roq
iexTstQS2uyQBplpnE9btZFb2zyun1FK1X+89Fr95u/coMr8JSR98Fo3IKHrTXT3
J3apa6BV97vEd996BkVWVyUArGghAULOHZSkHM5FgqGenAtg20UZvq5SGr9rGRQA
gpJl9POFVxtbfRP5k+mS+XxaeFkin9G9AVEzE0H98rn4AF/YrK+RCDMnsnJHdnWR
qiUf9Y+PdVZ9ZffwZ7gm+ONSZ+bvsOlUNbMSNNuiKKGLa5AJ1mIXTbX9/lMMVJb1
CWoZi/kPyuDAIfh4iPu3nfjhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn+O8haw3
cyFLBcSUBmXafV+PqK4wHwYDVR0jBBgwFoAUl7RGIWN5hXcArWW5+v7sfJIsItgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzM5NjlCM0NBMTFG
RDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhjQXJXVzUtdjdzZkpJc0l0
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvbDdSR0lXTjVoWGNBcldXNS12N3NmSklzSXRnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw
NkZGLzM5NjlCM0NBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhj
QXJXVzUtdjdzZkpJc0l0Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCHtnnub8LHp6K0CPel1FAEGELpAVeh8q8jFz82CqNd9vWusFvd0xZ0zfwa+iOX
70SigZTbM1xV8BZtRVtnO0A9nj9PDH+SAnJqHTx8mY/mABjmdTtishbET4zYNeqV
cXcXOFLY0P6yq2mNTCxAvGK285k92bU+5X56S9HF85s85BXqMaMdpDvOx2fP07hB
5xrnHY3Gmu+FDyFxMNo30MOm2MTSKMG0B/nWruQZaeMijVF43rZE5vpCD1LSvxmT
BcMzq+JQ2Rpv7S+iCYxzBa4E4puWDarhkp9auItc5IfXKKQTK5JGHPTMwZIQTlu5
YqOJojgYE2qd0LBmIrQoesRx
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:33:18 2026 by rpki-client