
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: OEy7dd2g5mp4YSpPZGke5WTiOwQV8nTdljcEeYQo2LE=
Subject key identifier: 66:29:6D:95:C8:EC:11:DB:0D:D7:7E:14:6B:ED:4D:B3:9B:7E:03:47
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 0522
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 051B
Signing time: Sun 10 May 2026 23:38:55 +0000
Manifest this update: Sun 10 May 2026 23:38:54 +0000
Manifest next update: Sun 17 May 2026 23:38:54 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: shoFC9BJaQ7zGoA0FkzImJCOQa8J9DS4nl53pXp2tgM=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: May 10 23:38:54 2026 GMT
Not After : May 17 23:38:54 2026 GMT
Subject: CN=6a01170f-ef1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:40:9a:35:02:cc:49:6f:5e:74:80:1d:3d:
40:8c:7e:ba:62:f3:7d:18:0a:bb:9e:bb:fd:3d:22:
ee:9a:40:bd:02:f6:ae:57:46:a2:c8:3b:31:84:0e:
fc:eb:6e:5a:75:bf:71:69:69:d4:d3:71:3b:fd:a2:
60:68:a3:46:fb:76:89:f9:fc:20:9c:6e:ad:19:0e:
5a:6c:71:b9:49:04:b1:48:aa:b6:16:76:d1:8a:5d:
97:7a:65:d3:46:0f:25:a9:22:f3:6b:58:52:3d:2f:
c0:dd:6a:f1:17:88:ee:9a:ed:b1:c8:0e:97:40:62:
8c:c5:8b:f6:c3:13:5e:5b:79:cd:4a:13:f3:c4:a1:
c7:96:ee:af:61:20:70:3d:25:19:69:d5:d7:b3:86:
58:cd:63:8d:10:81:18:84:70:9b:68:5e:75:b2:57:
e8:5a:e1:73:d4:bc:78:49:57:5f:23:cb:b9:5c:c4:
82:cb:1f:0a:ab:37:25:33:9e:b0:9a:95:a8:ca:1c:
30:43:a2:47:c4:f6:7d:c5:ad:f3:91:32:fb:98:36:
10:d7:0e:3b:61:ed:b2:ab:76:fb:80:b9:03:84:da:
97:cf:58:e2:2b:ae:cf:e3:71:18:cd:2e:76:71:2a:
fc:f5:87:f0:62:87:03:dc:c7:98:25:de:d6:ff:01:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:6D:95:C8:EC:11:DB:0D:D7:7E:14:6B:ED:4D:B3:9B:7E:03:47
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:6c:a1:a1:5e:19:c5:7a:6a:a6:90:1f:0d:42:bb:f3:13:
af:0c:b3:ea:cf:45:23:fd:4f:05:a4:1f:35:64:44:8e:a5:93:
dd:6c:76:e0:af:52:ba:41:e1:8d:97:59:60:1f:d2:f7:72:11:
22:d9:5c:9c:2e:d6:13:09:62:34:cb:be:dd:c7:0f:77:6c:b3:
79:15:e2:5c:8c:5c:ab:1c:13:e2:16:8d:68:df:e6:06:89:05:
1d:91:58:fd:c3:c1:4d:bb:a5:97:9a:d3:62:33:2e:2d:1f:09:
e3:e8:de:3d:46:52:c2:5c:89:7a:6f:2e:ec:8c:ab:6f:2f:7b:
1d:fa:ec:f6:60:f4:53:5e:52:bc:54:3d:72:93:13:c5:75:98:
04:ce:83:37:bc:b4:dc:26:9d:24:f0:42:77:d1:2e:4f:7a:a4:
89:22:7a:0f:4c:20:03:8d:f2:4b:12:72:5a:a5:8b:01:be:ff:
d9:85:2d:d5:80:81:a1:5f:ff:b3:1c:25:62:d7:e7:d2:6a:4d:
cb:dd:06:4d:b1:26:e1:57:65:3e:fb:b9:fa:15:4f:23:7b:c6:
b9:c8:2a:3b:7d:5c:bf:af:bd:c3:d6:44:83:96:6d:25:9b:a8:
c1:1c:0d:89:01:f3:8e:ea:2b:95:bb:26:78:e3:a5:50:f0:4e:
66:1a:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:07 2026 by rpki-client