
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: 69hO9M4l1JFAcWpHYBUli8KtG0Cccmcl0mbmLODkZCE=
Subject key identifier: 23:47:E9:A3:9B:2B:4C:AD:55:DB:2B:30:21:A4:FA:EB:9F:F4:4F:9B
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 0551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 054A
Signing time: Mon 10 Aug 2026 23:02:04 +0000
Manifest this update: Mon 10 Aug 2026 23:02:03 +0000
Manifest next update: Mon 17 Aug 2026 23:02:03 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: nmdB/EcKjpCQwalk33t1K3zBXOLbm64g5wHRFt7Ars8=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 17 Aug 2026 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Aug 10 23:02:03 2026 GMT
Not After : Aug 17 23:02:03 2026 GMT
Subject: CN=6a7a586c-543a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:2d:3c:c6:74:fe:d4:fe:c1:55:23:da:f5:
94:d7:4d:2f:30:15:b3:4b:9e:09:97:a6:aa:f5:c3:
8b:51:0a:d4:4d:a6:69:3a:9b:63:da:9b:42:a6:44:
10:f6:9c:da:8e:cc:3d:79:bc:2c:6d:15:ac:ac:0c:
3a:99:cb:01:50:8a:e6:30:e2:ae:93:57:b2:58:cf:
32:c6:92:5e:20:18:61:d8:24:2e:b4:00:f9:d8:a3:
91:a0:81:7a:d6:13:24:cf:93:42:74:44:1b:5e:ba:
44:c4:b8:b6:cc:3f:81:86:a2:7a:eb:23:90:9d:f2:
65:65:a1:c7:a1:78:f8:6b:38:08:47:8e:0f:f2:78:
80:70:c4:61:36:36:38:90:ad:83:d0:7d:53:44:b2:
b4:35:1f:5a:d6:90:25:fc:72:09:59:54:fa:aa:8b:
10:6d:d1:c4:07:87:ab:17:42:f8:cb:ba:d8:04:8a:
23:80:e9:fb:29:f0:f2:5e:19:a5:42:2a:00:37:72:
02:c9:87:c1:2e:50:fd:a9:59:be:13:c4:f6:3a:f4:
ea:e8:0c:4e:e3:eb:46:d5:d9:fa:f9:86:52:03:7a:
9c:d5:ff:a2:41:4f:a1:7c:f3:db:5f:8f:05:c6:39:
64:a7:14:01:f7:58:43:36:f3:b0:a5:66:fa:be:20:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:47:E9:A3:9B:2B:4C:AD:55:DB:2B:30:21:A4:FA:EB:9F:F4:4F:9B
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:df:47:61:bf:b0:c1:c8:a4:69:ec:a2:1d:12:3c:d9:dc:
32:d5:eb:95:a5:30:f8:79:10:b1:4a:14:6a:c9:f2:4f:07:06:
fb:85:b9:7d:25:df:46:a6:f6:92:ce:c1:2b:98:51:97:d5:ac:
63:07:46:10:67:b3:50:ea:53:78:d8:65:0c:af:c1:06:74:8f:
40:d5:b7:8b:4b:f2:2b:31:79:39:05:98:38:f5:06:e8:60:9f:
b1:90:e3:85:e3:28:0a:0e:29:25:50:f9:e8:53:7e:39:03:61:
dc:e7:64:2d:22:65:4d:f5:bd:62:c0:a4:fb:1f:7c:2c:53:11:
0d:cf:55:bb:6c:6c:f2:26:93:c8:08:fb:dc:ac:4c:2b:5b:d4:
8b:2a:10:83:a4:dd:ca:d6:58:64:7c:95:85:4a:5f:0c:4a:9b:
f6:33:c1:e4:f3:4f:05:f9:df:8c:a2:fd:27:6d:4a:1b:11:b1:
df:3f:87:75:f9:c1:f9:9b:1d:2d:f1:1a:0a:db:2a:9b:0f:e1:
c9:ff:0c:72:47:47:6f:34:69:15:f5:29:f4:d8:d0:b2:43:a8:
64:cd:82:ea:c4:1e:ae:44:57:8e:1e:81:39:72:0e:28:76:f0:
25:c9:3d:3b:d1:cc:65:67:f7:9a:42:3a:0b:54:f2:33:c1:a1:
6b:d0:23:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5
QkQxQUUzM0YwHhcNMjYwODEwMjMwMjAzWhcNMjYwODE3MjMwMjAzWjAYMRYwFAYD
VQQDEw02YTdhNTg2Yy01NDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHwtPMZ0/tT+wVUj2vWU100vMBWzS54Jl6aq9cOLUQrUTaZpOptj2ptCpkQQ
9pzajsw9ebwsbRWsrAw6mcsBUIrmMOKuk1eyWM8yxpJeIBhh2CQutAD52KORoIF6
1hMkz5NCdEQbXrpExLi2zD+BhqJ66yOQnfJlZaHHoXj4azgIR44P8niAcMRhNjY4
kK2D0H1TRLK0NR9a1pAl/HIJWVT6qosQbdHEB4erF0L4y7rYBIojgOn7KfDyXhml
QioAN3ICyYfBLlD9qVm+E8T2OvTq6AxO4+tG1dn6+YZSA3qc1f+iQU+hfPPbX48F
xjlkpxQB91hDNvOwpWb6viDPWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNH6aOb
K0ytVdsrMCGk+uuf9E+bMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD
MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa
NXFMOW5PalVnNzJiMGE0ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOpTfR2G/sMHIpGnsoh0SPNncMtXrlaUw+HkQsUoUasnyTwcG+4W5fSXfRqb2
ks7BK5hRl9WsYwdGEGezUOpTeNhlDK/BBnSPQNW3i0vyKzF5OQWYOPUG6GCfsZDj
heMoCg4pJVD56FN+OQNh3OdkLSJlTfW9YsCk+x98LFMRDc9Vu2xs8iaTyAj73KxM
K1vUiyoQg6TdytZYZHyVhUpfDEqb9jPB5PNPBfnfjKL9J21KGxGx3z+HdfnB+Zsd
LfEaCtsqmw/hyf8MckdHbzRpFfUp9NjQskOoZM2C6sQerkRXjh6BOXIOKHbwJck9
O9HMZWf3mkI6C1TyM8Gha9AjiA==
-----END CERTIFICATE-----
Generated at Tue Aug 11 19:48:22 2026 by rpki-client