
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: pnJ0oxNnSHcTnMX6gDdLUirQpdhlnIpBeVik2haO4TY=
Subject key identifier: A8:A7:D9:10:8D:21:17:A0:58:F8:84:95:02:0C:A6:72:5D:A4:C8:66
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 0568
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 0561
Signing time: Thu 24 Sep 2026 23:13:44 +0000
Manifest this update: Thu 24 Sep 2026 23:13:43 +0000
Manifest next update: Thu 01 Oct 2026 23:13:43 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: nh6IIPZEjs7b5UPJdte3iWZX90t5V1Kd7ajV3f2Ymc0=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Sep 24 23:13:43 2026 GMT
Not After : Oct 1 23:13:43 2026 GMT
Subject: CN=6ab5aea8-2edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:e8:72:a4:fd:6b:a6:7b:b3:5c:d9:f7:41:
36:1e:0f:4d:e8:d9:2f:b7:74:1b:64:6a:53:8e:f4:
03:ae:f4:67:c9:1c:3d:f8:ac:af:44:16:f7:e3:3d:
58:8d:c7:b5:06:92:88:01:74:ca:f2:46:a4:80:02:
d9:3f:59:33:ad:12:98:97:60:bd:8a:ad:41:e0:1e:
07:d9:03:07:c2:d9:fe:51:90:02:fc:ea:79:b8:11:
04:9e:5a:ed:2a:e2:60:f4:09:bb:88:24:ca:35:26:
b3:27:45:56:f4:20:a6:87:b5:a9:79:9b:87:d8:66:
aa:1f:01:9b:14:a1:0c:aa:59:ad:a9:e0:93:ea:33:
2b:e8:15:29:0e:94:8a:98:c8:9a:62:23:90:f6:19:
47:4e:69:a1:56:ae:56:1b:65:a6:49:12:fe:32:7a:
4a:d7:3b:61:60:e6:b4:28:3b:96:98:c2:a5:ab:d3:
06:b3:df:68:74:85:0d:0b:4f:89:03:4f:6d:04:8a:
6c:a6:ed:30:82:4b:0b:b2:c1:2d:ed:b7:10:bc:6b:
a1:fc:bc:d1:d9:12:eb:3b:43:ba:a5:4a:37:88:9b:
d1:7d:d1:fd:a8:a5:00:f7:6b:aa:5c:45:84:8e:51:
4c:3b:57:e6:e9:c7:c7:80:a0:22:76:52:81:75:10:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:D9:10:8D:21:17:A0:58:F8:84:95:02:0C:A6:72:5D:A4:C8:66
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:a3:b0:e5:7b:36:0a:65:b1:46:cc:0c:73:4e:ef:4a:00:cf:
96:f4:f6:c5:09:a7:29:ae:57:94:b4:ee:4e:cc:15:aa:ba:2c:
f8:44:80:5e:28:42:90:41:01:c9:44:16:ff:4d:07:ee:13:31:
d9:fe:6f:9e:6e:6e:b9:4a:ae:06:f6:6c:1f:c8:19:f6:f1:63:
83:f1:e7:9a:5b:c5:bf:2d:0f:b4:dc:7f:7e:66:51:95:6f:04:
42:32:34:8e:4a:25:70:57:f3:b4:32:5b:38:7b:48:56:4e:09:
0f:c7:b3:a3:5b:34:ca:19:2f:2e:a5:a9:fa:9c:a7:35:07:58:
25:2c:1e:f1:11:a4:4a:89:ca:22:98:49:cb:76:f5:79:84:ed:
4e:62:4e:8f:a8:a4:d0:7d:ba:52:d9:e2:f9:ca:2c:db:1d:92:
c4:74:87:44:ba:c2:b9:99:8c:99:52:51:1b:ed:00:0f:b8:71:
94:84:ff:6f:25:5e:82:e8:9d:15:92:0d:89:b0:84:0f:98:ef:
d9:a5:cc:74:5a:68:cb:d7:49:57:72:7a:ea:a2:85:19:48:8a:
32:59:48:6a:c2:b9:8a:c3:7c:74:38:4c:6d:21:12:f5:45:b2:
44:6e:9f:0c:09:fe:ac:e7:79:05:47:70:1d:ec:97:fc:5c:c5:
47:c4:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:25:40 2026 by rpki-client