
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: 9j+sczZQdGnSgkDejwz0ZmjrzQSi5y/XP5l750AB3ZA=
Subject key identifier: 1F:08:6C:27:56:80:55:AD:AF:E2:6D:58:D2:6B:BA:6F:72:CF:EA:CE
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 050A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 0503
Signing time: Tue 24 Mar 2026 23:20:54 +0000
Manifest this update: Tue 24 Mar 2026 23:20:54 +0000
Manifest next update: Tue 31 Mar 2026 23:20:54 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: Ecmy5SvoKIbB+NRisMDkYoFTs0j5WGoUSV4+JjXFz+E=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1290 (0x50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Mar 24 23:20:54 2026 GMT
Not After : Mar 31 23:20:54 2026 GMT
Subject: CN=69c31c56-acdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:b3:ad:65:f4:41:4d:e7:18:21:58:74:62:
b8:b8:37:da:b2:4d:27:70:1c:c8:e2:a1:5d:b9:21:
e0:7c:80:d8:af:81:4c:53:93:3a:61:a5:ef:c8:b9:
71:72:26:ea:8f:84:90:19:7a:1a:f1:89:1d:a3:74:
24:80:c1:27:b4:cb:ea:74:e8:2e:16:af:59:09:f5:
fb:64:6e:4c:e3:5e:c8:80:02:14:10:52:40:2c:ca:
e1:ec:39:44:c7:23:24:0d:89:75:cd:72:35:25:76:
8e:4f:34:86:7c:76:c5:88:43:3f:eb:96:5d:2c:c6:
7c:81:c5:46:cd:d8:6b:05:ae:36:2d:10:79:b0:b0:
1d:b7:3f:e6:49:4b:b4:a4:74:3c:81:42:49:66:50:
c8:fb:12:f0:37:44:af:7b:8f:30:89:e1:58:df:5c:
22:7c:b0:47:2a:06:48:2f:9e:9b:3d:1b:de:bc:f5:
82:57:98:b7:dd:f6:66:8d:5e:3a:eb:77:e9:a5:86:
54:75:dd:89:be:36:00:75:ec:eb:44:c5:41:86:3e:
21:fd:98:d9:36:03:f1:b1:eb:a1:ba:60:fa:d9:d1:
a6:21:97:c4:44:4e:09:40:c4:5f:11:37:e4:a2:b7:
fb:eb:8b:08:2f:3d:a9:1f:f3:f2:00:4f:d8:2e:73:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:08:6C:27:56:80:55:AD:AF:E2:6D:58:D2:6B:BA:6F:72:CF:EA:CE
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:f6:b2:4b:60:df:a9:27:c4:03:55:b4:2a:85:5b:2b:c6:
f0:86:a7:6c:6f:78:fc:68:f8:c1:d6:b1:f6:9f:ef:9e:45:82:
48:99:2b:6f:03:57:c4:da:dc:66:d6:a0:c6:c7:79:5a:54:fa:
11:c6:1f:3f:bc:77:33:a5:6a:a2:f7:7a:e1:b9:ce:c4:8b:10:
4c:b1:a3:d7:6f:62:11:44:34:20:b4:cb:cf:16:64:15:26:99:
f1:92:4a:fd:3c:a9:a8:5a:ac:85:bb:50:ad:b4:09:2f:70:1a:
d9:0d:96:33:50:9a:a2:57:f4:0f:fe:a5:6a:ad:4b:51:20:10:
d8:46:84:ca:d7:d8:fb:41:0d:df:ff:ad:b6:28:e5:c4:c4:1e:
bf:b4:08:e5:35:3e:24:57:5f:2f:87:8a:00:ec:d6:88:c2:58:
3d:83:de:6b:55:97:66:82:4f:6d:9b:1f:54:b0:f0:24:ef:50:
97:6a:d7:39:3d:68:e4:5f:93:58:20:4b:27:ec:bb:29:1f:4e:
ff:83:af:3a:46:03:28:62:0b:0d:6a:6e:ab:b9:0c:1a:68:fb:
93:fc:c9:0a:a8:de:e4:67:b5:be:d0:24:d3:0d:c1:e1:76:ad:
de:d8:6c:f6:c3:64:33:51:ee:33:67:2d:79:e5:d6:5b:f5:59:
e5:68:6b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:13 2026 by rpki-client