
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier: zo7APAeqyxYhb0ZXrNn/DbK8MdYalWY5OzFB1jPe9s0=
Subject key identifier: 37:24:CE:B8:15:FE:0B:DD:86:62:ED:9E:3D:C7:F0:25:8B:46:1D:A3
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number: 023F
Signing time: Thu 09 Jul 2026 03:57:01 +0000
Manifest this update: Thu 09 Jul 2026 03:57:01 +0000
Manifest next update: Thu 16 Jul 2026 03:57:01 +0000
Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: 0gtJ+p4nTqWig5+Shnq6ohxMtfLmZQ5L/DImwEwMgRo=)
2: 252E9EB4652411F196C4FA3A8447A888.roa (hash: uLZNLe/3LKewURqIVc5uNnrl/e0YDlahAtsJGHncajc=)
3: 25C794C0652411F196C4FA3A8447A888.roa (hash: N45LL33IihqS/P4Wkd4Y5RM4yOWChQgClLZI5lkYTq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 03:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Validity
Not Before: Jul 9 03:57:01 2026 GMT
Not After : Jul 16 03:57:01 2026 GMT
Subject: CN=6a4f1c0d-c5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:80:be:1f:fc:e2:e4:53:d7:8a:e1:08:ab:
ec:ea:53:51:2e:8e:eb:ba:aa:de:6c:12:f5:da:44:
80:95:80:48:62:53:92:53:22:b1:0c:2d:e9:3e:b8:
e7:bf:45:fa:56:45:9c:72:6a:9e:48:a9:1e:04:18:
eb:a0:5f:e9:7d:5b:6f:3e:de:28:70:bb:d9:fd:12:
59:c3:cb:08:2c:a5:f2:dd:0b:1d:44:7d:94:80:e1:
b7:e2:fe:0d:3a:77:5e:a3:25:97:6e:d1:7e:26:f4:
31:20:7f:02:f4:5c:fa:ef:42:c8:51:fe:9b:0d:e9:
f3:2b:96:0d:a4:aa:b7:3d:38:4e:fa:1d:35:9f:b3:
0c:19:65:ec:6f:01:36:d2:8d:ab:34:07:9d:ca:83:
d3:b9:b8:25:96:d4:6b:a1:bd:2b:32:5f:ad:42:1a:
a7:34:a0:24:9c:e1:8f:84:e9:9f:5c:42:61:58:bb:
12:73:ca:79:a0:8e:55:6e:b1:1b:f0:85:99:cf:c0:
df:13:0b:7c:8e:81:b6:e3:c1:9b:48:7a:99:1e:c7:
a0:ba:5e:c4:57:1b:ca:e4:6e:8c:fe:93:3d:1c:19:
46:59:3a:fb:c1:14:6b:54:70:59:db:e7:f7:67:22:
8a:7b:23:62:ec:e9:e5:68:16:77:aa:ab:d0:e8:e8:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:24:CE:B8:15:FE:0B:DD:86:62:ED:9E:3D:C7:F0:25:8B:46:1D:A3
X509v3 Authority Key Identifier:
keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:d0:1e:bb:91:0e:b7:e0:b6:b4:3e:5f:49:7e:9d:b6:9b:
e8:95:8f:1a:be:7c:43:53:81:36:da:11:58:0f:19:55:9e:44:
68:7f:d0:a2:f6:00:b0:a4:38:24:6a:c9:cf:2d:a9:1d:aa:e7:
3b:1d:3f:76:f3:04:05:de:49:93:99:62:51:3f:2e:d6:22:f7:
46:21:11:d3:37:16:27:9d:66:20:09:23:e0:02:7e:f8:88:8a:
40:ae:2c:cf:c2:8c:ae:c3:69:c1:3b:85:86:d6:c1:4b:8c:31:
31:14:0b:81:a6:e9:5a:1f:96:e1:8e:d1:14:6c:ee:3c:cd:d5:
fa:b2:37:30:f7:78:13:c7:12:97:50:84:c2:87:bf:5e:33:48:
d7:e3:d2:4d:34:f7:d7:8c:66:68:e4:27:ad:cb:4a:a3:bc:35:
9f:eb:49:36:32:ee:b4:13:91:fd:be:47:1c:19:27:8b:98:83:
d1:89:0c:49:c5:9f:54:70:de:1f:e0:1e:f9:c2:a5:ed:f8:7b:
da:85:72:9d:a3:b9:af:9c:73:5a:16:ed:ae:e7:18:f1:b7:3e:
14:d9:0f:65:33:2b:8f:91:0e:ba:b7:53:3a:29:94:67:d3:d4:
77:fa:01:35:d6:23:60:e5:06:bb:aa:47:eb:df:91:98:c2:e8:
e8:79:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:37:14 2026 by rpki-client