
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json)
Hash identifier: laKPVWInqaIldiGBSxuHKjCQgAxxuuHFIIAun7A4sJc=
Subject key identifier: 5A:4A:05:77:EA:04:F8:C2:C3:E0:D7:28:6E:A9:45:5C:CF:A4:C9:07
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 276D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
Manifest number: 26B6
Signing time: Wed 26 Aug 2026 15:41:33 +0000
Manifest this update: Wed 26 Aug 2026 15:41:33 +0000
Manifest next update: Wed 02 Sep 2026 15:41:33 +0000
Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: ZmWo1ePLH+xN9AZMpy5CBUTxAQ3R0XRYXWrSJrC/zAo=)
2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: ueVNReZo6meY996fdhGVkYb8RWaLqcwirYFMYjvQObc=)
3: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: toFZWG4e9XZyczzfjTX6cXsPpN+8LUyofu/rvS6jkb0=)
4: F450479E947F11F1863B76686111F970.roa (hash: sH6iD29xNMYCptO67v1vYCbrV4F3VNQGw1vF+ethChE=)
5: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: WN9q7rQQBf46/jC5IO4qXkvHnVaxKh9FNi0LfFFu2KQ=)
6: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: +Oja7U4t8Lb0LZ6fvOYpK5rIngmBRvyB89ZXtC/NBOI=)
7: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 45iqKZ00KElDKa9iNeZor0xEQ36vS3Q2LgeqdVDPoiM=)
8: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: NZdmLOsnZDNXAMGcOdhI3q4yB4aAOv7p2/cOPmiJe3c=)
9: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: XYzNXz1bE+l2XGJ3ebIjddpWT2dkbew2K443TSmAkNE=)
10: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: DgtUOB2WpmAwriA13XT1e6HnKLeJSw2MXGDQTJbwll8=)
11: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: NjuhjolNH8v8Btpog7H4mhNstJVuaTFcnmqdSWxxhHE=)
12: A8ED74B2677F11F0A8B65370C4F9AE02.roa (hash: RTOGKejUdNcBVaptPhu6f0aYuxe1ymwva6QLNzjueuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 15:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10093 (0x276d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Aug 26 15:41:33 2026 GMT
Not After : Sep 2 15:41:33 2026 GMT
Subject: CN=6a8f092d-c60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:4c:56:a9:0c:fa:dd:ea:39:38:95:75:2f:
56:15:90:a0:fc:8c:1d:bc:aa:c3:7b:7d:7d:d8:7c:
15:5a:f9:49:ac:c7:4e:db:8c:1e:29:e5:b9:22:7e:
a0:2e:3a:f1:f2:91:59:2d:89:1e:8c:c9:9a:9b:44:
6e:f8:28:19:76:6a:09:43:40:32:b2:6c:80:af:60:
0b:11:b5:c5:e3:5f:29:73:8f:89:a1:3c:9a:e9:9e:
5b:8f:82:20:ab:bc:7b:61:70:af:ce:34:8d:84:ed:
61:8f:5a:2d:bc:46:d5:c3:49:89:f9:89:31:b1:b4:
a4:02:b3:68:ee:c7:42:b4:fc:1c:b3:a7:4f:27:a2:
56:d0:93:bd:ac:7c:2a:35:bf:8a:47:2c:fb:3f:97:
e1:d6:e8:8e:f0:c5:b6:5e:96:20:d4:af:18:fa:1c:
36:82:0c:99:d2:6d:50:97:c8:4e:87:c9:80:fb:06:
fe:a7:ad:2e:96:1b:93:ca:bd:aa:9f:f7:3d:c6:00:
34:25:f2:45:b0:38:dc:7e:60:1f:ad:d6:26:ac:33:
e3:e1:a8:5e:31:17:50:44:0d:5e:db:69:08:0b:61:
11:4c:93:38:02:43:02:f6:c8:67:f5:98:35:71:46:
ad:e9:89:34:68:c4:64:76:fb:48:86:10:36:22:c8:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4A:05:77:EA:04:F8:C2:C3:E0:D7:28:6E:A9:45:5C:CF:A4:C9:07
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:4a:9d:6e:c2:b0:19:5a:71:c9:ad:0d:df:57:76:81:a5:
f5:84:54:e2:8f:ce:46:48:1f:8f:b9:cb:89:4c:9e:43:b4:5c:
28:6c:4a:14:11:f5:05:3e:f8:4a:58:77:bd:b7:61:3a:fd:ea:
63:50:af:74:70:70:55:28:98:6f:f3:2f:3c:76:92:dd:81:0a:
f7:23:a9:c5:f2:8d:47:ee:ea:43:66:8a:8c:0e:6d:29:c4:b7:
67:7f:ad:25:05:0f:9a:aa:14:c3:fe:64:05:56:ec:bc:d1:fd:
0a:b7:73:92:f7:ed:d3:14:e4:c3:01:2e:48:ea:2a:bb:a6:1e:
3d:5c:1c:c5:4e:68:77:a1:47:ee:14:23:5b:f3:37:6a:de:3b:
48:c1:2e:f1:13:63:1c:6b:1c:62:a8:1b:e3:1a:3c:6b:67:1b:
c2:fa:d0:11:ae:42:46:a2:f3:9a:c5:26:6c:65:8e:a1:aa:7f:
9b:33:73:a4:33:b3:58:fc:3c:8f:8c:5d:84:02:bf:ee:51:c9:
9a:48:f0:4b:cf:7f:a1:a0:72:c4:91:bf:81:02:b3:b9:5c:73:
f8:09:f8:7e:cc:80:20:96:bc:2b:04:64:95:e3:db:e0:6c:49:
aa:86:f9:4d:5b:46:bc:f4:1c:fa:26:83:f0:ff:99:ff:07:cf:
1d:45:2c:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJ20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB
RjE0ODkyNkMwHhcNMjYwODI2MTU0MTMzWhcNMjYwOTAyMTU0MTMzWjAYMRYwFAYD
VQQDEw02YThmMDkyZC1jNjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqhMVqkM+t3qOTiVdS9WFZCg/IwdvKrDe3192HwVWvlJrMdO24weKeW5In6g
Ljrx8pFZLYkejMmam0Ru+CgZdmoJQ0AysmyAr2ALEbXF418pc4+JoTya6Z5bj4Ig
q7x7YXCvzjSNhO1hj1otvEbVw0mJ+YkxsbSkArNo7sdCtPwcs6dPJ6JW0JO9rHwq
Nb+KRyz7P5fh1uiO8MW2XpYg1K8Y+hw2ggyZ0m1Ql8hOh8mA+wb+p60ulhuTyr2q
n/c9xgA0JfJFsDjcfmAfrdYmrDPj4aheMRdQRA1e22kIC2ERTJM4AkMC9shn9Zg1
cUat6Yk0aMRkdvtIhhA2IsiolQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpKBXfq
BPjCw+DXKG6pRVzPpMkHMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx
NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC
WUp6V2lhc0s3My12RklrbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARSNKnW7CsBlaccmtDd9XdoGl9YRU4o/ORkgfj7nLiUyeQ7RcKGxKFBH1BT74
Slh3vbdhOv3qY1CvdHBwVSiYb/MvPHaS3YEK9yOpxfKNR+7qQ2aKjA5tKcS3Z3+t
JQUPmqoUw/5kBVbsvNH9Crdzkvft0xTkwwEuSOoqu6YePVwcxU5od6FH7hQjW/M3
at47SMEu8RNjHGscYqgb4xo8a2cbwvrQEa5CRqLzmsUmbGWOoap/mzNzpDOzWPw8
j4xdhAK/7lHJmkjwS89/oaByxJG/gQKzuVxz+An4fsyAIJa8KwRklePb4GxJqob5
TVtGvPQc+iaD8P+Z/wfPHUUskQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:58:11 2026 by rpki-client