
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
File: LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json)
Hash identifier: zbUmLnyoJWQnpliOEk2jQJKXtlqxriKZ/QmkpTMy2rA=
Subject key identifier: 43:31:80:D1:46:3F:93:8D:CD:2D:2F:B7:04:AD:BF:DC:B9:5F:FA:A9
Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Certificate serial: 07BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
Manifest number: 07B6
Signing time: Tue 24 Mar 2026 21:11:05 +0000
Manifest this update: Tue 24 Mar 2026 21:11:04 +0000
Manifest next update: Tue 31 Mar 2026 21:11:04 +0000
Files and hashes: 1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: hKF+GvkS4UkFTyyfgwrgkRHWvL/hACG+c8abIv/5zL4=)
2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: YPebFSMqaNrqN2HNE3zF4t6DH6zSmT3n+GWl59Oat/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1983 (0x7bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Validity
Not Before: Mar 24 21:11:04 2026 GMT
Not After : Mar 31 21:11:04 2026 GMT
Subject: CN=69c2fde9-2bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:9f:74:5d:22:13:92:13:e0:72:02:99:73:
0c:0a:19:1f:9a:2e:11:3d:cc:5d:0b:19:71:7a:73:
d7:16:e5:52:f9:2f:16:3c:79:2d:bb:49:97:48:28:
9e:ea:db:9a:c9:56:63:5d:f5:e3:3b:02:a5:ae:55:
6e:d3:ea:aa:72:be:ce:9b:02:b5:40:7d:77:46:70:
4c:e9:08:74:c3:e7:bb:1b:96:9a:6f:3a:c1:6b:1d:
2d:72:2f:67:02:d7:7f:68:57:6c:4e:0f:a0:74:e1:
e6:97:92:5e:ce:7f:2e:89:d1:ca:72:d5:0a:fc:72:
ad:79:ed:91:41:5f:27:c4:d9:a1:3d:28:b2:42:f3:
77:2d:ba:94:7d:29:56:5e:4b:63:71:0a:ed:b6:39:
cb:d5:02:b5:df:c0:9e:e9:ae:74:89:0f:fa:95:21:
29:70:7f:7d:d0:87:97:5c:d5:bb:5e:3c:51:22:9e:
b5:86:69:a9:d9:a3:39:8e:c8:77:0b:71:9e:6a:23:
65:dc:09:2f:a5:4c:c6:f3:36:f0:35:63:11:34:75:
84:33:b9:95:4a:2b:69:41:65:29:b3:5b:94:3c:f7:
68:ae:32:3c:23:fc:4e:d8:88:9e:0b:6a:85:a9:01:
82:83:dd:52:5d:b8:0e:4e:82:e9:c6:8b:8d:63:f5:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:80:D1:46:3F:93:8D:CD:2D:2F:B7:04:AD:BF:DC:B9:5F:FA:A9
X509v3 Authority Key Identifier:
keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7a:f2:3e:8c:c0:6c:73:2d:05:f3:d0:8a:ac:ba:70:77:4c:
d8:8c:fe:3a:02:a0:28:d5:88:73:d7:93:9e:73:b5:31:16:bc:
72:36:3e:2b:cc:6c:a2:18:fb:e2:21:54:44:34:c8:ac:ab:07:
29:69:1f:d0:ed:e0:a9:ae:40:be:9d:44:e4:05:cd:92:84:9d:
16:0c:dc:78:77:94:43:5c:14:e0:0c:96:5d:70:ba:2f:8c:4d:
b2:5a:0c:f4:67:86:b3:73:06:d4:82:99:c0:20:63:bf:9d:b1:
56:56:6c:c7:9f:12:df:c2:89:58:5b:5d:fd:d6:d1:9f:43:68:
dc:0d:b4:83:66:32:91:ae:0a:6d:26:35:00:d5:bd:3b:27:8d:
b9:65:20:8b:0c:95:a1:fe:a1:f6:a9:49:ed:e3:c5:3d:75:4e:
57:85:19:a0:37:f4:44:06:63:a3:80:4a:f3:d1:ff:a8:17:7c:
ec:11:bb:3d:8b:bc:68:ad:91:3b:89:e9:bc:41:c9:10:0c:63:
7c:83:75:db:33:67:ad:ca:23:90:7b:99:6e:48:dd:f2:75:66:
87:aa:c0:8a:0d:a7:5e:57:06:3d:21:64:6c:9d:04:f2:a4:f4:
61:75:b1:8d:8b:77:db:d0:bc:61:d5:a3:92:e7:ea:9a:d6:a2:
1b:8d:f1:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5
MjhFQTdCMzkwHhcNMjYwMzI0MjExMTA0WhcNMjYwMzMxMjExMTA0WjAYMRYwFAYD
VQQDEw02OWMyZmRlOS0yYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArPifdF0iE5IT4HICmXMMChkfmi4RPcxdCxlxenPXFuVS+S8WPHktu0mXSCie
6tuayVZjXfXjOwKlrlVu0+qqcr7OmwK1QH13RnBM6Qh0w+e7G5aabzrBax0tci9n
Atd/aFdsTg+gdOHml5Jezn8uidHKctUK/HKtee2RQV8nxNmhPSiyQvN3LbqUfSlW
XktjcQrttjnL1QK138Ce6a50iQ/6lSEpcH990IeXXNW7XjxRIp61hmmp2aM5jsh3
C3GeaiNl3AkvpUzG8zbwNWMRNHWEM7mVSitpQWUps1uUPPdorjI8I/xO2IieC2qF
qQGCg91SXbgOToLpxouNY/XqOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMxgNFG
P5ONzS0vtwStv9y5X/qpMB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC
MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzI3OC8yQUUwQUQ2MDNCMzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BU
X1BZT21OQVhBeTZTanFlemsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXnryPozAbHMtBfPQiqy6cHdM2Iz+OgKgKNWIc9eTnnO1MRa8cjY+K8xsohj7
4iFURDTIrKsHKWkf0O3gqa5Avp1E5AXNkoSdFgzceHeUQ1wU4AyWXXC6L4xNsloM
9GeGs3MG1IKZwCBjv52xVlZsx58S38KJWFtd/dbRn0No3A20g2Yyka4KbSY1ANW9
OyeNuWUgiwyVof6h9qlJ7ePFPXVOV4UZoDf0RAZjo4BK89H/qBd87BG7PYu8aK2R
O4npvEHJEAxjfIN12zNnrcojkHuZbkjd8nVmh6rAig2nXlcGPSFkbJ0E8qT0YXWx
jYt329C8YdWjkufqmtaiG43x9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:37 2026 by rpki-client