
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: OI2K0GPqMsJljMZz6Wf9cv6dUoCf7wTBzroOGUNtjzw=
Subject key identifier: 16:43:1F:AA:0D:08:23:9F:B6:6F:ED:AE:4A:C5:CE:77:A0:BF:33:15
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 0523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 051C
Signing time: Tue 12 May 2026 23:41:27 +0000
Manifest this update: Tue 12 May 2026 23:41:26 +0000
Manifest next update: Tue 19 May 2026 23:41:26 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: n+TUn7YzwtEoOrY3nhk5FjW2T/8cRqQSEvv/noGrGtE=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: May 12 23:41:26 2026 GMT
Not After : May 19 23:41:26 2026 GMT
Subject: CN=6a03baa7-458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:7b:07:e3:4b:42:63:da:e8:f6:6d:bd:c0:
4f:76:23:ea:a8:2f:53:18:7c:af:62:63:c4:b4:c3:
49:13:1e:10:14:0d:f5:80:29:a5:cd:be:05:78:d1:
a1:96:d6:33:8f:a7:ea:13:22:e2:30:b9:55:b4:43:
7f:70:8c:87:29:d7:40:0c:82:77:eb:6d:a8:f9:45:
e7:c9:bb:ee:1d:ea:b2:c5:17:9f:8b:90:3b:03:01:
cc:0b:c9:0d:73:c8:46:dc:09:be:ed:2b:09:f5:f1:
b2:dd:c6:4c:29:26:f4:e3:a8:25:69:82:cf:3f:de:
8b:a8:bc:df:7e:7d:ce:3f:cb:4b:4a:0e:d7:7d:84:
c3:c9:38:fa:33:39:35:89:2c:48:c3:9f:26:51:4e:
03:68:71:67:06:93:76:36:28:65:73:94:99:be:b2:
90:bc:1b:0f:b8:f8:19:e5:e4:07:a9:53:9c:52:d5:
de:8d:1d:21:5d:32:16:84:3f:50:2c:e6:1b:d9:5a:
ed:e0:e0:4a:f2:b2:09:69:f9:ac:ac:06:48:bf:76:
5e:d7:6e:05:0c:d1:19:78:90:ee:62:75:60:8b:29:
69:84:73:d4:f5:9c:65:5a:70:91:69:4d:4f:58:e3:
28:30:dc:cf:56:0d:67:35:98:95:37:a2:a6:29:b9:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:1F:AA:0D:08:23:9F:B6:6F:ED:AE:4A:C5:CE:77:A0:BF:33:15
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:83:a3:67:b1:f1:d6:54:f6:18:16:78:05:01:f6:b6:13:ec:
48:cc:a1:8f:b4:e1:8c:16:12:6e:de:c6:9f:65:ee:06:ac:82:
51:60:2e:c9:8f:cd:02:4f:72:b8:7f:19:b2:13:1d:f5:8f:ed:
4c:2a:75:14:42:5f:64:49:d2:f2:60:be:21:50:27:21:1a:0b:
31:78:5d:fa:1a:fb:40:40:40:b6:93:ec:bb:46:26:17:95:43:
e9:d7:17:3e:37:de:95:30:02:27:d7:cb:2e:39:c9:47:0b:c0:
cc:ab:a9:f8:71:ca:de:1d:1b:ef:fd:2f:6d:d7:40:25:ec:53:
3e:aa:37:44:e3:1c:8d:05:54:49:df:22:72:2f:0b:f2:dc:92:
43:d5:3f:06:d8:b0:6e:05:4b:38:83:6f:f1:47:a7:ca:7b:ea:
1f:34:9b:44:a3:b1:15:30:de:c7:7d:0d:67:e4:f8:59:12:21:
49:7e:d5:a1:18:73:1f:7f:6b:d2:58:a9:e5:04:a5:be:34:11:
43:0c:c0:07:a5:00:28:b9:bb:8b:0a:2f:43:5d:dc:04:77:d3:
02:17:43:08:b3:12:92:35:f8:c9:fa:3c:8b:17:1e:09:f0:0e:
0e:d8:bb:90:79:ef:36:13:f5:c3:eb:df:a2:c5:a6:47:47:a9:
34:94:f6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:33 2026 by rpki-client