
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: r0MtTdcHNBxXZ+QBnAM6WjXzBzRZOSv14GhkznAQzG4=
Subject key identifier: 97:1C:B2:8F:49:2D:3F:3D:5C:8C:B1:E1:C1:AC:02:B6:62:EB:A1:00
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 0547
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 0540
Signing time: Thu 23 Jul 2026 00:16:16 +0000
Manifest this update: Thu 23 Jul 2026 00:16:15 +0000
Manifest next update: Thu 30 Jul 2026 00:16:15 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: XEDAUP5jXDLTTvoI9JcQx9pmUinczktMH32LLCK+vFQ=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: GRBe+HaGJO3LMIVblDPWEP89zGECTmdqlQ721jRVqnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Jul 23 00:16:15 2026 GMT
Not After : Jul 30 00:16:15 2026 GMT
Subject: CN=6a615d50-cd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:d9:84:ae:8f:57:f4:bd:ad:19:1a:1a:36:
0b:59:bc:dd:5b:a7:88:61:22:c2:72:6e:78:4c:af:
80:cc:f5:6e:ff:95:1f:5a:29:e1:9c:ac:00:e0:ed:
32:48:96:31:a3:5b:75:eb:ac:f7:a4:23:0d:fc:32:
45:00:fc:ad:7f:e7:d1:10:70:9d:ab:12:0e:e1:53:
ec:b9:8a:09:d6:53:7a:68:85:b2:11:60:f8:6b:80:
19:c5:5c:36:99:cc:63:d3:04:f5:37:41:7d:8a:b0:
14:bd:7d:01:0a:84:42:22:f2:f3:af:d0:88:fd:03:
eb:43:84:1a:4f:f5:b2:79:e4:0e:17:f8:c6:d2:b5:
66:ec:b7:20:5e:92:a8:b1:81:56:44:f6:3f:b6:ec:
84:5c:a5:79:7c:6c:e2:d4:3c:de:29:47:94:9c:08:
ea:10:25:73:e0:de:cb:7a:93:f1:89:64:22:2c:18:
c8:db:f9:2d:3f:16:f7:17:c8:e9:5e:0c:96:57:33:
0f:35:9f:ee:ba:66:ea:85:7f:56:8b:ee:9b:0b:9d:
79:42:6c:5e:f7:6c:58:a2:51:a5:c6:5d:e9:c7:e6:
71:e6:10:f0:3d:d3:04:39:46:0d:fe:9d:87:1e:28:
78:50:81:ae:e0:ca:3a:93:e9:64:eb:8e:c8:f7:e9:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:B2:8F:49:2D:3F:3D:5C:8C:B1:E1:C1:AC:02:B6:62:EB:A1:00
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ce:8a:96:e7:ce:65:4c:44:b7:d7:f6:94:52:c0:8f:96:4e:
8c:bf:c7:e4:1e:c2:3e:cb:f5:88:10:c3:d3:4b:5b:5f:86:c3:
4a:c7:60:c1:54:14:67:b1:26:c9:5b:b3:3d:ca:f1:8a:4d:28:
63:6d:21:7c:c0:69:1f:97:ed:ed:d8:08:f0:5e:ee:e2:44:0e:
2c:4f:5e:27:7f:9e:dd:9f:57:05:a6:8c:7e:49:eb:2f:e3:1d:
b3:16:ef:13:4a:49:e5:21:c0:d9:21:8b:92:a1:40:3a:70:a7:
85:89:6d:3f:88:e0:00:5f:3f:a9:c4:fe:ef:d9:b8:dc:a9:fb:
94:ea:a0:d3:3e:46:ba:06:7c:45:4a:94:f4:9e:6c:53:22:c8:
39:d1:5a:b4:3f:ae:d7:f7:aa:e5:08:21:23:c1:fe:8b:c9:32:
ee:2f:5b:25:17:f2:5f:36:cf:bc:5e:57:b1:57:58:46:a4:d6:
3d:41:6a:c5:88:b7:89:66:9e:36:32:64:d1:56:70:86:47:ba:
bf:a3:1b:48:dc:b7:b0:db:ee:16:07:99:46:fb:c6:01:d9:f8:
c5:a9:d9:6c:67:fd:7a:c2:08:3d:73:0a:e8:86:7b:07:cc:2c:
24:90:0a:60:fe:cc:8b:46:b5:18:1e:41:51:32:70:f9:6e:3d:
f2:a0:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:28 2026 by rpki-client