
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
File: l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json)
Hash identifier: OmIC84AroKpIiNKo3uzSrj9r8JqELGdQP6eRIhFI4WQ=
Subject key identifier: 8B:A8:FA:4B:D8:8E:58:75:9C:93:29:18:87:E2:3D:F7:30:22:D1:5E
Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
Manifest number: 06BF
Signing time: Tue 22 Sep 2026 22:04:27 +0000
Manifest this update: Tue 22 Sep 2026 22:04:27 +0000
Manifest next update: Tue 29 Sep 2026 22:04:27 +0000
Files and hashes: 1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: EDmpLfCx27kmUedfv8k06yPSxBEWIqW7Zj2Dymr4qWc=)
2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: 3hykLcorYgLEfCJWHrkkPwMpO+Se/Lm85HODusfioqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Validity
Not Before: Sep 22 22:04:27 2026 GMT
Not After : Sep 29 22:04:27 2026 GMT
Subject: CN=6ab2fb6b-34c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:6e:3b:11:0e:79:66:fb:ef:b8:bd:8b:b6:
cb:6c:2f:d7:59:1f:fe:a5:f4:1d:fd:c6:4a:42:56:
2d:6e:05:8e:f8:a4:ce:92:02:43:c1:a0:2d:89:4b:
82:39:ff:24:9f:47:71:5c:1c:43:84:d3:3d:b3:dc:
e6:1c:f3:7c:7c:ba:73:07:4f:07:bd:de:a0:7a:3c:
8b:58:38:7b:8d:96:29:5c:31:31:aa:21:3c:83:bd:
f5:43:42:db:38:74:24:46:51:f6:c5:32:6b:e2:49:
45:e9:56:71:71:f3:2f:c4:c1:c2:f3:5d:8c:97:3b:
83:32:29:b2:2a:f3:6e:86:40:ef:66:b8:68:8b:f5:
f3:64:d7:af:c8:74:e8:7c:79:a9:29:15:3b:c8:8f:
6b:3f:7d:26:70:e2:44:10:4c:20:ff:f7:cc:12:cc:
40:de:dd:1d:ae:7a:44:87:bb:86:5f:3c:f9:c3:99:
02:af:28:78:8e:f2:74:6a:60:21:5f:06:37:c7:39:
7d:8d:b6:2e:af:0f:9d:f6:52:e0:b5:44:a0:10:cc:
ca:ce:54:2c:8c:d1:c7:ee:28:cb:c8:7a:85:47:60:
13:f4:13:ea:ec:23:11:58:8e:09:fc:61:e0:e4:7d:
ed:29:43:c6:ff:85:fa:30:a6:32:52:cf:83:0d:a1:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:FA:4B:D8:8E:58:75:9C:93:29:18:87:E2:3D:F7:30:22:D1:5E
X509v3 Authority Key Identifier:
keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:02:53:a8:64:f0:d0:84:96:8e:ba:d2:fd:12:4b:09:68:c5:
56:81:09:f8:f6:42:28:94:d1:70:d4:42:83:bd:a0:18:0e:ab:
ce:e6:86:d7:d5:80:a2:99:d2:f5:36:2d:a0:50:0f:a9:c2:03:
7c:3c:8f:04:bf:a9:da:27:68:94:ea:b4:75:a6:5d:39:b9:16:
e9:58:1b:d8:90:18:17:9a:fb:3e:27:5a:ab:c9:19:15:0f:c5:
6d:0e:80:7c:be:f1:b9:4c:7b:2f:7d:5e:08:7b:bf:69:70:5a:
05:83:4c:24:b4:90:85:27:33:40:5a:2d:3b:9c:11:b9:e9:c7:
27:f2:35:a0:ed:00:09:44:ac:76:2a:f0:12:2d:2f:32:12:3f:
4a:89:c9:fc:22:4e:ae:3a:9c:05:f1:8d:b0:b7:14:e5:12:1d:
a1:8c:b7:d1:1e:09:5c:3f:46:fa:cd:7f:ff:e6:d3:d4:24:c8:
4e:ed:4d:e8:48:85:67:cd:76:e7:74:d5:62:5f:4a:6f:ac:f7:
5d:a4:d5:94:d2:18:0a:cd:df:b7:95:bf:d8:37:a6:72:07:85:
fd:c3:33:8c:58:52:a6:58:bc:a5:1a:a8:db:3e:6c:db:6a:fd:
2e:25:f2:99:69:e2:cb:00:25:23:bc:6e:5b:b8:eb:f3:5f:5a:
4e:a9:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:12:04 2026 by rpki-client