
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json)
Hash identifier: SQaL0fOlKzNPPZPPAKgvql6dSH32XN0qzOfHgtcdQzc=
Subject key identifier: 53:EF:9D:AB:11:76:55:DF:09:3B:88:1D:7A:C5:E3:97:27:8A:BB:B8
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial: 1D0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
Manifest number: 1CEB
Signing time: Sun 01 Mar 2026 23:29:35 +0000
Manifest this update: Sun 01 Mar 2026 23:29:33 +0000
Manifest next update: Sun 08 Mar 2026 23:29:33 +0000
Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: m0wmgJcqgKwH0wwYUQK+hvGjtXuvmtXGeOhuQi2kECQ=)
2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: FVNSKaXDdy0CaXltkNWY4bF0klXSYM3BzCHdZ56uQag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7436 (0x1d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Validity
Not Before: Mar 1 23:29:33 2026 GMT
Not After : Mar 8 23:29:33 2026 GMT
Subject: CN=69a4cbdf-65cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:f3:6e:68:63:1c:40:dc:2f:e1:ae:92:10:
01:be:fd:42:2a:53:2a:1c:87:94:a3:ca:91:da:b4:
cb:5b:22:d0:21:b0:f8:11:a5:5e:2f:98:8a:94:34:
f4:df:1e:81:3e:24:27:5b:81:99:04:26:24:a4:dc:
1c:e4:a3:a2:1d:91:51:3c:67:90:a0:08:67:56:cf:
8a:2b:aa:47:56:a3:c6:c2:e8:56:3e:ee:72:ba:79:
91:23:11:40:40:b5:c3:57:8a:0b:5e:b2:68:fb:e6:
6e:78:a7:b7:a5:08:6b:8a:ca:b9:e9:52:6d:84:79:
e0:3e:a6:70:51:20:55:40:35:24:77:06:dd:3f:46:
87:b6:25:31:37:ca:51:2f:0b:94:c3:46:52:ee:8c:
5c:08:3e:83:17:4e:6f:66:4d:ae:08:31:a9:31:a4:
64:06:c0:c0:09:07:bc:be:21:26:12:49:d0:84:ee:
5e:eb:37:29:7e:68:06:2d:bf:ed:8d:83:6b:d9:92:
ef:f5:78:1a:17:49:fd:db:fe:bb:df:09:04:3a:4f:
62:39:e9:7f:de:39:35:b8:d4:31:c8:93:0d:36:8e:
de:63:82:bd:9f:ac:78:2a:3a:da:08:ec:d4:f9:52:
73:84:39:56:08:76:66:8b:ed:8a:9d:58:a7:ae:cb:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:9D:AB:11:76:55:DF:09:3B:88:1D:7A:C5:E3:97:27:8A:BB:B8
X509v3 Authority Key Identifier:
keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:85:7e:47:40:c8:dd:fe:1b:02:06:0b:d3:f0:bf:52:8a:61:
54:99:5b:34:b2:12:b5:e9:ad:6a:92:ef:27:1d:53:02:8d:d6:
4e:00:5e:c3:42:3b:d5:56:4b:f1:3e:1b:31:5f:30:71:51:e5:
38:dd:82:cc:bd:a8:0a:9d:aa:ab:51:ee:2e:af:70:26:93:13:
6c:72:43:1d:f9:e9:6e:74:41:c3:87:c3:8e:ab:2e:d0:38:69:
5d:b6:93:7b:52:a0:fa:58:35:8d:75:08:26:45:d4:34:26:f2:
dc:4a:b3:6a:ef:a3:15:2e:89:cc:38:72:5e:1c:0e:e5:cb:32:
10:b8:12:3c:3f:59:b6:09:c3:8d:2f:0a:dc:2c:9c:e8:df:aa:
bd:03:cd:c5:90:d9:1c:6d:5c:f3:8b:d7:b3:d4:38:d1:48:96:
ec:ba:01:59:1b:87:1e:f4:74:61:17:1e:1a:a3:86:8c:90:6b:
de:49:f2:8a:32:67:60:1c:ba:1f:3e:51:fc:65:b0:18:5e:93:
d3:b0:18:4e:3e:9c:de:d5:c7:16:bc:7a:0f:58:fb:4f:1a:90:
f1:21:98:63:05:ed:3a:3a:62:63:3b:89:03:b6:8a:98:48:8c:
67:08:6b:93:ba:49:ab:93:61:91:86:24:9c:fe:fd:15:94:07:
71:7f:83:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw
NkYyRkVFMjQwHhcNMjYwMzAxMjMyOTMzWhcNMjYwMzA4MjMyOTMzWjAYMRYwFAYD
VQQDEw02OWE0Y2JkZi02NWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArw3zbmhjHEDcL+GukhABvv1CKlMqHIeUo8qR2rTLWyLQIbD4EaVeL5iKlDT0
3x6BPiQnW4GZBCYkpNwc5KOiHZFRPGeQoAhnVs+KK6pHVqPGwuhWPu5yunmRIxFA
QLXDV4oLXrJo++ZueKe3pQhrisq56VJthHngPqZwUSBVQDUkdwbdP0aHtiUxN8pR
LwuUw0ZS7oxcCD6DF05vZk2uCDGpMaRkBsDACQe8viEmEknQhO5e6zcpfmgGLb/t
jYNr2ZLv9XgaF0n92/673wkEOk9iOel/3jk1uNQxyJMNNo7eY4K9n6x4KjraCOzU
+VJzhDlWCHZmi+2KnVinrsslUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPvnasR
dlXfCTuIHXrF45cniru4MB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0
NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH
WUxSckVSMnRWOVlHOHY3aVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALIV+R0DI3f4bAgYL0/C/UophVJlbNLIStemtapLvJx1TAo3WTgBew0I71VZL
8T4bMV8wcVHlON2CzL2oCp2qq1HuLq9wJpMTbHJDHfnpbnRBw4fDjqsu0DhpXbaT
e1Kg+lg1jXUIJkXUNCby3Eqzau+jFS6JzDhyXhwO5csyELgSPD9ZtgnDjS8K3Cyc
6N+qvQPNxZDZHG1c84vXs9Q40UiW7LoBWRuHHvR0YRceGqOGjJBr3knyijJnYBy6
Hz5R/GWwGF6T07AYTj6c3tXHFrx6D1j7TxqQ8SGYYwXtOjpiYzuJA7aKmEiMZwhr
k7pJq5NhkYYknP79FZQHcX+DXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:52 2026 by rpki-client