
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json)
Hash identifier: r2GBQaMPbdHibLJbTMhI69Sya9LNLIr5keN/KdGECKw=
Subject key identifier: C5:83:83:AE:F0:2E:C6:27:23:67:8A:7D:CF:AC:B4:5B:14:FF:DF:EB
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial: 1D7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
Manifest number: 1D5A
Signing time: Sun 04 Oct 2026 16:08:42 +0000
Manifest this update: Sun 04 Oct 2026 16:08:42 +0000
Manifest next update: Sun 11 Oct 2026 16:08:42 +0000
Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: OZ21VSUZMjTXYzGZbFYqJbBedh5VOCljDqweu3N7+hc=)
2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: FVNSKaXDdy0CaXltkNWY4bF0klXSYM3BzCHdZ56uQag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7547 (0x1d7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Validity
Not Before: Oct 4 16:08:42 2026 GMT
Not After : Oct 11 16:08:42 2026 GMT
Subject: CN=6ac27a0a-04ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:40:74:6d:9f:6b:d2:5d:f2:44:db:8d:9f:
16:7d:c5:ca:20:ce:82:19:8b:a8:70:e5:fa:0b:ec:
9e:42:6a:a1:01:7a:cc:27:ad:72:55:5d:24:5a:eb:
68:bd:dc:bc:80:0b:65:93:e5:3c:b1:af:30:67:86:
39:0c:8a:13:99:e1:7c:18:65:0c:21:2a:57:33:c8:
02:33:55:1f:dd:2f:5f:1a:0d:0e:fd:95:aa:ec:de:
82:c4:30:ad:33:2d:8f:dd:09:24:fc:db:68:85:ba:
7e:cc:94:ed:a7:af:28:8c:43:0a:4f:43:ea:a5:31:
83:f9:1c:f6:f7:87:64:db:11:9c:d8:19:8a:27:4c:
a0:1d:85:e7:a7:b1:55:fc:55:cd:58:8d:16:77:27:
f8:4d:9b:0c:b0:e6:cf:96:28:b6:b3:40:8d:e2:cf:
b2:e5:e2:19:66:e9:33:1d:e7:88:3a:69:7c:28:fc:
4e:c5:56:48:3a:8d:d4:3a:15:d1:bd:59:e3:e6:9b:
95:5b:7b:96:30:1f:c5:ee:b9:51:cd:12:21:7a:fb:
f5:19:86:7b:b5:46:91:fb:f5:db:cc:fa:d6:d8:e0:
64:9c:09:ea:b9:9b:37:66:c4:31:98:10:ab:df:b2:
de:21:1f:6d:44:af:9a:56:33:54:0c:7a:83:d0:1c:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:83:83:AE:F0:2E:C6:27:23:67:8A:7D:CF:AC:B4:5B:14:FF:DF:EB
X509v3 Authority Key Identifier:
keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:ef:b8:07:6a:67:45:2c:f6:46:0a:1b:e2:6b:7a:67:df:
fc:3f:0f:79:f4:eb:1c:8a:ab:0e:c3:a8:ed:82:0a:b2:eb:8d:
23:2a:b9:09:ea:cb:4b:be:86:3b:d8:8e:e3:ae:cb:99:2b:ff:
37:38:a8:32:b8:98:10:45:c5:ad:4e:47:e3:ce:8e:e4:45:81:
8c:96:65:91:5e:b9:7e:b8:9d:7a:ae:ba:09:6f:a2:6a:42:91:
76:28:ed:84:df:e1:78:9d:57:f7:d6:cf:bd:af:d5:52:e0:7b:
7b:82:82:5d:fd:3e:02:75:f5:02:22:d6:cc:85:57:b3:e3:f7:
66:ef:0e:3e:b5:06:e7:17:97:b6:91:13:73:e8:b5:cd:65:e9:
2f:57:6f:61:f4:20:55:db:95:e9:20:81:4f:78:71:f3:c0:6c:
32:cc:96:34:95:ec:80:d1:2d:40:f6:2f:05:bf:56:65:22:e0:
8a:e7:23:55:fc:22:83:56:74:09:35:fa:f2:f2:5f:84:7a:fe:
e1:bb:3b:58:11:e4:09:1f:21:36:4e:e4:7f:c5:bd:68:b8:61:
81:b7:d2:70:47:3f:96:d8:19:bf:4d:8a:af:54:91:8e:5b:c6:
39:ea:b8:53:46:7d:32:76:6c:d1:82:fd:c5:a1:64:16:f5:72:
ec:73:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:49:10 2026 by rpki-client