
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier: O14TdDkZT0p4D9Gko3VUzUpbAOzYLEFKOyUgKAJhgxE=
Subject key identifier: 7A:CD:6E:CA:B4:0B:95:9B:86:DA:4D:9F:2F:44:62:70:D0:B8:EB:12
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 060E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number: 05F9
Signing time: Sun 20 Sep 2026 22:49:21 +0000
Manifest this update: Sun 20 Sep 2026 22:49:20 +0000
Manifest next update: Sun 27 Sep 2026 22:49:20 +0000
Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: VAlqE1XKZe5X2lNWAb8sSawPkIhY4ivGr9H2O89Mhyk=)
2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Sep 20 22:49:20 2026 GMT
Not After : Sep 27 22:49:20 2026 GMT
Subject: CN=6ab062f1-60e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:92:79:90:9e:43:35:97:3e:fd:33:d2:f7:
3c:8c:f6:a0:57:64:66:5e:18:a6:a3:84:86:6e:c7:
8f:d6:d2:88:7d:a1:15:c7:13:8d:b7:61:ec:68:f1:
9f:71:3f:a3:73:24:6d:10:e4:e9:57:58:58:76:78:
1a:86:d1:1b:7f:1b:52:c5:09:fa:66:b5:51:b1:7c:
f6:b3:46:58:23:8b:9a:df:3a:a7:eb:27:db:3e:41:
42:5a:8c:d7:6c:3e:b5:d8:8e:48:f8:d4:ec:1a:b7:
79:cf:40:fc:cf:02:23:ce:96:e6:c0:a4:7d:30:bf:
98:0d:2a:6f:cb:45:f0:c3:33:00:8c:15:8c:9d:16:
0b:f3:56:90:0d:b4:58:57:00:74:7f:43:c1:4c:84:
13:5c:07:97:f5:f2:3f:39:8b:69:ae:da:ac:09:82:
a6:28:1a:66:6c:d3:b5:33:f8:49:59:13:7a:68:53:
9b:8b:17:91:5e:ba:c0:c7:bb:e5:e9:be:35:bf:c3:
3f:0c:e9:65:32:cf:7f:6d:28:8d:a0:e1:7d:fd:c2:
10:e8:78:4b:b7:ad:cf:e7:03:f9:f6:c2:f4:87:a2:
2a:d4:5f:09:cc:79:0b:2f:3e:b9:40:ef:13:61:52:
05:63:ae:98:20:00:6b:a2:7c:2f:52:ff:34:a9:18:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:6E:CA:B4:0B:95:9B:86:DA:4D:9F:2F:44:62:70:D0:B8:EB:12
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:6a:bb:ed:3d:07:d3:22:ba:95:9b:4c:39:84:be:57:44:1a:
84:40:1e:cc:28:fa:35:3d:ae:f5:51:97:4a:82:d0:f5:85:71:
95:62:53:1c:d8:9f:f4:a8:0e:aa:f9:af:14:a1:ed:c3:ef:df:
70:84:3a:5d:7d:00:9b:13:6d:7e:3f:aa:ec:cb:90:ea:78:cb:
be:57:46:48:7a:98:4e:42:b1:e9:98:29:02:a7:4d:7d:cc:0a:
f4:39:38:f1:90:16:94:b3:16:ef:b0:f9:10:91:85:4f:81:a2:
51:5a:8f:99:e2:04:2f:4d:2f:2a:28:b2:d8:b5:ff:8d:4f:14:
1a:4f:f9:5c:48:6c:eb:29:28:3a:66:59:50:a2:f8:a1:e8:47:
94:a1:cf:23:b0:2b:3c:1f:4f:7d:df:d6:b1:e6:a2:33:de:1a:
72:a2:bf:5c:0f:ed:96:70:ce:90:29:d7:5d:37:32:c4:be:e1:
78:1d:3a:e8:be:5b:d3:d1:0e:c1:0c:83:6b:33:8e:a7:10:ef:
87:65:b4:92:46:37:27:4a:32:1d:aa:8d:03:b2:97:e4:10:bd:
00:5d:bf:62:fe:af:bd:8b:9e:b6:5a:06:35:8b:44:55:08:5e:
35:ac:98:cb:fd:41:7c:93:51:b8:af:21:b5:c3:11:15:9b:21:
6a:3c:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:20:23 2026 by rpki-client