
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier: UeX7WWv3fO5/WOVRHJ/vyXzNgFrkcFGVfqvnVdI9BqY=
Subject key identifier: 8A:60:F4:94:00:F9:B3:0F:1F:FF:2C:83:BB:C5:94:69:19:EF:84:77
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 05F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number: 05DC
Signing time: Sun 26 Jul 2026 23:56:36 +0000
Manifest this update: Sun 26 Jul 2026 23:56:36 +0000
Manifest next update: Sun 02 Aug 2026 23:56:36 +0000
Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: +d3vAzHHhHLZhsipHDCPZo8gRWMzUeaHQ/zivNvHOj4=)
2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1521 (0x5f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Jul 26 23:56:36 2026 GMT
Not After : Aug 2 23:56:36 2026 GMT
Subject: CN=6a669eb4-0e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:5d:12:96:5a:57:b0:bc:5f:72:53:3d:c9:
79:84:16:cb:3f:8b:06:36:e7:9c:ff:38:71:2f:b9:
e5:d1:75:34:68:58:ed:8e:d9:dd:fe:47:ed:ab:94:
00:3f:f7:9e:9f:09:cb:2a:15:53:00:73:9b:2d:f9:
18:59:aa:2d:7c:8b:a0:61:d7:fd:bb:b1:3b:d2:41:
d9:a8:5e:bd:67:7a:37:7b:4c:9e:0e:16:0d:36:c3:
07:bb:d8:6b:bb:86:12:f8:2b:55:46:9c:96:8d:ce:
f5:ca:bf:6e:c6:e3:62:d9:3c:44:91:f0:89:be:79:
e6:35:db:82:a4:ee:c7:bd:cd:2e:4c:aa:e7:8b:2a:
b4:ae:d8:ad:4b:d4:e6:e6:b1:7c:8c:2e:71:c0:6c:
6b:ec:d4:da:9b:22:cd:bf:88:11:db:8e:28:4d:50:
65:cc:0e:bf:1a:25:63:92:be:ad:81:1e:44:49:02:
70:d9:e4:c1:61:d5:ca:e1:12:df:c4:e2:6a:cd:4f:
bb:3b:b9:c7:35:b1:fe:bf:ef:69:90:a0:46:d2:2b:
ef:ff:3a:48:fd:06:15:ae:aa:51:a1:10:ca:39:17:
d6:73:4d:c7:bd:57:9f:45:f4:e3:e4:e7:23:c4:64:
0f:6d:29:a5:e2:23:7e:96:c9:70:38:26:7f:03:00:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:F4:94:00:F9:B3:0F:1F:FF:2C:83:BB:C5:94:69:19:EF:84:77
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d0:1c:c0:37:a2:35:b2:87:6a:dd:f2:24:9c:3c:27:95:65:
19:a2:f1:ec:fe:c3:8f:dd:00:c7:68:35:21:92:e8:f6:52:d6:
5b:8e:3a:67:a8:f0:46:04:a1:20:51:5f:75:e2:38:cd:bc:95:
6f:f8:18:42:95:5b:a4:b6:85:b7:3a:e5:4e:e5:82:4a:0d:31:
8f:50:56:65:64:50:cb:df:71:83:6a:fa:1b:85:7b:0d:5b:c0:
2f:5f:9d:c4:cf:02:74:1e:8a:cc:c2:4f:03:08:c6:80:5d:fa:
67:fe:7c:8a:7a:5c:bd:ec:44:bd:34:7e:65:6a:a4:47:d2:9c:
bd:f2:88:13:bc:af:b9:c6:2c:62:1f:87:81:77:34:80:90:f5:
c4:d6:be:de:bb:f4:d4:48:d9:2f:28:45:34:d1:a6:2c:e4:74:
a9:12:aa:0d:ca:21:35:27:50:4b:9a:e2:7e:6d:bd:f8:37:0b:
30:99:5e:1e:26:9a:86:d4:9d:19:a2:c5:07:98:94:4d:62:26:
cc:c9:60:82:74:a9:2d:79:6f:c8:34:87:f6:5d:e6:db:ed:b0:
33:26:48:b2:77:54:8d:ad:bb:4d:be:27:16:5e:18:7e:3c:80:
18:c2:fa:e2:e7:a1:2e:af:1c:67:91:31:c8:7b:64:4f:2c:10:
8c:1f:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:37 2026 by rpki-client