
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier: sSMKCXHnquq9ny47RJmFiKIqM1e3bV85FXiUBmFCcSo=
Subject key identifier: 9D:CF:01:5A:8D:05:5E:18:63:B1:9D:64:FE:AE:C2:A7:1A:4E:47:3F
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial: 0F63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number: 0F50
Signing time: Tue 28 Jul 2026 17:40:11 +0000
Manifest this update: Tue 28 Jul 2026 17:40:11 +0000
Manifest next update: Tue 04 Aug 2026 17:40:11 +0000
Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: SFUIXmXD64DD6wlqVx0wfTLY71lE90nBNsGIzZoua54=)
2: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: BXSVEWRNWk6Z5rdKJ6F8tnumvM/u/16zJocy0sihtdo=)
3: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: CJcOsAsRwI2HXjgfMv8XqLziZucuo7uRUTz3QROpN9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
Validity
Not Before: Jul 28 17:40:11 2026 GMT
Not After : Aug 4 17:40:11 2026 GMT
Subject: CN=6a68e97b-11e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:c9:9c:0e:c6:7d:76:3d:c4:32:44:5e:19:
23:f6:29:f7:cb:8d:6c:a4:a5:5f:a5:3f:26:68:cb:
8d:fa:8d:ce:86:75:19:a7:ad:5e:e7:ed:ae:4e:56:
c7:c4:2e:31:9d:c3:f5:ec:0a:f6:d5:34:84:c8:31:
d0:ff:f5:31:b4:8c:cf:ac:26:1c:f7:dd:d2:d1:42:
43:96:bb:82:60:de:c7:aa:ea:29:44:0e:87:66:5c:
4e:2e:0c:73:c8:a3:57:a8:e7:c8:1b:bd:99:7e:56:
a8:7b:62:35:a2:3f:90:84:6e:1f:b5:5d:fd:bf:d4:
28:64:9b:2d:11:da:a4:21:38:ca:39:0c:64:52:0b:
85:4a:5d:10:f9:c3:15:36:66:8b:a0:0b:95:76:bc:
a5:ac:9f:55:ba:4e:c4:bc:8f:fe:25:64:09:97:a7:
21:ed:c8:a8:ca:fa:42:9e:e0:93:00:23:aa:bb:76:
fc:6a:b7:19:97:c1:f5:4a:f6:7e:80:b2:56:c3:47:
3e:2d:ac:65:53:1b:4f:cc:32:fd:18:e3:8d:a0:d9:
0b:47:6d:0d:be:78:c0:15:41:a7:a7:78:8a:ba:74:
9a:c3:ea:8e:60:cc:02:cc:8d:25:a9:ac:9a:a0:ae:
b6:48:50:9e:82:f5:fa:bf:78:dc:e7:79:c2:e3:88:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:01:5A:8D:05:5E:18:63:B1:9D:64:FE:AE:C2:A7:1A:4E:47:3F
X509v3 Authority Key Identifier:
keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a3:7a:93:1f:aa:aa:84:58:92:a6:24:0a:11:35:02:ed:bb:
6b:3e:40:f5:d1:2d:ac:7a:97:7c:a8:c6:85:76:55:c8:2c:79:
c3:d7:b1:12:bd:34:17:fb:4d:b6:e2:f8:ef:3b:c0:4b:18:8e:
1f:b7:d3:8f:42:05:ba:1b:3b:47:60:b1:47:79:7c:bc:a9:86:
12:f8:b4:ad:f2:90:b0:a3:90:09:b7:1b:d7:a3:63:f6:0c:b7:
a0:54:42:af:1e:39:8c:cc:f3:83:6b:f1:10:5e:0b:11:6a:59:
0f:33:26:78:7e:9d:04:19:c5:4f:85:c0:2a:76:8a:8c:2b:58:
2e:8a:6d:b9:b0:24:89:a6:23:5e:de:3d:7c:3f:0d:8c:34:47:
27:b4:dd:73:08:ea:d4:69:51:7a:6b:12:df:d5:aa:22:4e:dc:
9c:98:0d:c2:73:51:43:af:f8:50:16:75:ad:9a:6c:6e:c3:f0:
8f:cb:1a:8f:e5:7e:fe:1a:60:c4:51:54:21:61:aa:b1:de:0c:
37:88:2d:d6:ba:25:24:23:dc:b1:bf:4d:a1:7c:3b:95:27:b5:
bf:f6:91:00:69:21:51:42:89:d8:ff:4c:f8:86:5f:74:f0:19:
99:51:86:a5:6e:b0:5b:76:02:1e:a6:32:c4:ea:53:c7:b5:bc:
cd:cf:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:51 2026 by rpki-client