
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier: Af437GRyWnMWq319+3fHKk+ZWlgTCsovgq5g7ce/P24=
Subject key identifier: 0A:8E:37:C6:F4:B9:97:B3:C0:22:69:74:E0:9D:89:36:A0:55:C8:61
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 0742
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number: 06F5
Signing time: Tue 22 Sep 2026 22:07:44 +0000
Manifest this update: Tue 22 Sep 2026 22:07:43 +0000
Manifest next update: Tue 29 Sep 2026 22:07:43 +0000
Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: RNTTqjIMaAbvY1DroM8GMFo9uSrhZFIMVQDUOTSyqzc=)
2: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: g+Gj7U1+efQL3hqCetjfGn6GeGSvm7QivUZN+eVJ75c=)
3: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: OIMoYuOlDFIxnQLjJwwfFn81y6oP24XgHKLcwV1zvZk=)
4: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: TqJzuidUjyyQb1G7wiFhjyqX67oOjt0bf49SD3Yyr2c=)
5: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: gxgtsWBnEAP6vapnZK0uqNLpyymktd5A/5L7ecDmBUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Sep 22 22:07:43 2026 GMT
Not After : Sep 29 22:07:43 2026 GMT
Subject: CN=6ab2fc30-2715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:ac:e8:63:86:64:10:16:71:3e:69:19:3a:
e7:61:61:a5:61:6d:d4:90:53:37:a1:7b:1a:45:a2:
c1:d9:bf:5b:9a:5a:e4:8d:2a:33:89:b0:32:5d:56:
d5:17:79:55:49:0b:ba:35:9d:29:9b:cc:67:49:be:
a2:f3:d2:43:9d:f2:d7:3b:a7:c3:20:34:af:7d:8a:
02:9e:ff:19:0d:99:c4:11:d1:22:2a:a3:26:6e:55:
65:b5:e1:cc:03:c6:6a:8e:98:e1:c0:35:ad:8e:de:
e4:1f:81:09:09:81:5b:70:1c:71:cc:fc:1f:13:23:
5c:ba:cc:4c:7f:2d:1a:c3:76:2f:ab:e5:1d:f3:fe:
62:24:74:08:5b:c8:01:ea:bc:b1:00:eb:1f:1f:f0:
dc:66:9e:44:d5:d4:69:af:b6:c5:ba:d3:ab:5b:9b:
de:61:4d:da:9d:53:5f:a6:f1:70:c5:0b:2b:a9:ee:
cf:a3:b4:e4:6f:2f:ff:bd:c3:5f:4f:88:31:6b:f1:
71:5c:db:e2:b0:1a:6b:3d:57:f2:74:7a:a4:f5:dc:
fc:d1:a7:0b:df:a9:c4:95:d0:e4:00:73:9b:cc:ce:
d1:33:8d:71:3a:a0:09:c5:75:43:4e:db:1e:2b:2e:
26:70:39:3f:55:df:84:35:65:57:7a:57:41:b2:41:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:37:C6:F4:B9:97:B3:C0:22:69:74:E0:9D:89:36:A0:55:C8:61
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ca:5d:46:53:ac:34:3f:2f:fd:6c:f5:b0:ae:31:07:bf:73:
f4:c3:fb:b0:f8:ae:41:b4:08:4e:38:3d:d8:33:ec:00:e0:16:
90:b6:89:92:40:fa:07:5d:00:29:4e:e3:7d:d2:91:13:59:5a:
8d:db:ad:99:96:8a:44:17:2b:87:fc:01:7e:97:49:3f:2d:74:
9f:9a:c0:2b:a8:a6:90:ae:91:68:a3:4b:e2:49:ab:45:9e:3e:
b9:f6:98:f3:a9:1c:b6:f7:55:aa:4d:26:22:4e:e9:db:dd:79:
35:3e:37:1a:3b:fd:1e:6c:f1:1d:e9:28:e5:35:8f:0e:76:c6:
a5:3d:71:d8:36:e2:8b:69:08:ae:8e:f3:bd:58:79:16:d8:d1:
07:33:9b:3e:4a:dd:45:da:6d:6f:37:25:4d:e0:6e:15:86:86:
13:ad:89:ac:8b:f9:08:2a:c9:c5:c7:02:3f:ad:ca:43:ee:1f:
9d:53:97:eb:81:b4:ef:8f:18:9e:ca:84:2c:c5:0b:01:2c:56:
65:e0:cc:86:cc:22:a2:6f:1e:66:ed:97:e5:8d:0c:9f:d3:78:
c2:5e:f7:e8:c0:95:be:e8:06:af:22:af:1d:c5:22:ef:91:57:
93:cd:bf:53:cb:69:66:be:0d:b4:97:42:d1:f0:d2:4d:30:1e:
e8:d8:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:03:12 2026 by rpki-client