
$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
File: AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json)
Hash identifier: v5iLUEWfIXQ60MPKV5QYHKFCvQN880x426C2mitfZhQ=
Subject key identifier: 6D:E4:25:79:E9:69:54:E4:2C:11:0C:77:8D:2F:8E:80:C7:88:AA:74
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
Manifest number: 027B
Signing time: Mon 02 Mar 2026 00:21:39 +0000
Manifest this update: Mon 02 Mar 2026 00:21:37 +0000
Manifest next update: Mon 09 Mar 2026 00:21:37 +0000
Files and hashes: 1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: QYdLOxMTDcP3y87Dido7qDZgH+C239DvcIF23KdnzQs=)
2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: LRYq0mPrjweqGJPSdcgLlt3nrjlK6fosCT9C7fklNuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Validity
Not Before: Mar 2 00:21:37 2026 GMT
Not After : Mar 9 00:21:37 2026 GMT
Subject: CN=69a4d813-ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:e7:0a:5c:a3:90:b3:26:d6:51:aa:a8:9c:
91:c7:ee:42:a0:38:f3:6a:5d:26:56:89:e4:21:32:
50:d2:01:0e:65:54:65:63:b0:bb:4c:b4:93:02:68:
95:b7:94:86:9d:b0:84:e6:12:83:e5:18:92:d8:24:
fc:29:9a:b1:e8:08:d0:18:86:c5:b7:cf:13:c0:d3:
90:5d:96:8f:62:e8:c1:b8:68:94:49:84:31:fc:96:
71:8a:73:ad:d6:5e:d7:7c:e9:07:6e:60:01:ce:2d:
6d:58:4d:04:e9:5c:13:36:0d:45:68:67:23:a1:8d:
0e:cb:01:9b:24:f2:fd:63:1b:c6:eb:b5:47:cb:f7:
92:6d:8d:a2:a5:2f:86:e2:b9:e7:ac:54:88:a2:d2:
4d:7f:3f:40:de:f9:fc:f0:9b:e2:74:1c:0e:1c:7f:
fe:32:4d:33:da:c6:18:78:8d:60:b8:ab:4c:c1:cd:
12:6a:ee:ef:23:36:13:e6:72:61:c6:9e:95:38:4e:
79:f0:7d:5c:14:31:36:cb:03:c1:70:4a:f3:c6:0f:
51:19:90:8e:40:e3:fa:fd:af:4e:26:38:91:e2:23:
fe:a9:ae:81:df:93:0d:d7:9d:19:1c:50:fc:0e:cf:
c3:bb:1e:e9:42:62:78:5f:05:23:41:b9:a5:90:29:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E4:25:79:E9:69:54:E4:2C:11:0C:77:8D:2F:8E:80:C7:88:AA:74
X509v3 Authority Key Identifier:
keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:23:34:72:6a:27:c6:a0:46:26:f0:81:aa:65:b2:83:96:c5:
19:81:a8:43:ff:f7:9c:18:99:ce:e3:6c:73:5d:9f:4d:88:a7:
ad:fc:76:4f:36:e0:71:d7:92:72:27:72:7d:ee:c9:71:b1:6e:
ef:a9:7d:fb:00:7f:b0:ef:08:8d:75:3f:8f:99:f4:17:23:20:
38:f1:6d:50:c0:17:fa:4e:ae:74:05:61:5e:f9:4c:fb:0c:28:
3d:70:5c:c1:60:9e:03:72:63:2a:be:15:77:a5:48:a3:fe:96:
69:71:c3:98:7c:53:4e:5e:0b:e0:56:24:20:2c:65:3b:85:3a:
c8:0b:08:3f:6b:69:81:30:13:6a:f8:12:5f:2d:0b:3d:5b:27:
cb:f6:d1:41:9b:b8:a5:b9:3f:08:cb:ac:78:11:bf:c0:e0:46:
13:83:d0:79:e4:b4:36:8d:43:2b:b6:19:bb:12:ca:13:3a:75:
8f:4d:c1:d6:b5:26:4f:0a:fc:24:ca:21:7a:32:68:21:2a:48:
49:11:22:3d:08:5c:a4:c4:b2:46:21:be:2c:72:70:c3:81:00:
16:e6:c9:cc:eb:77:5f:04:3a:7f:fc:d8:85:45:6c:0f:c0:cd:
12:d1:51:5e:6a:15:fc:49:28:8f:3a:d8:30:28:d1:d6:8f:09:
cd:60:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:09 2026 by rpki-client