
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier: z1MKB0zQM8F0+b6KnzPJjdY0uBVZvxZjz3IFWIOX63I=
Subject key identifier: 48:3C:37:2D:E2:94:5E:A0:EA:82:EE:D4:38:5F:18:B4:C7:80:5B:FC
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial: 081B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number: 0810
Signing time: Mon 02 Mar 2026 00:32:42 +0000
Manifest this update: Mon 02 Mar 2026 00:32:40 +0000
Manifest next update: Mon 09 Mar 2026 00:32:40 +0000
Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: Et8OmROo8aHeI59NyiJv8A4jSri+QKoqAUmneL5yqlQ=)
2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Validity
Not Before: Mar 2 00:32:40 2026 GMT
Not After : Mar 9 00:32:40 2026 GMT
Subject: CN=69a4daaa-3e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:96:78:34:2e:5c:c2:2e:e7:dc:83:cc:a4:
27:3c:c7:52:9b:88:76:e9:ba:bc:85:15:a2:32:9a:
b2:e6:bc:58:9c:a1:49:c4:78:6f:1d:91:d8:6f:0a:
2f:25:c2:ab:f6:ee:ef:ba:fb:02:28:1c:c5:f0:ea:
41:d0:c0:29:60:ff:18:81:56:59:f6:88:5e:17:44:
bb:fc:05:1d:bf:74:01:f2:dc:0b:b1:39:1d:b8:dd:
f4:dd:b9:9f:c0:4f:ce:f1:41:a6:a0:46:6e:44:b2:
3b:58:4f:7d:a5:f2:9e:14:f3:0b:3d:83:ca:09:e5:
d3:83:d5:91:9f:5f:45:47:aa:f2:9b:8a:32:dd:e1:
cf:b9:a7:52:19:d3:c2:ea:a7:c0:11:55:60:43:c7:
8a:e4:fa:5c:7c:af:38:3e:5b:ad:15:0f:ac:eb:a9:
c5:56:ab:80:b8:45:15:86:8b:f5:5d:42:6e:10:26:
63:ba:40:30:53:28:d7:1a:86:51:38:1f:7e:bb:e2:
32:6b:dc:fb:62:57:00:30:08:fc:1a:c1:3e:c9:94:
a4:19:01:17:95:2d:eb:95:0a:11:17:a9:04:7b:e7:
84:14:c0:7d:91:85:fe:45:16:8d:7c:1e:da:e2:44:
db:34:fe:c9:c2:7f:72:cc:4b:6c:64:3c:04:74:0b:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:37:2D:E2:94:5E:A0:EA:82:EE:D4:38:5F:18:B4:C7:80:5B:FC
X509v3 Authority Key Identifier:
keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:6a:d4:e6:3c:7c:a3:27:eb:9a:93:24:31:fb:06:a0:cb:3b:
80:bf:8d:cc:d4:76:ec:69:31:f7:47:61:77:b0:4e:a8:b5:ae:
34:ef:6d:4b:a0:6f:fc:9b:18:37:37:7e:c9:42:b8:2d:1d:2f:
e6:f1:db:bc:39:75:b6:2c:5d:9f:ab:4f:d7:19:01:bb:5e:c8:
e0:a5:2d:45:1b:8c:28:1d:4b:e8:4a:2f:aa:23:e0:90:6d:9d:
7c:49:df:32:7d:04:6f:39:78:6c:72:d3:d7:b7:3e:c1:5e:ae:
80:31:e1:9b:70:a0:bc:4c:bd:b8:7b:ca:82:c5:b0:db:d7:9b:
e3:67:02:b6:43:f8:cb:26:a7:a9:1e:6e:c2:f4:bf:a2:94:a2:
e9:37:cc:d9:c1:8a:01:6d:56:30:84:dc:32:bd:47:e5:ed:2b:
c2:c3:39:e6:80:e9:e2:48:ce:f1:d3:90:17:d1:42:49:04:33:
f8:b4:58:07:ea:d1:7f:56:a7:cd:8b:43:5b:5a:0a:67:93:68:
7b:9b:2d:76:8d:ca:c6:44:f1:2d:f5:cf:bc:b3:8e:f9:cf:ca:
80:f0:9d:11:09:01:f9:13:81:01:37:32:21:b4:c3:53:34:1b:
a9:f0:99:c1:57:f6:69:9a:2b:2d:86:e8:c0:4c:da:2a:d1:3d:
2b:c7:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:09:21 2026 by rpki-client