
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
File: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft (raw, json)
Hash identifier: Mzu8CUdPS4SHRbIS4V9o/poUqdDTQgklvdfrCxqvMxg=
Subject key identifier: C6:E3:CE:87:5B:4C:6E:8C:D2:07:6A:D0:9D:AF:52:41:A2:A8:79:72
Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Certificate issuer: /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
Manifest number: 72
Signing time: Sat 19 Sep 2026 07:58:30 +0000
Manifest this update: Sat 19 Sep 2026 07:58:30 +0000
Manifest next update: Sat 26 Sep 2026 07:58:30 +0000
Files and hashes: 1: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl (hash: t180Ozz9jEmQNR4My+lONMgyT6p9N/HtTQKL6NFA2ZM=)
2: 9ABBE50C0DFD11F18537B598053D8C67.roa (hash: B/TqzACGEfySc+XaR76BsEZga/Tqj8LPu2hT0skPKbE=)
3: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (hash: hWKKvsTt7zCxD5Fv8v2sGwk7XoSlQUlgVYDrraM8C1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 07:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Validity
Not Before: Sep 19 07:58:30 2026 GMT
Not After : Sep 26 07:58:30 2026 GMT
Subject: CN=6aae40a6-2d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:11:8e:b3:03:29:31:4c:b4:9b:11:11:34:
01:e9:b7:8e:9a:6c:f4:4e:d7:b2:24:d7:0b:74:34:
70:9f:1d:15:00:e0:fe:a8:2a:e9:9e:de:ed:ec:df:
3c:e3:40:b2:36:22:8c:1b:b7:5b:0f:ba:b5:40:c0:
82:fa:e2:08:ef:d1:fb:77:68:9d:94:6a:d5:1a:f5:
e4:77:3c:5f:74:2f:97:f0:23:02:7c:b6:66:f0:e3:
30:ea:b1:7f:a1:1b:e2:07:f3:03:58:32:35:18:d6:
46:f0:a9:a5:72:04:67:07:d3:7c:6f:8a:f7:ce:b5:
56:bf:6e:55:cd:d8:af:97:70:03:3d:99:b5:ec:35:
2f:fe:1b:e9:d5:a5:5b:67:ea:92:48:ce:25:de:ae:
78:d0:8c:71:c9:79:89:19:95:be:e9:5a:dc:0e:82:
94:6e:bd:d1:dc:d5:03:52:c6:09:e0:8c:02:3d:e1:
0a:5e:69:dd:67:ea:98:d5:20:0b:a3:b3:e3:56:e3:
52:32:e8:bf:bb:f7:89:3d:24:f9:f4:92:e2:92:a3:
bd:5b:9c:4d:52:64:7a:19:a4:3f:13:65:39:b1:55:
e2:f7:10:8b:9b:45:72:42:60:fc:5f:3e:ff:1b:a0:
93:cf:f0:51:c2:45:be:17:cf:ca:c4:98:ba:9e:3a:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E3:CE:87:5B:4C:6E:8C:D2:07:6A:D0:9D:AF:52:41:A2:A8:79:72
X509v3 Authority Key Identifier:
keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:df:e7:6d:1e:d5:fa:13:68:3b:4c:9a:ea:f3:55:c0:45:ed:
ae:2b:b6:ff:73:d4:bb:b5:09:01:75:f8:7d:34:18:b7:c4:f7:
4c:52:5c:da:b0:0b:b4:7f:2b:70:d2:a5:b4:4a:19:68:f8:ff:
44:ee:a5:08:34:23:54:d3:4d:97:fe:d9:ee:cc:cc:40:bb:16:
ca:53:3c:66:ff:19:7e:5d:31:bf:db:6f:97:ef:ac:69:ee:43:
8c:99:18:d4:8d:bb:8c:93:04:14:2c:54:10:85:3c:ab:f5:92:
93:1c:8f:1e:5e:69:c7:8a:9e:49:35:4f:00:e4:96:e9:c8:17:
02:af:ad:f0:de:d0:35:e5:7f:0f:b9:06:d9:93:39:a7:dc:a7:
a7:12:ad:c0:49:22:32:00:45:7c:53:81:f5:6e:95:62:28:e4:
d5:bd:57:1a:62:06:b9:ad:7c:47:0c:ea:e9:5a:2e:eb:92:fa:
80:08:47:07:a5:49:02:a2:6a:1d:df:a6:a4:84:ac:3b:46:5c:
9f:08:2d:d1:be:f7:9e:15:09:ce:e2:c8:7c:21:68:ff:79:b4:
5a:42:83:71:e0:0e:32:68:8b:66:c8:b7:b5:24:77:47:fb:a7:
f7:5f:88:19:05:ca:65:48:e0:70:6c:79:4c:82:fc:05:3a:e6:
1a:88:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:35 2026 by rpki-client