
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json)
Hash identifier: TQ/zD0JbfMnk3X/mIFXLxuu2yyZkhHnDBHmO7dJ+ans=
Subject key identifier: E5:18:1F:41:6F:9A:5D:C8:FD:81:02:71:4F:4F:57:86:C8:1F:91:D4
Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
Manifest number: 0419
Signing time: Wed 29 Jul 2026 01:04:30 +0000
Manifest this update: Wed 29 Jul 2026 01:04:29 +0000
Manifest next update: Wed 05 Aug 2026 01:04:29 +0000
Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: 3sCahE67VgfQSJBI5gRRXc7Z42nZuV/otWnqUSbkHis=)
2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: psNUn0KVy8LcXg75lwX0oEYThtl+Fy/xxsSylBXFzFo=)
3: 2678DE4275A011F1A0FDA4E35BA30FBC.roa (hash: HO4c9apAU+SF4J/bcSAIOWLgnk4/jkKppRJxjoUD8Lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Validity
Not Before: Jul 29 01:04:29 2026 GMT
Not After : Aug 5 01:04:29 2026 GMT
Subject: CN=6a69519e-fa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:47:ae:95:c3:c5:5a:15:a5:f7:35:58:78:
5d:ae:76:1b:2d:1f:84:fd:3c:2b:27:e3:f9:7f:88:
b3:02:5b:be:88:dd:7e:33:f8:3a:8e:89:92:06:c6:
58:98:94:11:57:b7:da:c6:fe:7b:89:21:71:14:f1:
58:05:7e:aa:55:4b:fb:d9:1c:d9:c2:f7:0d:c9:92:
a3:84:0e:95:cb:23:12:e0:d1:f6:19:c6:fa:42:45:
26:bf:44:a7:59:32:ec:d9:fb:00:80:9e:05:05:d4:
fe:31:1c:5e:cc:ef:82:8e:4e:1e:26:d1:29:42:c1:
96:58:96:c8:c2:63:dd:3e:50:27:41:fc:5d:f1:21:
a8:84:cc:0c:b7:d3:60:3e:4e:b8:4b:71:52:46:a4:
f8:60:a6:ea:ea:dd:08:55:85:77:7a:13:96:75:2a:
f5:15:67:d2:ff:db:ae:10:d9:cc:cb:5b:d2:45:51:
6f:3d:c1:ea:94:89:f5:c7:f7:bb:f5:30:8b:9c:0e:
7d:ca:7c:94:44:a5:fc:c0:71:bc:25:92:da:f2:7b:
07:a6:5d:17:2d:66:93:f4:d4:b8:77:45:d1:fd:2d:
10:7d:56:8b:bc:7c:9a:e2:16:82:41:36:6e:d5:f7:
5c:e5:a5:c9:2a:09:d1:b0:99:93:78:32:db:69:d1:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:1F:41:6F:9A:5D:C8:FD:81:02:71:4F:4F:57:86:C8:1F:91:D4
X509v3 Authority Key Identifier:
keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:ce:47:b8:a7:f8:0d:0c:21:8e:ed:00:30:2b:f1:73:d1:fe:
b9:c3:54:2d:00:90:e3:17:64:ca:a6:ba:71:79:ad:b8:b5:7d:
d9:19:97:13:07:4e:e1:31:da:d9:7a:71:ef:b3:ec:41:29:39:
df:be:61:75:fe:de:8a:0e:2f:14:46:19:98:a2:ce:04:6d:5d:
cf:77:f5:df:24:06:5e:a0:81:6a:3e:67:36:f9:16:10:d0:f0:
79:34:40:3e:b2:6c:ea:d5:53:9d:91:87:55:53:18:81:67:f0:
65:48:cd:51:25:fc:16:2f:8e:a7:c4:c6:fb:13:ff:4b:ac:1d:
ec:25:d3:58:0f:8a:e7:47:34:34:10:63:6a:ed:d3:08:c9:2f:
0a:ce:28:62:8d:57:34:8a:0a:1c:87:8e:e9:60:d4:d8:66:af:
92:91:9a:a5:9c:f0:fc:b6:e6:40:7c:f9:d6:d4:98:f9:12:11:
5a:9d:db:a9:df:b9:f7:df:4a:5b:40:b0:30:12:eb:d4:db:6f:
27:7c:05:e8:da:bb:77:c1:67:29:ba:6e:75:9e:f5:ae:cd:3e:
e8:e6:74:bd:f4:f7:00:76:51:c3:73:13:85:58:f5:a1:2e:c5:
3a:93:20:95:08:0f:68:3e:30:f2:da:f4:c4:48:cc:b3:78:a1:
bc:69:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:40:57 2026 by rpki-client