
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
File: mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json)
Hash identifier: cH7ERsx7JWZ/63DrXa+sPM07bhQLP7fDndRTZP8a/Ig=
Subject key identifier: 05:1F:8D:A0:5C:96:2B:5C:62:93:C3:9C:FC:71:80:EF:DA:4D:2B:5C
Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
Manifest number: 015B
Signing time: Thu 05 Nov 2026 06:00:02 +0000
Manifest this update: Thu 05 Nov 2026 06:00:01 +0000
Manifest next update: Thu 12 Nov 2026 06:00:01 +0000
Files and hashes: 1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: tZwV1BIoilMHmqGulQYvCbYTlUu0lAsl4sUN48r7jvE=)
2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: hvJM1q61mR37Mbj//Z2oMZ/11tRvR6F+Y/KNJusVFjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Validity
Not Before: Nov 5 06:00:01 2026 GMT
Not After : Nov 12 06:00:01 2026 GMT
Subject: CN=6aec1b61-9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:3c:77:ee:7c:49:aa:04:fa:cb:8d:4e:6f:
71:58:59:a2:d8:3f:55:4e:c7:10:e7:60:0e:a4:05:
ec:65:90:a2:41:12:64:a6:fd:73:e3:f7:0d:42:ac:
96:5d:15:fa:67:ea:ef:b4:72:cd:af:1f:e5:13:63:
97:50:9d:b4:03:1a:09:6f:1d:7e:8f:fa:2f:76:f6:
57:de:8b:09:bf:9c:0c:f7:a8:16:c8:c0:e6:a8:d6:
92:69:6f:ef:e1:4b:2a:59:95:ae:b5:6e:b2:cc:f1:
f0:ba:c5:2e:2e:77:89:0e:d5:5a:e0:1b:7b:e1:1a:
98:28:55:54:97:67:a9:23:42:e4:78:af:6e:96:99:
b4:74:91:15:6c:43:fd:a0:2b:f6:63:aa:6f:72:8f:
67:48:07:9c:be:fc:29:c1:e8:ba:7c:6f:17:b9:e4:
86:88:ac:48:47:d8:2f:eb:c9:30:f4:42:a9:fd:6e:
a9:61:c2:d5:2d:79:87:71:b0:be:61:2d:92:55:75:
eb:58:cc:6a:8d:c8:68:ed:d9:11:0b:5f:c1:fe:8c:
40:35:a1:d9:f6:0e:a1:99:c4:f4:58:99:25:bd:5a:
bc:76:1f:fe:27:4e:f4:a2:e9:5e:a5:e0:f8:85:06:
a1:99:a2:6f:5a:3a:9f:58:6c:60:1c:ed:90:26:96:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:8D:A0:5C:96:2B:5C:62:93:C3:9C:FC:71:80:EF:DA:4D:2B:5C
X509v3 Authority Key Identifier:
keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:e4:1b:b3:7e:95:a4:34:86:7b:1e:de:56:18:f1:22:b9:
fa:8f:be:3a:88:b2:e3:ee:e6:5c:f6:4b:45:ef:3e:88:15:35:
4c:83:f0:9f:8f:64:75:11:b2:8a:4c:fd:6a:7d:00:0a:b1:78:
d3:38:d1:9d:68:9d:11:23:4a:ce:c2:e6:e8:71:a7:67:8f:49:
84:b3:40:8e:f6:90:a7:26:5e:cb:63:aa:1a:e1:37:ca:68:76:
99:15:cc:3f:2e:83:57:b1:64:89:8b:d8:f0:8c:f9:4f:03:45:
87:ff:3e:c3:e6:6c:34:15:0d:1a:8c:a2:ca:c4:25:78:ac:67:
f3:45:5a:82:6d:b6:ab:20:fc:d7:18:30:27:08:be:9e:9d:0c:
9c:09:4f:83:99:42:5f:a6:cf:44:0e:fc:c6:2b:34:f3:38:46:
6f:cd:dd:f6:80:d9:8b:7e:8b:0d:e2:36:e6:6e:6c:c3:47:2c:
a8:f0:75:84:b5:54:a0:65:0f:2a:ce:50:05:ef:ab:2b:bb:33:
3e:eb:06:64:2b:5a:2f:cd:7e:d8:64:b3:03:4c:db:29:45:ba:
99:c9:94:63:45:63:1f:54:a9:94:52:08:64:1f:4a:f6:13:af:
d8:5b:56:54:4c:8a:ee:aa:9f:90:12:86:a7:6f:dd:24:a5:01:
8b:6a:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:02:42 2026 by rpki-client