
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: mME57xwGoRzRAqjnPJy/qRb/AIAVheVqc+qLYS6LSIo=
Subject key identifier: C7:40:8A:6C:FC:87:4D:4A:6A:95:27:5D:31:15:4C:1F:61:DF:52:66
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 084E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 0844
Signing time: Thu 16 Apr 2026 20:48:04 +0000
Manifest this update: Thu 16 Apr 2026 20:48:04 +0000
Manifest next update: Thu 23 Apr 2026 20:48:04 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: bn2kQvoBrDlu4WbGgnhPszb9w7aPy49Y0RrzFfNTCX0=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: ofQHrXKIXpON7nwkCVzz/fxJZ831mKwy1TbIVQC8ThE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Apr 16 20:48:04 2026 GMT
Not After : Apr 23 20:48:04 2026 GMT
Subject: CN=69e14b04-f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:8a:8d:53:83:29:df:8a:97:ea:13:07:ce:
55:53:bf:f2:c5:90:a5:91:c4:95:89:8c:a2:76:e4:
3f:82:a3:4d:3b:c6:97:ca:8b:e6:b8:57:c5:a0:73:
76:c7:f8:5c:f9:52:6c:f4:24:ea:ef:e5:c9:62:33:
cc:82:c5:44:0f:02:29:47:f5:0f:17:07:a9:c4:31:
16:1e:0d:7f:15:46:03:63:0e:aa:5f:84:1c:30:a1:
ba:bd:6a:e3:8c:26:d8:8d:a8:0d:ee:32:33:e9:f6:
ad:ba:b7:9f:18:5a:d5:c7:83:c7:3b:79:da:a4:34:
29:38:41:8f:06:1b:ee:a8:8b:4a:3d:a2:a3:2f:0c:
1b:fa:e0:b9:75:2a:13:c0:2f:fa:66:e9:3f:9c:d9:
6e:7b:d7:c7:89:1f:0d:7d:9c:69:b5:c1:c2:a8:70:
36:d7:71:3f:2e:e9:35:a7:a9:c8:0b:3f:2a:a3:13:
50:b1:1d:c5:ad:9e:77:40:8c:9d:d9:89:b0:ae:f4:
99:b0:e1:9a:e0:10:a7:25:f8:62:68:43:7b:94:6e:
eb:1b:0c:56:72:32:dd:63:60:68:e6:77:10:f6:f1:
23:86:9f:4d:6b:b2:87:cb:5c:76:88:58:b2:ea:74:
49:5a:f9:97:55:17:1c:d5:a1:58:5f:a9:01:b1:5d:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:8A:6C:FC:87:4D:4A:6A:95:27:5D:31:15:4C:1F:61:DF:52:66
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:57:e4:c6:77:83:9e:42:fa:c2:44:a7:cf:f1:c2:1e:b8:
31:50:ac:90:f1:7f:ea:ec:f9:40:0e:e1:53:51:16:cf:90:4b:
15:8d:9f:1f:92:a0:88:8f:92:2f:29:cb:43:99:64:8c:61:fc:
69:ad:13:92:71:a3:10:8c:9a:26:a0:86:af:cb:44:7d:dd:fd:
b5:a3:11:58:3b:92:69:a9:b4:13:93:fe:8a:df:bd:3c:f7:00:
bd:9e:65:8c:c0:1c:31:d0:13:04:0f:83:ec:4d:8f:56:42:83:
a6:94:22:c2:68:02:db:90:a2:fd:4f:1b:88:3e:27:0e:45:6f:
07:cb:e2:b6:c5:81:3d:54:0a:24:a6:4d:a6:9e:ed:4a:ed:93:
cf:4e:8f:b2:a2:0d:a3:86:df:1b:1e:27:67:e2:2c:12:c0:e2:
a4:61:43:95:04:ec:f4:fb:8a:b1:db:9d:08:33:bf:d8:ca:25:
a0:1c:44:10:6e:8b:e0:29:68:3a:23:9c:ad:31:cc:26:d1:e1:
5f:e1:fa:47:f7:d8:6d:bb:5e:75:69:cc:ea:bc:03:71:1f:5e:
85:79:74:02:38:70:8d:40:f1:46:68:c6:9b:43:4d:7a:59:e4:
d3:5c:32:ac:24:23:bb:d5:45:38:3a:e4:d6:ac:03:ab:3c:15:
77:b4:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:50 2026 by rpki-client