
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: 0vQQHU7CLweY7hRAJdT0pVFrYz8feNDi0UI06K6oOK4=
Subject key identifier: 3C:9E:2B:3F:3C:B3:22:AE:88:F9:17:3B:C9:38:4E:D8:D8:44:79:33
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 086E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 0863
Signing time: Fri 12 Jun 2026 20:51:39 +0000
Manifest this update: Fri 12 Jun 2026 20:51:39 +0000
Manifest next update: Fri 19 Jun 2026 20:51:39 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: aPRBqb3kYFWs8in0cs+BM6m3zkbLeaXqIRYQ/nDm49c=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Jun 12 20:51:39 2026 GMT
Not After : Jun 19 20:51:39 2026 GMT
Subject: CN=6a2c715b-46a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:3a:61:a4:af:08:fa:f5:5b:3f:44:ed:90:
2f:e2:ac:fb:e5:e4:1d:8b:d9:4f:3e:44:8c:3c:a7:
20:f8:ee:83:c4:e0:f1:fa:e6:41:04:49:db:64:be:
37:14:e1:3f:4f:81:79:82:c5:35:36:29:67:ed:55:
15:a5:9c:df:a2:a9:19:3e:54:6a:e0:7b:95:61:c6:
aa:7e:2d:40:81:7f:47:38:63:5a:95:cc:f4:41:2e:
4a:79:de:b4:31:f5:1d:58:31:ad:e1:f4:71:5f:44:
35:ff:a5:e4:fd:0d:99:30:fb:bd:97:81:02:73:1b:
bc:81:a0:ce:76:a4:3b:b7:3f:02:17:92:8c:8e:29:
eb:af:69:de:67:89:66:0c:1d:66:16:74:89:ba:8d:
4e:58:7c:94:77:03:a6:d3:69:cb:b3:82:ec:a5:4c:
01:86:42:66:be:6f:3e:b6:ad:fd:5d:26:fa:da:f5:
78:da:0e:94:41:75:91:db:1a:c2:dd:58:85:32:7c:
65:12:6e:16:da:e4:de:c5:4c:51:a5:05:98:a5:5f:
06:01:b8:6d:cf:7d:f8:27:9d:a4:60:c8:e2:2b:10:
0b:0c:d7:46:9d:17:a3:38:d0:48:e6:74:7b:e1:46:
f9:e5:ac:55:5e:c5:fc:a8:c1:ca:be:a0:80:c9:9e:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9E:2B:3F:3C:B3:22:AE:88:F9:17:3B:C9:38:4E:D8:D8:44:79:33
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5a:bf:26:36:06:37:ef:b6:be:7e:c1:6d:4b:85:c4:ee:ea:
b0:90:88:8b:06:9f:7d:1f:7e:3b:2a:28:d5:bd:51:d3:da:b0:
fe:c3:f5:1e:b9:d0:12:a9:ca:af:cf:57:00:14:0e:b0:a8:09:
71:d8:60:74:d4:b4:ca:52:bb:07:a6:5b:ea:2c:00:b5:a3:42:
99:09:27:0d:0f:f6:ec:a1:a4:84:3f:f2:b5:58:1b:7b:6f:e3:
45:a0:2a:e5:b4:26:9f:67:95:3e:3f:81:1b:6e:66:68:81:7f:
8f:35:dc:2c:e3:3d:0b:03:1e:8a:d3:de:8d:10:92:16:e7:49:
06:b1:9b:fd:47:bf:34:ba:07:e3:4f:15:53:3d:e6:5d:14:af:
de:da:77:ef:d1:22:ba:41:1b:07:b2:93:ba:b7:85:96:84:3b:
db:45:50:76:8e:b2:2b:64:b4:e0:ec:48:0f:e3:3e:04:0f:a3:
a1:7c:0b:9e:0d:30:5c:d6:cf:d5:c9:51:3f:05:0b:a8:94:cc:
88:5c:72:aa:00:26:38:d4:8b:95:3c:da:f4:ae:d8:6e:a4:50:
bb:35:ad:38:c5:09:5d:7b:a2:04:55:08:a9:5e:17:12:6c:a5:
64:8a:fe:8b:a8:d0:f4:3d:c5:52:43:de:3c:91:1c:bb:22:49:
37:09:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:53 2026 by rpki-client