
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier: WY2hyRX0GtGMEVZW86OODL4V2KRRerC3G4BOHZayZOA=
Subject key identifier: D3:DF:7D:E2:D7:6A:8A:9C:EF:77:B2:C7:9C:73:0C:0E:59:D1:B2:D4
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number: 029B
Signing time: Sat 13 Jun 2026 01:51:49 +0000
Manifest this update: Sat 13 Jun 2026 01:51:49 +0000
Manifest next update: Sat 20 Jun 2026 01:51:49 +0000
Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: mKlGW/GMsV8iBBEL3/48N1ZhOw5mBxevBtY7zDOuHhQ=)
2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: Hb11VPodi8i0P+rMM2y+1RDJ6AN+xMk67SgHzAaL58I=)
3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: lzyN5MNSEZnDugz21KoEYtAxenHtxzzxEPsQqNcKc4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Validity
Not Before: Jun 13 01:51:49 2026 GMT
Not After : Jun 20 01:51:49 2026 GMT
Subject: CN=6a2cb7b5-b328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:06:f0:9a:73:28:a2:78:30:fe:43:db:ab:
68:a0:a3:ee:a2:f8:1a:31:89:3f:86:73:f5:be:30:
a7:86:cd:91:b1:c4:f3:27:ea:ae:0b:3f:97:a8:0e:
a1:41:7c:1c:18:3c:2d:2c:db:36:92:85:8f:e9:8c:
7c:e1:2b:e9:42:67:60:27:71:20:22:99:38:5f:12:
2d:8f:96:d0:62:f6:7d:05:d4:cd:fa:fa:96:c2:d7:
ef:52:61:41:13:21:de:5c:e8:ba:c2:5d:ec:a0:e1:
f7:44:8c:82:07:8b:4f:57:54:a5:44:8a:78:59:1a:
2c:f2:a7:a5:ec:f1:b1:bc:79:a8:8a:f0:94:0f:ae:
3a:06:6c:85:a5:89:8d:e2:bd:62:f1:63:2e:3b:1d:
02:ec:01:6e:74:b0:29:a1:49:a4:2f:90:ee:4f:2b:
fe:37:a8:bd:0a:e8:8b:16:a9:51:d8:40:1d:6a:f9:
d7:9f:7d:cd:cc:9c:df:c4:97:e6:54:ec:ea:81:9a:
03:77:8e:67:e3:29:ba:cd:9e:0b:18:e8:81:ce:51:
3d:51:74:8a:8e:1d:6c:24:f6:5e:69:6c:bf:93:06:
8b:10:09:ac:b5:5c:b2:12:a9:9b:10:c4:61:29:5d:
9c:e9:4a:fe:d3:48:9c:ce:31:77:d6:32:d6:54:ca:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:7D:E2:D7:6A:8A:9C:EF:77:B2:C7:9C:73:0C:0E:59:D1:B2:D4
X509v3 Authority Key Identifier:
keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:71:b6:a9:29:a1:54:41:f6:8b:8d:17:43:2f:d0:61:fa:
4a:78:31:31:e2:e3:4c:52:26:25:80:ec:20:47:3c:98:56:e0:
04:4f:00:c5:c3:79:02:df:6e:1d:1a:f5:cf:89:b7:f7:39:36:
c0:ec:b9:77:ad:da:ca:87:0e:f5:a9:d0:4f:26:13:f7:55:24:
96:2c:7a:fc:42:08:7d:08:03:58:ad:e1:6d:4b:3d:fe:2e:10:
6d:06:ef:20:45:b3:a3:9f:5a:81:b3:96:a1:87:97:05:c6:43:
59:3e:6f:34:fe:c2:59:dd:a8:9e:b5:9b:71:db:4a:92:c9:94:
b2:e7:1c:c9:9e:1c:da:e9:ee:11:b5:39:0d:80:58:a8:d2:f7:
0c:d0:21:55:81:9e:c9:b1:ab:0f:2a:38:41:e2:d7:4c:ed:1f:
00:9f:93:73:c6:c3:87:6a:0c:79:2c:ac:37:56:ed:72:ea:5c:
31:77:25:86:4c:ca:ad:03:6f:fb:5c:a0:e2:09:21:7a:b0:34:
2b:87:7b:1b:94:1e:26:c3:55:90:ad:90:77:d0:bc:57:f8:ff:
27:5f:c4:a3:9c:7d:bd:f1:30:d4:30:88:0e:cf:22:24:3a:56:
bf:68:dc:cd:aa:85:65:6c:f0:4c:9e:1f:d3:31:87:da:08:01:
44:a0:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:25 2026 by rpki-client