
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: IdgYvHYfGRfYbvallzPsEMDfufRNF1dqYdvy9zAaBVM=
Subject key identifier: 27:4A:77:16:48:D6:1C:A1:E8:58:50:FB:0D:A1:47:FA:D2:93:EA:4F
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 027D
Signing time: Fri 17 Apr 2026 01:39:55 +0000
Manifest this update: Fri 17 Apr 2026 01:39:54 +0000
Manifest next update: Fri 24 Apr 2026 01:39:54 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: zszEXfr8YqEy409stu7EyG/AInodVUaNWmwgaUeVdaw=)
2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: fg88o765nCwItF2Hc4hiKhK6MdJibWRYf4SuZ9yJYVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Apr 17 01:39:54 2026 GMT
Not After : Apr 24 01:39:54 2026 GMT
Subject: CN=69e18f6b-b496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:49:21:5c:4e:83:ad:c3:17:eb:21:07:6b:
42:41:ba:70:b1:b0:b0:5d:4e:cf:b5:26:dc:97:7a:
e0:a3:dd:25:9c:eb:c5:62:fe:c6:f6:05:2c:5e:e4:
f1:77:44:ce:22:91:28:b0:94:40:66:65:eb:ea:e7:
00:ec:f3:cd:15:ae:fb:5e:32:4d:58:af:94:84:e3:
de:ae:49:0b:39:b2:28:c0:c9:93:70:b8:16:c4:31:
c7:25:0f:62:14:3a:f5:02:13:67:4e:7d:7f:93:e1:
a3:ca:b9:dc:2d:cc:00:80:e8:57:54:b0:5f:d7:a5:
89:db:07:fd:99:f5:19:c0:4d:29:31:a5:5f:8b:56:
81:38:ec:54:8e:f9:41:98:12:4e:67:36:3b:cc:5c:
8b:c8:b1:7d:8d:6e:21:f7:30:4d:e6:be:3a:d8:73:
e2:92:7a:da:b6:1a:e2:21:7c:74:1f:4b:e3:39:9b:
17:37:b5:d1:9e:e2:1a:91:f7:1a:2e:4d:e8:71:7f:
96:1e:71:a5:c6:48:9b:a1:61:93:67:6c:56:6d:91:
23:b5:33:86:a4:95:a2:84:38:1e:b7:4d:84:1b:c8:
11:76:c3:a9:61:4b:c2:00:2b:22:2f:2d:af:a1:5d:
30:a2:b6:1c:dc:38:4c:f6:97:ef:1c:3e:b0:4c:bf:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4A:77:16:48:D6:1C:A1:E8:58:50:FB:0D:A1:47:FA:D2:93:EA:4F
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:35:b0:59:ef:ae:9e:7f:da:c0:e9:e4:99:cb:b7:90:5d:
9a:11:a1:6b:ea:cb:51:e0:cb:f3:83:fa:36:0a:ea:ea:bb:3a:
a9:97:c9:95:45:f2:51:87:12:18:1f:ff:ce:ed:13:bb:f4:dd:
f2:e4:c6:d7:ba:9a:3b:c1:bb:4c:40:82:f9:62:73:72:81:7e:
75:c1:ad:a4:c2:ca:8c:90:2d:3f:88:d8:14:a7:4a:a4:75:87:
58:38:61:c4:6a:3e:5c:df:ec:0d:12:d4:e8:d6:e8:89:d2:7c:
05:c0:b3:81:67:b0:fd:1f:80:97:8e:27:82:ee:be:72:d0:e6:
e2:f0:cd:fc:c7:30:da:ab:6d:30:5e:69:b4:f0:a5:b4:96:2a:
60:30:27:28:6e:06:f4:91:ee:3b:1c:4e:18:bb:4f:31:58:b2:
b4:46:2a:81:bc:b8:e7:a8:3c:9f:39:c6:1b:b2:7f:86:6d:10:
8e:33:2c:a6:e1:2f:48:3f:6c:92:c4:fb:ef:96:e6:2f:7a:d3:
e4:f2:e3:f4:2a:2a:b1:0e:3e:98:65:e6:41:95:41:b6:75:86:
a3:13:3c:e5:9b:5c:a2:33:8b:a5:54:77:c4:81:6d:20:f6:ff:
80:21:54:64:c7:00:13:92:5c:e6:2a:45:59:79:eb:01:92:80:
4e:3a:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:17 2026 by rpki-client