
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: NTIIyVQcQdWOhfvvT1mCsVXulN5J+2y5ewJN49n7OVs=
Subject key identifier: B8:E2:6D:0B:CF:0B:A2:22:68:DD:67:5B:45:0F:A9:D8:0D:4F:BE:6D
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 0395
Signing time: Wed 29 Jul 2026 01:31:56 +0000
Manifest this update: Wed 29 Jul 2026 01:31:55 +0000
Manifest next update: Wed 05 Aug 2026 01:31:55 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: r2NAtjvfOAQHuDH9N9fTrA9VI/TCCwCUm4ym7nb4ywY=)
2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: 3Ix6jRXAiLunM3PIJZxVlUi54u6IasjEvRYGdXCHut4=)
3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: x4NHVBzqjdaRb4g6D343UGd0Ui9qfpMZfGfoXAmd0qY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Jul 29 01:31:55 2026 GMT
Not After : Aug 5 01:31:55 2026 GMT
Subject: CN=6a69580c-275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:bf:0b:0d:6a:9f:eb:fb:59:91:f0:50:34:
19:d7:16:76:e5:c6:8f:9f:fe:3e:bc:a6:02:4b:f2:
52:d6:f9:23:22:b0:15:61:24:01:ca:81:ad:df:71:
7d:d1:28:3a:11:43:77:b5:8a:ec:fe:d5:99:56:49:
ae:fd:25:c7:57:72:8f:c4:5b:59:5f:16:3f:ef:2f:
3c:d0:3e:56:b8:30:6b:be:67:fe:e1:f9:19:72:57:
26:39:96:b0:3f:d2:52:c4:4f:9a:90:51:2c:4d:cf:
b4:ed:77:f5:4d:24:c8:20:36:a2:66:68:83:01:1d:
38:12:d1:d8:75:fe:64:50:1c:ca:53:1e:21:7f:d8:
87:34:9d:ed:68:4e:f2:76:f5:fc:be:d8:db:1c:be:
e0:1c:ec:d0:15:fa:85:ff:30:91:e3:c5:88:a8:0f:
0a:62:b1:e7:bc:2b:5e:cc:c2:e8:68:3a:4a:cb:de:
c8:95:f9:d8:f9:68:42:71:f6:be:aa:9d:58:22:16:
43:bf:ff:60:06:7d:7b:ab:d6:32:4c:8a:a9:1e:87:
81:f5:09:cc:f3:ec:af:e0:52:02:4e:68:cc:a1:f0:
01:1b:bc:2a:fa:aa:1a:ab:5d:64:10:b3:7b:4e:76:
d4:26:03:61:bc:8a:b7:54:b9:9a:f1:7b:2d:8b:82:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E2:6D:0B:CF:0B:A2:22:68:DD:67:5B:45:0F:A9:D8:0D:4F:BE:6D
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:6d:4a:3a:42:82:32:9e:77:b9:d3:40:3a:46:3f:87:7d:
ae:c7:97:4e:6b:a0:88:f0:35:e7:31:41:8b:c0:88:59:fe:91:
e5:83:49:45:c3:4d:f3:63:f2:cb:d6:7e:98:10:66:48:41:91:
98:40:05:3a:42:98:c8:9e:99:e6:fa:94:f6:b3:be:66:df:74:
db:6f:d3:9a:e8:4c:19:b7:06:82:e2:d9:43:be:1b:55:4e:96:
ea:4c:00:7e:9c:b1:4e:c7:53:b0:8e:d4:43:bc:6e:08:85:56:
46:68:0e:dc:a7:e9:0b:2c:5f:d1:3f:20:fd:09:b2:58:df:7f:
d8:3e:dd:a3:ab:50:80:75:5d:60:5b:93:4e:c7:6a:d2:3f:38:
93:ee:91:2a:95:7f:5d:3e:65:6d:21:bd:01:23:1a:78:4e:bd:
a8:e5:46:d2:49:e5:db:21:a9:df:45:a6:71:21:76:34:0a:2d:
94:a3:74:9e:45:31:b4:75:17:bb:86:97:95:ae:38:11:67:04:
54:a2:2d:32:59:da:96:83:b3:95:2a:ce:bf:14:97:c4:00:b2:
9c:2a:14:a7:97:1f:db:23:14:8f:00:c9:b1:d2:74:d5:19:62:
dd:a3:f2:52:02:de:c1:79:5c:a2:97:02:f4:99:fa:dc:b2:52:
89:cd:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:13 2026 by rpki-client