
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: LH02Opp4m4fJtiP4FROZ3X9qFDtf4oZCKaVXvUPY6HA=
Subject key identifier: 52:A9:71:B6:C1:83:24:1B:2C:51:DC:AA:EB:B8:85:F3:2D:9B:93:40
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 0390
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 037C
Signing time: Sat 13 Jun 2026 00:51:15 +0000
Manifest this update: Sat 13 Jun 2026 00:51:14 +0000
Manifest next update: Sat 20 Jun 2026 00:51:14 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: WWXyFZL5z4wCs/fW/NU4Q3Mmudgui+R6KlTtXO04AWI=)
2: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: jw62AuKYcLU+o7CElN93+zYrOGkOkAOws+22gA0aEog=)
3: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: /GgklwwSBikULn43rGtHG5wL0AHIDwWQqbAtpZ3bJj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Jun 13 00:51:14 2026 GMT
Not After : Jun 20 00:51:14 2026 GMT
Subject: CN=6a2ca983-44e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:a1:de:f0:5a:9b:70:26:49:83:5e:c1:04:
e9:f3:ed:2d:e5:40:a7:4e:40:50:58:5f:1d:e9:4c:
bf:89:a4:8d:5a:67:5a:f9:41:43:2a:39:e6:7e:9f:
7b:d3:ef:b2:13:62:52:59:b4:4f:3e:ef:ae:b8:be:
e1:61:7f:25:19:ad:cb:67:d1:2e:51:d6:45:cc:57:
61:ea:b0:b5:2a:be:a0:af:42:f6:a3:3b:d4:27:07:
76:80:37:77:31:eb:bb:81:97:30:d2:6d:61:a9:00:
5a:f9:e9:17:14:13:71:e8:b5:cb:3d:3f:75:62:b9:
72:c9:4c:54:9a:62:9e:fa:d3:01:6c:d3:60:86:2a:
e6:ff:9a:0f:56:27:e8:66:ec:26:a7:1e:d5:21:64:
54:fd:d2:3f:24:b5:32:9b:8c:fc:dc:47:2a:6b:b1:
a8:42:7a:30:06:49:57:a9:75:b9:73:66:f1:93:5b:
be:cb:e4:cc:03:d5:4a:40:de:26:69:db:cf:69:03:
4a:91:51:5a:45:fc:2e:ae:08:89:58:0b:dd:7a:9f:
29:24:13:0c:ce:9a:ac:d4:c5:99:09:30:0a:5a:87:
89:31:6b:92:45:2e:e2:de:ed:0c:f7:6d:7b:6d:84:
fe:cd:2c:73:e8:94:50:8b:fe:1f:46:5f:8b:b2:b1:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:71:B6:C1:83:24:1B:2C:51:DC:AA:EB:B8:85:F3:2D:9B:93:40
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:97:90:e7:45:c7:1a:2a:c7:b9:9a:99:c2:29:36:5f:8b:
a7:39:ea:44:2a:78:5b:e8:42:e7:e5:69:33:90:b4:97:e4:a4:
88:bd:53:ff:fd:4e:e6:c8:83:0b:96:0f:0a:00:00:43:c8:2d:
0b:67:fd:36:a8:d8:fd:f2:7a:7b:df:59:ec:80:dc:cb:c5:de:
b5:8b:e1:a5:8c:bc:9d:ae:ba:7f:57:92:5f:3e:a8:12:70:4d:
4c:b2:39:31:bf:a8:99:e7:77:f9:27:02:76:aa:0f:8f:38:d9:
03:c0:39:01:86:6f:1f:9f:29:7a:88:38:b8:da:db:80:a8:53:
88:d4:77:0d:2b:f5:f7:af:f7:5d:1d:e2:f4:38:02:8d:e4:69:
5c:09:49:0c:8e:3e:e5:12:46:bf:41:4d:da:55:07:b7:eb:1c:
48:31:9f:9e:61:46:fc:17:58:80:3c:fb:d3:85:3f:89:1b:70:
56:11:f6:64:1b:d9:f2:d2:4c:7e:69:b2:2d:13:25:7d:69:4a:
5d:ec:92:32:27:ce:9c:89:d9:36:49:ac:49:f4:75:4d:f2:98:
3d:fe:2d:e6:c3:0c:86:00:f8:9c:89:dd:f2:37:2d:13:8a:1c:
eb:7e:d8:53:a3:47:cb:91:a6:5a:5c:e3:47:61:b1:9e:b7:cd:
fe:59:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:09 2026 by rpki-client