
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: onTJq3RmC9Wn+X/YBIu5exXFOLLiylJ9isM+Bn39sPo=
Subject key identifier: D3:FA:79:B3:2F:76:EB:4A:7A:E8:8B:75:5C:FB:89:55:56:EB:DA:CF
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 0373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 035F
Signing time: Fri 17 Apr 2026 00:49:55 +0000
Manifest this update: Fri 17 Apr 2026 00:49:54 +0000
Manifest next update: Fri 24 Apr 2026 00:49:54 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: w3orhszadsNZ8tsV+zCw8w3vhbMZXst1Zh+ePNrR9OA=)
2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: /GgklwwSBikULn43rGtHG5wL0AHIDwWQqbAtpZ3bJj4=)
3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: jw62AuKYcLU+o7CElN93+zYrOGkOkAOws+22gA0aEog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Apr 17 00:49:54 2026 GMT
Not After : Apr 24 00:49:54 2026 GMT
Subject: CN=69e183b3-ba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:50:95:f1:04:f1:32:8a:a1:88:ea:54:16:
cf:32:0c:be:1d:dd:a6:16:82:3f:38:ce:4b:55:9c:
e4:e8:fc:99:c3:c9:e1:5e:04:04:59:5e:92:d3:d6:
89:5b:73:62:cd:b3:90:8b:26:93:72:e3:f1:76:5f:
e3:e5:38:7c:83:b7:5d:2b:21:79:75:0a:3e:8f:08:
73:fe:fc:14:69:2e:eb:39:ab:1f:0f:7d:80:f1:27:
52:a7:8f:4f:86:73:89:cb:1c:19:e8:2f:b1:45:08:
b0:7a:c2:24:c8:07:b8:cf:75:ce:8a:17:33:81:51:
7d:57:4c:0e:71:49:1e:d0:91:2e:4a:47:73:bd:c7:
60:09:6f:93:e8:3a:34:6a:d0:d2:67:54:d8:6b:c2:
63:1e:b6:1b:c4:28:ba:f1:7c:a1:cc:34:7b:43:ab:
0b:f1:1c:db:5f:f4:9a:05:41:1f:b0:78:16:36:3c:
e7:db:8d:08:4d:78:52:5b:b8:e9:a0:dd:51:91:3d:
7b:28:d9:2a:51:57:30:41:06:12:e5:bc:bb:d7:e1:
52:65:05:e4:e5:b8:2d:93:07:19:fe:d7:3f:3e:1b:
05:df:42:b7:11:20:a8:b0:59:20:ad:27:02:f3:9e:
bb:ff:93:bb:36:10:1e:f8:70:fa:0c:8b:ce:db:46:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:79:B3:2F:76:EB:4A:7A:E8:8B:75:5C:FB:89:55:56:EB:DA:CF
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:86:d9:e4:ca:77:c8:66:7b:a6:ae:ff:63:0a:31:c5:34:58:
5d:19:b6:99:42:bd:d1:b7:36:ec:f6:5e:5a:90:93:87:e2:70:
e0:91:67:54:80:ea:7e:9b:08:2b:84:96:eb:d8:69:21:52:22:
a7:1f:e9:da:ab:f3:32:7f:91:a4:56:7b:61:2f:7a:ed:ee:e7:
fc:9b:2b:e9:be:6a:28:ca:3b:10:2b:8c:0c:74:31:01:6d:7b:
d5:c5:46:09:db:5e:36:8e:e8:23:26:c0:03:99:12:1e:74:8e:
d1:d6:05:bf:c4:e1:f9:5b:f0:e9:d2:a5:13:f5:54:38:f4:88:
9e:78:e2:6c:ea:5b:81:52:32:61:3b:0a:2b:bd:43:35:cb:a1:
9b:32:0f:7c:56:c7:c5:1c:a3:42:55:f6:25:53:24:11:2a:4d:
3d:25:c2:e6:06:c4:bf:12:a2:42:24:94:0e:3f:14:f0:e2:0f:
d9:b1:01:a9:da:d2:35:94:ce:42:03:6b:9d:df:ca:79:f4:4d:
50:a8:fc:ae:c3:ee:a0:9f:67:76:e1:44:88:9a:60:eb:3e:66:
82:6b:25:8b:fb:35:5f:7f:02:7d:42:d0:9e:7d:b6:89:9b:29:
9d:27:d4:80:33:81:5e:2b:cc:95:7d:8e:3a:df:e6:e0:c2:2d:
e0:94:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:04 2026 by rpki-client