
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: z3p8B16WdKz8Z5DdebiyrQnybq9LFBjn6auGcfT5CX4=
Subject key identifier: 16:50:2A:55:66:5C:06:EE:A6:2F:2C:36:43:F0:3E:5B:43:0A:C0:C1
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 03B1
Signing time: Mon 21 Sep 2026 00:27:14 +0000
Manifest this update: Mon 21 Sep 2026 00:27:13 +0000
Manifest next update: Mon 28 Sep 2026 00:27:13 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: l182p7Aiw6f5TWi7SYfYD+Dz5+1RPcx/2Z1wquAwHDA=)
2: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: x4NHVBzqjdaRb4g6D343UGd0Ui9qfpMZfGfoXAmd0qY=)
3: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: 3Ix6jRXAiLunM3PIJZxVlUi54u6IasjEvRYGdXCHut4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Sep 21 00:27:13 2026 GMT
Not After : Sep 28 00:27:13 2026 GMT
Subject: CN=6ab079e2-984f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:20:3a:8a:b2:98:9c:5a:3c:fa:5c:3b:68:
71:e5:81:b3:fa:9e:b6:fa:b7:e4:32:c8:f1:ae:e6:
de:43:4e:36:8c:f0:41:92:76:c2:cc:60:6f:5f:8a:
4b:e0:f7:8f:ff:37:6f:bb:81:6d:2b:5b:91:db:7e:
a5:9a:28:e7:00:47:ce:93:d9:cc:39:b9:35:12:a7:
c8:f5:2f:26:31:3d:cc:9e:73:8c:f2:14:5f:a2:c9:
4f:31:d2:56:da:a1:9c:27:17:0b:59:15:27:6e:37:
59:66:9e:7a:09:db:e4:63:dd:50:2c:1c:1e:fd:a5:
37:91:83:61:08:1e:d3:f2:74:9b:7c:9c:c9:2e:f4:
e5:c6:b3:42:5e:a0:f8:be:41:98:87:d5:9e:d1:e4:
1b:2b:8b:bf:bc:bb:5f:31:4a:1f:3c:91:cb:39:89:
56:a7:f5:51:5c:db:32:96:5f:c2:2d:35:d0:2c:ea:
36:79:d9:a2:f0:ad:d2:9e:4f:ca:f9:1d:3c:0d:40:
b3:1d:af:cb:a8:ea:3d:0f:ef:eb:4b:65:1f:a0:96:
8e:1f:8f:e1:e2:7f:8f:e2:f0:48:6f:62:2d:c0:4b:
68:29:98:3d:cd:78:96:f9:cc:c7:47:56:43:75:15:
3d:c3:6c:9a:30:4c:1c:9e:ec:4f:4d:36:6e:00:b9:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:2A:55:66:5C:06:EE:A6:2F:2C:36:43:F0:3E:5B:43:0A:C0:C1
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e1:78:32:46:40:01:a0:1f:4b:fa:08:0d:6f:ea:89:ac:7d:
ad:c5:61:f6:54:65:8b:1c:57:2d:27:f0:f3:01:4d:6f:ec:db:
62:82:b9:04:ea:b2:88:e0:f9:84:7a:22:37:31:e8:07:e3:7b:
15:15:a5:b4:2a:f8:6d:57:84:73:3f:a1:cd:f2:36:1e:92:f4:
0a:be:58:4b:29:a7:31:20:df:d4:04:a3:04:ee:50:9e:a8:14:
46:5b:d8:00:b0:4e:21:f7:0c:61:4e:f0:a0:28:31:b8:77:a5:
18:93:08:36:93:f4:d6:02:03:17:fc:04:24:cb:59:88:cd:84:
ec:aa:2e:8b:16:67:f8:7a:01:c6:b5:51:6a:34:fc:d0:f4:28:
da:d5:f5:b6:ee:5b:b2:16:4d:ae:f3:2f:72:37:d1:0d:71:f4:
d4:21:06:81:13:24:50:e7:3e:62:22:1f:1e:a0:24:95:f8:e4:
fc:9b:25:1a:58:09:b4:a6:c8:df:60:bf:71:03:ec:5a:e4:32:
2b:e7:00:2d:d7:af:41:ca:94:62:98:65:36:d3:c0:ac:5c:af:
50:bd:e4:62:ca:6b:b3:ba:9c:8c:7e:20:ec:2d:3d:00:d6:82:
31:7b:b5:70:ff:a9:07:f4:91:85:12:dd:3d:84:b6:b1:9c:0f:
f3:95:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:21:50 2026 by rpki-client