
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier: 4do3B7DzZR1XFOtc90wKnPDXRx7UAlTWBbrn5ibt9CU=
Subject key identifier: 8D:EA:DD:F8:9F:74:51:FE:4D:39:ED:3C:4A:E8:EF:23:B6:56:E0:56
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number: 05FA
Signing time: Tue 22 Sep 2026 22:38:56 +0000
Manifest this update: Tue 22 Sep 2026 22:38:56 +0000
Manifest next update: Tue 29 Sep 2026 22:38:56 +0000
Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: /E71QA9FjMw6PAuKXv9ABQ5ie6tEhWAg+QSXC6Zf0B0=)
2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Sep 22 22:38:56 2026 GMT
Not After : Sep 29 22:38:56 2026 GMT
Subject: CN=6ab30380-4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ef:10:86:78:ab:a1:c9:ae:4c:8f:d5:38:68:
80:81:8e:3d:9c:46:e5:38:e6:36:bc:b3:7d:3f:0f:
b7:e7:38:a7:5f:f9:67:15:2b:2e:ab:5f:16:94:04:
d0:6b:86:81:b0:11:12:17:68:6e:c0:e9:de:17:c1:
46:36:c9:8f:60:1c:a7:83:92:6b:4e:13:53:78:e4:
4f:19:86:ea:8c:db:88:9a:29:9b:f3:54:d3:21:ac:
cc:2d:48:e1:20:43:21:bf:29:76:3d:88:ad:e8:fc:
ce:b2:96:ea:78:31:46:a7:e8:10:1c:a2:66:3b:0f:
02:91:c5:f8:19:24:b5:3a:3e:89:ff:75:42:2c:78:
f1:03:4f:29:b9:ae:d0:f1:6a:d4:86:8b:ef:c8:b4:
a5:2a:f4:fa:8b:05:e0:88:5d:25:b2:c0:2c:d4:99:
34:fd:38:93:aa:73:26:1b:b7:d8:2c:f3:ee:c4:74:
bc:bf:bc:51:67:03:59:25:98:a5:38:7f:37:18:83:
b2:f5:2a:b8:a3:3c:b5:00:05:d4:44:84:ec:68:ca:
a0:ef:fa:8e:6a:3a:3e:ea:cb:91:0a:29:3e:10:d4:
c7:0a:3b:44:c8:31:92:14:ca:cf:aa:ec:e0:2d:41:
e6:be:37:86:f8:2a:c3:c0:fe:13:e5:3f:c9:11:7e:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:DD:F8:9F:74:51:FE:4D:39:ED:3C:4A:E8:EF:23:B6:56:E0:56
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:49:c9:c4:a4:92:c6:70:bd:17:3f:2d:29:3d:90:3d:d4:98:
83:4b:68:09:0d:22:8d:d1:99:90:e1:ba:1f:2a:71:e0:17:49:
b7:04:0b:10:ce:5a:77:85:d9:c8:bb:e2:5a:d9:03:f6:14:6a:
5b:08:f3:02:c9:70:ae:5c:b0:7e:af:0b:cf:0f:0c:1f:1c:e7:
59:62:99:d7:6d:d5:65:27:12:ba:80:9a:13:af:bc:09:91:fa:
ce:9a:8f:27:df:37:2d:33:e4:cd:57:97:64:19:8d:5d:85:f7:
a6:d2:4d:c4:c4:50:87:c5:7a:9d:c6:db:f8:6c:ae:f7:38:0e:
6d:38:04:dc:e6:50:a7:d1:15:d7:47:f3:d3:f3:c0:75:89:78:
3e:bc:0f:33:fa:c2:ed:64:e3:8f:ea:86:fe:c6:34:22:9f:5a:
44:5f:f0:d8:99:ab:aa:9e:f8:ac:d6:09:12:f3:02:f9:77:a6:
73:36:4b:88:82:1d:6b:d1:6c:67:ad:f5:89:40:6c:e1:03:a2:
48:64:62:90:c0:64:93:d1:07:8d:ff:13:83:3e:70:b8:a2:5c:
ef:88:ac:65:46:5a:e3:f9:c7:d3:2b:6a:12:00:19:bf:d5:87:
80:89:d7:da:4e:b0:00:83:b6:20:75:0b:a3:b5:b0:12:18:8a:
45:7d:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:33 2026 by rpki-client