
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier: NVclmTpVLZXoq8PMIyuEI8v0X3mm5p5tQrajxklkUXU=
Subject key identifier: A7:16:FE:65:5A:14:A3:C2:56:40:84:72:E8:A6:FC:04:E0:CE:70:85
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 05EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number: 05DA
Signing time: Wed 22 Jul 2026 23:48:47 +0000
Manifest this update: Wed 22 Jul 2026 23:48:46 +0000
Manifest next update: Wed 29 Jul 2026 23:48:46 +0000
Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: P1z80j/k7tCj5rBF7hhLsxEmMx2+uT1HmCn6l5fkrm4=)
2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Jul 22 23:48:46 2026 GMT
Not After : Jul 29 23:48:46 2026 GMT
Subject: CN=6a6156df-f1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:3f:f4:8a:4e:01:5e:bd:c9:94:14:76:94:
c8:c3:e2:5c:14:2b:ab:47:d0:3b:e0:cf:20:79:ca:
85:30:77:ab:72:c1:85:70:10:3f:37:33:d2:bc:8a:
a3:a4:9f:7f:45:8a:ba:73:d2:b6:59:68:7f:e7:4a:
d3:0a:30:25:6c:16:34:fb:0a:45:e0:ee:5e:9c:e1:
9d:40:cd:cc:57:53:15:af:45:6d:95:6e:d6:b4:e4:
20:e0:1e:8b:c2:25:a2:93:c7:52:e3:78:a2:09:a9:
a9:7d:cf:23:93:4e:b8:b4:25:45:94:ab:8f:ae:c2:
24:5b:27:dc:73:71:05:f9:f8:7c:51:4c:81:75:7a:
a3:6a:c4:01:2d:c4:88:46:c4:52:40:2d:50:11:00:
ba:36:b5:1f:5e:17:13:e3:b7:c5:c0:a7:88:e5:28:
92:10:96:04:b7:ea:27:57:25:36:ac:e8:16:3b:e0:
38:db:49:13:46:80:33:ac:65:8e:98:fc:48:b7:94:
0e:e1:8f:c5:ae:46:4b:06:83:09:e2:2d:78:e6:3a:
18:77:81:5f:39:39:33:6d:d7:17:e5:8f:b5:a5:e0:
8f:8e:4a:97:f0:db:7c:1b:13:35:1e:a3:33:b4:a9:
7e:73:9a:ec:fb:a6:93:d0:2f:2b:7d:b0:61:3e:ae:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:16:FE:65:5A:14:A3:C2:56:40:84:72:E8:A6:FC:04:E0:CE:70:85
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8d:59:b6:c8:64:70:14:b5:8a:7d:f2:f3:68:e9:86:d3:f5:
31:3a:f3:6d:ab:e3:80:5a:05:a5:9e:7d:99:6d:c3:1f:7a:ee:
28:d7:d1:b4:b4:84:ec:12:66:b6:b8:b0:c6:c9:54:aa:0d:1c:
36:37:6d:57:ca:4c:36:2d:98:c0:f8:67:74:c7:78:01:bc:7f:
92:44:a4:6a:8f:ab:16:c6:81:82:80:18:30:dd:43:84:cc:90:
6c:da:68:67:30:67:31:fb:31:14:e0:81:44:94:07:77:a4:ae:
1d:00:73:af:87:c8:c1:02:ed:d2:1a:ed:b2:bb:52:c4:20:d5:
bd:4f:f4:e2:8b:b3:2f:c4:6e:10:d3:f3:91:52:2b:51:6e:d5:
99:08:73:1f:cc:a1:9d:40:10:52:e4:18:33:5f:8d:a5:9d:09:
9f:5f:df:f0:57:2e:87:29:ff:ee:c3:27:35:34:c2:a5:39:41:
4f:00:e5:65:a3:1e:ec:53:7f:f6:71:3b:2a:7d:f2:60:88:c3:
33:bc:5f:02:ac:f1:fd:10:83:15:05:1a:d1:0a:43:6f:2d:5f:
33:39:c7:42:9d:53:7a:d2:78:15:f9:5c:4b:a3:85:bc:12:47:
a5:53:0a:1e:21:e5:7b:fb:b0:0c:0b:d1:8c:2e:02:b0:98:27:
91:1f:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:25 2026 by rpki-client