
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier: P1gt9XQcmXmlRitGF/uSG+0pEvsRzeMhZMqY2Tmd8oE=
Subject key identifier: 78:39:BC:ED:34:37:F1:FA:0B:08:FB:8A:D1:1A:99:29:5F:21:BB:B4
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial: 0F3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number: 0F29
Signing time: Tue 12 May 2026 17:36:59 +0000
Manifest this update: Tue 12 May 2026 17:36:58 +0000
Manifest next update: Tue 19 May 2026 17:36:58 +0000
Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: CM7Hk6GGXS1WwLWtUgUnBs96FnkQ+fz22AoNr1nPCjw=)
2: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: CJcOsAsRwI2HXjgfMv8XqLziZucuo7uRUTz3QROpN9g=)
3: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: BXSVEWRNWk6Z5rdKJ6F8tnumvM/u/16zJocy0sihtdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3900 (0xf3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
Validity
Not Before: May 12 17:36:58 2026 GMT
Not After : May 19 17:36:58 2026 GMT
Subject: CN=6a03653b-5c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:01:f4:42:36:2b:89:2e:a4:23:58:b9:b2:
e7:14:e7:e1:c5:28:ae:a4:42:b7:84:59:f1:4a:cf:
94:23:86:99:29:a7:55:15:a6:9e:de:a9:22:3b:61:
8c:82:f8:5d:95:8d:19:7e:9f:ba:0f:d6:3b:28:1b:
e1:5d:33:ac:8d:73:d9:84:07:d1:89:07:45:5f:f5:
33:8d:6a:25:fb:80:2d:d2:45:63:49:75:71:1b:be:
ae:de:8c:32:ce:1c:26:f0:58:5c:87:49:d9:d7:d3:
07:de:b4:bc:65:82:c5:c6:47:fb:9c:ca:05:b7:75:
6a:36:2b:a1:f1:4f:68:d5:ab:12:71:c1:2d:73:b0:
90:05:95:70:7e:7a:1b:a9:ba:ac:9e:f3:6e:23:c1:
3a:78:2a:06:af:56:18:a4:67:94:67:f2:b5:32:5c:
14:97:61:ee:b8:20:55:9b:62:3c:4c:76:3f:39:ab:
47:ee:ae:88:67:ce:f0:dc:0a:99:72:4e:91:2b:6d:
a7:9a:85:ff:80:7c:cb:8f:17:96:86:8a:55:23:b3:
53:32:bb:08:ca:a7:cf:50:9a:80:20:3b:30:70:19:
54:3f:08:81:76:ed:df:67:1c:c5:68:c1:7b:91:2d:
61:c0:0a:53:f8:a8:61:8a:a5:0e:af:1b:6e:17:db:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:BC:ED:34:37:F1:FA:0B:08:FB:8A:D1:1A:99:29:5F:21:BB:B4
X509v3 Authority Key Identifier:
keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:fe:07:4f:25:26:f5:0b:d3:4a:06:29:c9:35:e4:22:68:7d:
01:7a:a6:3e:6c:9a:31:f4:42:58:d7:e4:4b:4d:b2:76:2e:f1:
19:ae:c6:e3:6c:94:e8:4f:1a:85:05:9c:33:3a:a1:ea:61:9f:
f9:2b:d2:84:3e:ff:c5:fd:8e:24:d2:67:78:3c:f8:fd:cd:d8:
e8:9c:b5:c0:2a:39:e4:b3:c1:4f:b7:88:12:15:31:20:9c:76:
a6:6d:4e:b6:d7:fa:6e:96:c7:18:fa:d8:ea:bb:d0:df:52:98:
d4:70:63:48:72:f6:1d:83:39:57:48:e7:6f:fd:88:9e:ee:d6:
c1:69:14:8f:3d:62:13:03:c8:cf:df:3b:5d:eb:0a:dd:c3:98:
3a:c8:dc:c4:d0:00:00:12:b8:20:0d:91:e0:da:7d:aa:d0:ad:
97:b5:88:ca:7b:33:f5:f3:08:d2:38:f8:b1:2f:a1:9f:7a:87:
3c:59:af:d1:bc:c4:6f:0d:36:31:e3:83:4d:81:9b:9c:fc:78:
dc:15:31:9b:c0:cb:d3:1e:40:2b:01:8b:48:76:34:27:1d:64:
e5:3d:88:bb:79:07:1e:df:fe:f2:4f:de:20:a4:2e:bf:a8:70:
34:c1:18:45:57:0c:6e:a9:7c:8f:ea:23:c8:e2:95:a9:4c:a6:
89:d5:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:50 2026 by rpki-client