
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier: RKVBlMzHXsYVABCNpIMksmIpLkLN9IS5qD7QyNOvA0I=
Subject key identifier: 05:BC:1D:EF:14:34:9E:D1:68:35:4D:62:F0:81:5B:69:BA:36:97:F9
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial: 0F23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number: 0F10
Signing time: Tue 24 Mar 2026 17:28:40 +0000
Manifest this update: Tue 24 Mar 2026 17:28:39 +0000
Manifest next update: Tue 31 Mar 2026 17:28:39 +0000
Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: haXFKoAtSuX8ULuEuMZzeRQLjLs60+kwcBMNZilgiBQ=)
2: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: BXSVEWRNWk6Z5rdKJ6F8tnumvM/u/16zJocy0sihtdo=)
3: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: CJcOsAsRwI2HXjgfMv8XqLziZucuo7uRUTz3QROpN9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3875 (0xf23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
Validity
Not Before: Mar 24 17:28:39 2026 GMT
Not After : Mar 31 17:28:39 2026 GMT
Subject: CN=69c2c9c8-50ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:53:8e:ed:d8:76:20:25:a6:f4:92:ee:b0:
99:30:0a:c2:5e:3c:7a:51:55:4a:c3:ff:26:19:8e:
1a:7d:32:03:6f:97:0b:9c:b7:fe:19:04:15:7f:b8:
96:44:72:82:43:b4:59:c9:57:a7:86:41:65:68:1d:
46:46:42:ea:0e:82:86:30:62:64:4e:56:33:6c:b9:
6e:59:82:a4:60:81:c8:61:a7:b0:18:fb:4f:0c:b8:
05:78:85:9a:7f:89:cd:9f:42:76:3b:6b:da:45:13:
79:7d:7d:bb:78:3d:95:09:32:e7:94:c9:a4:6d:14:
c0:66:d4:fa:9c:54:12:61:6c:6e:b3:97:83:8f:e3:
7a:9f:96:ac:81:c8:8a:ae:74:02:82:cc:fa:eb:59:
51:0a:47:9d:c2:65:7d:94:7e:36:bd:97:94:c3:20:
9d:5a:f6:e2:0e:0b:fa:5e:e3:8d:9a:7e:e4:ca:7e:
95:3d:56:ba:b0:0c:c9:99:86:09:f5:93:e2:93:d7:
d3:32:dc:0e:d6:4c:30:ab:53:77:cc:14:e8:c7:f3:
80:da:7e:04:81:48:87:71:d0:c2:7c:29:ea:0b:64:
5c:eb:5b:56:36:69:14:9a:76:d7:b1:ce:07:bc:f0:
a1:bf:da:27:9a:a4:3d:f4:99:e8:c6:24:a9:71:26:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:1D:EF:14:34:9E:D1:68:35:4D:62:F0:81:5B:69:BA:36:97:F9
X509v3 Authority Key Identifier:
keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ee:23:6e:91:a2:38:fc:af:5e:11:0f:d0:8d:f5:bb:3a:b3:
d1:bb:03:1b:5a:29:fa:e2:f3:88:85:b5:8d:58:5a:d8:f2:02:
9f:6b:94:53:f5:b8:cc:77:90:08:22:70:ce:ce:1e:1b:c2:0d:
7e:13:f2:da:8f:a9:bd:28:ca:b7:45:02:d9:c4:c9:9f:58:4d:
ba:6b:80:1a:85:c2:c4:9a:7f:1c:d7:2f:6a:35:0c:00:58:ca:
f4:da:f8:c1:bc:14:ae:da:80:27:00:f6:f5:00:d1:9f:f2:8e:
19:cd:ee:57:5c:17:11:17:b2:6d:90:d1:fd:5e:7e:bf:5f:09:
4c:78:e8:77:b8:b9:f8:07:34:a1:a5:01:3c:79:8e:9e:b7:08:
9e:38:a3:2b:44:67:24:af:87:e5:ec:00:48:e6:18:d1:b8:cb:
a9:40:07:e0:ca:b4:1f:c6:14:c0:46:9c:5a:1a:c5:76:d3:67:
92:90:55:59:fb:07:76:68:56:58:d0:ed:bd:26:4d:99:12:a8:
c2:60:80:98:47:25:1f:75:78:3c:5f:80:90:67:a6:e7:33:ef:
b1:46:36:b6:c8:59:d3:51:7c:81:e6:28:f1:1f:0f:99:91:f1:
2e:5b:f9:91:37:89:2f:df:f0:ea:61:e5:af:68:96:be:8b:13:
56:c3:12:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx
MzM5MTAxOTIwHhcNMjYwMzI0MTcyODM5WhcNMjYwMzMxMTcyODM5WjAYMRYwFAYD
VQQDEw02OWMyYzljOC01MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkBTju3YdiAlpvSS7rCZMArCXjx6UVVKw/8mGY4afTIDb5cLnLf+GQQVf7iW
RHKCQ7RZyVenhkFlaB1GRkLqDoKGMGJkTlYzbLluWYKkYIHIYaewGPtPDLgFeIWa
f4nNn0J2O2vaRRN5fX27eD2VCTLnlMmkbRTAZtT6nFQSYWxus5eDj+N6n5asgciK
rnQCgsz661lRCkedwmV9lH42vZeUwyCdWvbiDgv6XuONmn7kyn6VPVa6sAzJmYYJ
9ZPik9fTMtwO1kwwq1N3zBTox/OA2n4EgUiHcdDCfCnqC2Rc61tWNmkUmnbXsc4H
vPChv9onmqQ99JnoxiSpcSb9CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAW8He8U
NJ7RaDVNYvCBW2m6Npf5MB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4
QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0E2RS83OUVDRTgzODk4QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tY
aEZmZml0b3BFUUFUT1JBWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvO4jbpGiOPyvXhEP0I31uzqz0bsDG1op+uLziIW1jVha2PICn2uUU/W4zHeQ
CCJwzs4eG8INfhPy2o+pvSjKt0UC2cTJn1hNumuAGoXCxJp/HNcvajUMAFjK9Nr4
wbwUrtqAJwD29QDRn/KOGc3uV1wXEReybZDR/V5+v18JTHjod7i5+Ac0oaUBPHmO
nrcInjijK0RnJK+H5ewASOYY0bjLqUAH4Mq0H8YUwEacWhrFdtNnkpBVWfsHdmhW
WNDtvSZNmRKowmCAmEclH3V4PF+AkGem5zPvsUY2tshZ01F8geYo8R8PmZHxLlv5
kTeJL9/w6mHlr2iWvosTVsMSYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:07 2026 by rpki-client