
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier: ozLj7YSviqHxxgg5UfdwunRZQC1iF7l9p1am62IqoFE=
Subject key identifier: 38:C7:A6:1F:2A:B9:C0:98:D3:97:DE:ED:F1:F7:B5:72:D6:B6:5B:80
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial: 0F60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number: 0F4D
Signing time: Wed 22 Jul 2026 17:43:25 +0000
Manifest this update: Wed 22 Jul 2026 17:43:24 +0000
Manifest next update: Wed 29 Jul 2026 17:43:24 +0000
Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: DaDxnPRQ9YBHOLEfT9WShQaFJGIWNk4Y7LtC+ryw99Y=)
2: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: CJcOsAsRwI2HXjgfMv8XqLziZucuo7uRUTz3QROpN9g=)
3: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: BXSVEWRNWk6Z5rdKJ6F8tnumvM/u/16zJocy0sihtdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3936 (0xf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
Validity
Not Before: Jul 22 17:43:24 2026 GMT
Not After : Jul 29 17:43:24 2026 GMT
Subject: CN=6a61013d-e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:11:88:05:80:24:6b:8f:96:ce:9b:9b:86:
bd:a5:89:e4:b7:36:9b:00:b8:c8:80:77:7d:64:c7:
0f:01:8d:8d:d4:81:5c:77:ad:af:bb:3d:52:4e:c5:
69:ef:d3:1a:2f:6f:9a:06:7c:e4:eb:85:55:4c:45:
04:8a:66:8f:4c:55:28:6d:56:a3:35:73:a4:a8:40:
bd:64:1b:1c:a2:35:02:9f:6d:8f:22:bf:a0:16:d0:
5f:5a:70:80:19:86:66:04:95:ba:eb:22:ba:8b:b1:
5d:6f:91:ee:14:e0:15:6a:0e:63:b3:fe:2f:a4:1e:
9f:04:39:de:8a:34:57:60:58:7d:35:fb:00:d0:42:
04:00:32:38:9b:ca:1a:27:68:4e:9c:00:73:64:2c:
34:eb:a8:94:e4:41:77:85:01:8c:37:0e:40:d9:fe:
2b:a9:57:b4:9c:ec:4c:51:4a:2a:b9:62:b2:10:95:
37:98:85:b2:3e:28:fd:79:a7:c1:1e:18:8b:b6:f4:
f0:94:65:9c:ee:ec:c2:47:a8:10:56:33:d7:f3:58:
63:4c:ab:7c:7c:12:4c:ac:3c:35:50:51:7a:a3:d8:
f4:fe:1b:42:0e:d7:93:77:d7:c5:45:31:1e:8e:fe:
c7:77:91:d7:df:15:a0:41:c5:4c:9c:9b:a7:1b:19:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:A6:1F:2A:B9:C0:98:D3:97:DE:ED:F1:F7:B5:72:D6:B6:5B:80
X509v3 Authority Key Identifier:
keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:16:e1:31:07:25:f2:79:55:13:94:6a:b7:67:23:f6:1e:
bc:be:9e:75:0e:19:73:80:30:3b:59:1a:5a:f0:36:49:60:8f:
17:11:31:b2:6e:38:61:0f:82:4a:0d:74:21:c2:5e:53:96:c1:
b0:c3:d8:7a:31:5b:06:f0:fe:86:e5:ab:a7:30:ed:34:76:cc:
41:ce:85:a9:44:61:77:1c:e3:d9:df:49:a8:14:a9:41:6e:ac:
3c:26:b5:a8:1c:59:40:e4:a6:45:0c:7a:c1:86:c9:e0:f9:80:
47:ab:f5:69:96:cd:8e:da:be:18:0d:c7:69:3c:18:b8:38:f6:
1a:3a:0e:6d:3e:d7:54:d0:b3:f4:88:ec:f4:30:29:ff:a6:3c:
d4:f0:d8:37:9e:24:74:07:03:11:64:2d:36:0f:fc:25:7a:77:
e2:7f:02:1b:12:b2:98:a6:b9:e8:94:66:35:4f:f8:71:3a:2e:
bd:59:4f:d2:59:56:05:9b:6e:fa:77:28:77:b0:1b:94:71:93:
ff:92:e3:7f:ed:58:56:90:e1:3f:c3:df:29:30:18:92:32:76:
cf:67:08:de:b9:ef:aa:05:d4:de:e6:25:ed:89:5b:f7:e0:cb:
fc:1a:12:c8:f2:13:21:92:47:1f:a6:74:80:87:7c:5a:59:ac:
1e:49:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:27 2026 by rpki-client