
$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
File: AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json)
Hash identifier: w646xQHYR7OIi2aIhjLZH36HzZgALAWxNGtHcyVZEgU=
Subject key identifier: 84:A8:87:74:AD:01:88:72:26:64:E1:3C:34:44:A8:8F:BD:97:B8:8B
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
Manifest number: 02C3
Signing time: Thu 23 Jul 2026 02:22:08 +0000
Manifest this update: Thu 23 Jul 2026 02:22:08 +0000
Manifest next update: Thu 30 Jul 2026 02:22:08 +0000
Files and hashes: 1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: XeuEo1o0OrsC/FTZzuzwEjrE9ANXax8yU54nHWArxJ4=)
2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: LRYq0mPrjweqGJPSdcgLlt3nrjlK6fosCT9C7fklNuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Validity
Not Before: Jul 23 02:22:08 2026 GMT
Not After : Jul 30 02:22:08 2026 GMT
Subject: CN=6a617ad0-28e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:ae:6a:ca:80:a4:22:76:a9:63:54:55:90:
05:0a:31:b0:6a:1d:ab:3d:60:80:f2:2f:1c:4b:0b:
e3:32:64:1c:a7:7f:bb:55:ff:89:91:b3:2c:a6:d0:
48:3d:b7:01:09:e2:00:49:f4:a6:23:18:f3:4a:5a:
b2:3e:1b:70:ca:49:fd:30:f3:8d:38:62:d3:50:81:
a7:f6:af:5b:55:5f:b9:c6:b7:95:c3:ce:45:bb:c8:
d0:2d:16:d5:0b:c4:fa:0b:75:fa:e1:a8:b0:8c:1a:
42:54:6a:c4:6d:e0:e5:e9:8c:b7:19:27:b2:e1:e0:
07:f7:56:ba:e0:28:b9:35:da:28:4b:48:b4:41:1f:
0c:cb:62:aa:ba:3f:bb:eb:52:3d:6a:36:27:a1:f6:
f8:c5:ba:96:90:c8:4a:34:60:64:d5:3d:00:01:b8:
81:cc:c4:5d:a3:6f:d2:98:8d:10:a0:29:0f:08:76:
1e:ab:5d:e8:9c:6a:17:93:41:80:54:ba:9c:64:69:
98:c7:d0:bc:f9:0b:e6:56:55:62:0b:c3:15:db:18:
42:dc:31:d7:b4:28:1d:c9:63:08:b4:2d:58:c6:4c:
b4:77:85:03:41:de:4f:d6:a2:ec:06:37:30:b9:3e:
aa:56:b9:1f:d3:19:ed:34:69:fc:91:20:ba:1f:09:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:87:74:AD:01:88:72:26:64:E1:3C:34:44:A8:8F:BD:97:B8:8B
X509v3 Authority Key Identifier:
keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:37:72:83:d7:39:54:5c:2f:54:da:69:b8:32:4d:36:37:c1:
58:20:ef:82:b5:2f:54:1f:45:1f:51:1a:6a:20:54:58:31:4c:
06:f2:38:f1:67:17:07:ed:b8:58:e6:2f:96:ba:23:48:86:b9:
fc:d3:4c:06:73:ed:99:c5:61:60:c4:54:5e:fd:6b:69:6c:fb:
25:26:86:18:57:5d:ef:96:9e:56:d2:11:73:ad:d9:ca:81:8e:
a3:b1:c6:be:23:06:05:ee:43:ae:ac:04:c3:45:5a:ac:dd:52:
86:08:01:9f:7c:ff:0e:35:8e:dc:73:34:8c:dc:ad:0e:c8:75:
b6:c1:d3:26:98:85:85:a6:ef:4c:e8:1a:a7:85:c9:12:c6:85:
1a:b7:5b:8f:b3:69:54:34:5d:b2:00:05:d6:d2:17:c8:ea:e1:
79:86:88:3d:af:b3:de:0b:7d:f7:56:96:65:7d:b5:0b:97:44:
2f:91:cf:23:30:f9:ff:05:35:3a:e8:9b:8d:1f:37:e0:69:23:
3b:e8:d9:cd:72:cb:45:00:c6:af:ed:a6:32:39:7f:df:6b:b3:
e2:80:d6:e6:0e:5d:ee:81:f5:84:51:af:99:91:c7:3f:fa:3e:
58:22:d0:e2:a2:fe:4e:10:c9:c0:ce:eb:c0:52:59:df:f4:78:
1f:22:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:39:07 2026 by rpki-client