
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
File: ax_z7YHR7aC43YxdpE5A-css0q8.mft (raw, json)
Hash identifier: EyPdFqo7AGAtR4shoBXq8z+TONEshA85iF6x/7Bqkzo=
Subject key identifier: C4:21:04:BF:0B:D0:77:B9:A9:2E:02:2A:34:29:EE:6F:EF:9F:A2:57
Authority key identifier: 6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF
Certificate issuer: /CN=A9175C96/serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
Manifest number: 30
Signing time: Wed 23 Sep 2026 08:26:31 +0000
Manifest this update: Wed 23 Sep 2026 08:26:31 +0000
Manifest next update: Wed 30 Sep 2026 08:26:31 +0000
Files and hashes: 1: ax_z7YHR7aC43YxdpE5A-css0q8.crl (hash: 2PO1GOgEgKFOju4DYDNkE3wxnGjqSyWZF7vifMzZnsA=)
2: CC84D0BA710511F1A8E0DB7B65A30FBC.roa (hash: W/k3tTym2pPqddOTOs65rSq65DSs2mHOJ53vJkYkUlI=)
3: F9F4A9C6710511F1AB87369C65A30FBC.roa (hash: vF7yzq71bKd9/EBHrcKUsFw6zWZiI9lEWL6wZYfxLto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl
rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175C96, serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
Validity
Not Before: Sep 23 08:26:31 2026 GMT
Not After : Sep 30 08:26:31 2026 GMT
Subject: CN=6ab38d37-dcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:f7:e3:4d:1a:0c:e1:e8:cd:c8:b6:54:50:
c3:f7:e9:2f:81:96:01:d5:50:fd:0e:bc:95:c4:ce:
c1:36:84:71:18:8d:68:40:c8:35:c4:a9:b9:8b:7e:
50:7a:2f:b0:03:08:af:de:e9:0e:ef:0e:da:88:5a:
ed:fa:79:0c:44:e4:25:ac:a6:9a:d0:ee:17:0e:7e:
7a:a4:78:63:90:77:21:2b:b2:05:31:aa:aa:bd:ae:
9d:64:e2:08:19:49:65:87:48:5f:0c:e4:49:35:37:
93:05:ea:cd:b7:44:b1:7c:8c:b4:a3:17:fa:8f:4c:
79:65:e2:36:c8:eb:81:0a:56:da:8f:eb:16:55:47:
43:62:fd:64:cb:01:a0:ec:03:39:02:1e:be:02:a0:
75:27:f6:3f:56:1d:45:74:c5:89:19:9c:8f:11:99:
22:42:07:e4:17:db:3e:8e:1f:19:38:1f:d8:72:bd:
91:7c:7d:a7:5c:76:55:44:12:b2:b8:a0:a6:ad:ed:
9e:d8:68:8e:14:b8:8b:c1:76:ee:bb:2a:bc:90:46:
d6:36:d6:d6:fe:bf:b5:13:f8:a2:1f:e9:e1:a7:e9:
34:7c:25:1e:2f:f1:00:18:f9:f8:d6:5d:75:9a:7b:
7b:51:6a:61:b7:8c:15:55:87:76:00:e4:a1:1e:72:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:21:04:BF:0B:D0:77:B9:A9:2E:02:2A:34:29:EE:6F:EF:9F:A2:57
X509v3 Authority Key Identifier:
keyid:6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:49:6a:ed:da:60:df:43:3d:2f:50:28:6f:8b:6a:4d:80:f4:
3b:96:18:92:93:9d:69:bd:3d:64:16:d3:00:e4:be:b7:48:81:
2a:10:6b:33:3c:69:5a:6e:5f:42:4b:e0:6c:f4:9e:2a:10:21:
ac:c8:b1:e3:0c:9c:90:82:b6:b9:d5:76:b0:ef:ce:21:2c:da:
c2:89:05:98:c6:87:70:d7:99:51:3a:9c:01:b1:57:9b:a3:f6:
15:f8:70:f7:f4:50:be:0a:ab:31:c7:47:39:56:83:9a:f0:88:
b0:d2:1a:6f:a2:d0:0a:ee:11:4b:d6:1d:d0:f5:80:2a:a9:56:
32:7f:cd:a2:5b:90:a9:88:bf:1b:a8:0b:1e:59:2b:7c:85:ef:
2f:26:13:cf:e2:16:55:53:73:cf:c5:d9:d5:d1:cd:f9:ae:8b:
89:de:83:37:fa:a2:fb:9a:b7:51:fb:65:55:23:a4:86:1a:97:
cf:8a:da:77:b5:22:49:d9:97:59:6d:6f:4c:a7:12:04:2d:01:
f8:82:da:f5:01:05:8b:6b:55:9f:67:91:66:69:3f:60:f8:2b:
8b:72:9c:12:56:fe:ef:08:e2:c2:f0:f8:a7:ad:ae:8a:0b:b7:
8e:61:47:34:c2:9a:8f:09:f3:80:98:28:9a:cc:15:3e:86:4b:
17:b0:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:18:17 2026 by rpki-client