
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier: ycbPtU1CsOo4EQVAN+o51dALC//lI3Wgmzj9Zd6w3lQ=
Subject key identifier: 79:09:86:59:FE:ED:A5:52:33:68:A9:01:EE:64:2B:90:38:07:4E:F4
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial: 0864
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number: 0859
Signing time: Wed 22 Jul 2026 21:27:47 +0000
Manifest this update: Wed 22 Jul 2026 21:27:47 +0000
Manifest next update: Wed 29 Jul 2026 21:27:47 +0000
Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: 38HkgQK377MVrMKL67XJp6nfYJXaXgvGDrtQ46IDYuI=)
2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Validity
Not Before: Jul 22 21:27:47 2026 GMT
Not After : Jul 29 21:27:47 2026 GMT
Subject: CN=6a6135d3-716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:57:a5:5e:80:6e:c2:da:ab:1b:ef:11:05:
5a:d0:18:b8:e7:bf:90:8f:19:2f:23:6b:34:ca:7c:
0e:11:ab:a3:53:3a:0e:1d:9d:c8:6e:86:63:f1:7c:
3e:74:6b:5d:2f:05:15:e8:a8:08:74:96:a2:1d:57:
6b:c3:cb:7f:42:01:10:85:6a:d5:1e:45:61:c4:1d:
98:fd:b7:01:82:16:c4:25:bc:41:d1:36:2f:67:4b:
83:81:38:eb:67:4b:cd:6e:0b:1b:53:f3:ab:17:22:
83:c3:3a:df:b7:2c:5f:80:52:c8:e5:5c:ec:14:84:
9e:ed:7c:fc:11:db:53:d7:e6:05:4e:51:de:92:38:
99:a1:b9:0f:b8:31:f7:d6:b0:de:35:ac:22:56:13:
23:63:34:b3:42:40:a9:79:6e:86:fe:1c:df:52:a4:
d2:4b:2c:45:0b:ee:4e:76:7c:74:77:c1:e1:9a:71:
ea:8d:ae:57:04:7e:b0:aa:b6:db:5e:58:76:84:fd:
64:92:e9:6f:cf:d1:e3:e5:f4:49:7b:8e:3d:6d:45:
77:90:b0:6c:80:c9:05:e9:87:88:b3:77:22:c3:30:
1d:c4:44:cb:50:89:b8:67:52:b9:0c:20:35:07:83:
e7:1e:b6:e6:e0:9a:c9:3b:31:40:c5:ee:92:49:6f:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:86:59:FE:ED:A5:52:33:68:A9:01:EE:64:2B:90:38:07:4E:F4
X509v3 Authority Key Identifier:
keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:88:b4:27:8c:97:78:0b:a6:f3:68:30:f3:aa:c1:8c:cc:c5:
a4:d4:14:df:c6:38:7a:83:db:b4:b0:8a:dd:1d:99:66:a4:62:
02:84:36:a1:d8:32:6d:5c:ad:28:11:97:9c:39:3b:f7:89:5c:
59:2e:e8:5f:08:a6:89:21:d3:c7:ab:47:bc:0b:38:f5:61:16:
64:45:27:c4:99:04:99:87:7a:22:24:e1:7e:a8:b9:31:ed:04:
79:6d:65:f5:05:d6:fe:2f:4c:3c:37:0f:30:49:a4:36:21:ef:
89:0b:b6:a0:c3:3b:6d:b1:22:4a:d3:d5:47:88:7b:20:d6:76:
8f:5f:46:a5:e9:1e:93:33:0c:01:60:f5:5a:ee:df:ea:37:5c:
55:bd:bf:3a:5b:7f:7f:b0:b4:cc:1b:64:a1:eb:57:5c:b1:14:
f2:c3:10:5b:46:7b:3e:24:73:26:cd:ae:04:6e:82:5f:5d:d6:
8e:42:14:60:cb:64:a4:65:7d:60:f4:2b:5e:3a:3f:ae:a5:7f:
96:fd:c2:60:89:fb:16:f0:33:7e:b4:34:24:5a:59:25:2d:66:
1b:54:5e:2d:fd:a5:8b:fd:d2:6a:de:eb:06:59:bd:44:ea:9e:
3d:f1:0c:e2:6e:3b:2c:f7:ce:cf:f6:9c:2d:f1:04:0f:f6:87:
95:dd:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:23 2026 by rpki-client