
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier: lhlTVg4JCylZF5dYarkw3IvMZun0c+G9WlkAruJreDg=
Subject key identifier: 6B:12:67:43:8A:CD:79:D4:B1:A7:B5:0C:36:D9:84:9B:B6:51:48:3D
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial: 0884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number: 0879
Signing time: Tue 22 Sep 2026 20:37:25 +0000
Manifest this update: Tue 22 Sep 2026 20:37:25 +0000
Manifest next update: Tue 29 Sep 2026 20:37:25 +0000
Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: Kp5m20DKh+5NP+6NkCUu4KJ41bfbQc6IcaBkZX5N6M4=)
2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Validity
Not Before: Sep 22 20:37:25 2026 GMT
Not After : Sep 29 20:37:25 2026 GMT
Subject: CN=6ab2e705-2efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:76:cd:f1:8e:a7:72:5a:35:0e:5f:79:5c:
53:f7:eb:82:33:0e:95:ff:02:74:07:db:c4:dc:c6:
d4:9a:a3:73:54:9b:52:6f:91:83:b1:cd:ca:0a:e7:
49:88:8b:91:18:ca:a2:c3:3a:a3:de:be:93:eb:e9:
ed:b7:4d:c1:04:4a:13:04:54:4e:8a:dd:21:14:42:
aa:94:4c:d2:cc:40:75:ba:0a:aa:d4:ba:4b:25:be:
c8:2d:a3:8c:7a:ff:a2:ea:46:fd:6e:f7:eb:a5:52:
36:7c:e7:26:95:6b:4d:94:44:78:8c:cd:af:39:63:
0a:42:e8:ce:86:a3:77:73:ec:2f:a0:28:25:7f:43:
01:76:f3:0b:6b:2c:e1:88:f3:af:dd:e2:e2:bf:24:
05:4f:b9:6c:6a:a5:97:a2:4a:93:51:74:8f:48:b5:
e9:0a:a6:71:e2:72:8d:0e:7a:e3:50:ab:4e:49:be:
d0:78:a8:66:e3:4d:ef:14:de:be:de:08:58:af:06:
47:6c:4c:13:23:11:1a:db:d8:d5:14:67:b6:60:e5:
6b:fa:db:6e:40:4a:f2:d6:ba:d3:2e:73:a2:25:b2:
00:8a:99:15:18:fc:6c:4e:03:ef:51:b2:f5:7a:1b:
80:b8:21:7e:05:2d:54:3e:d2:02:84:95:be:3d:82:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:67:43:8A:CD:79:D4:B1:A7:B5:0C:36:D9:84:9B:B6:51:48:3D
X509v3 Authority Key Identifier:
keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:95:4a:97:df:b0:6b:86:d5:97:d5:8e:31:0d:12:68:cd:ab:
58:47:e2:e9:70:23:31:fb:0f:0c:0b:59:5c:67:0b:21:af:02:
66:cd:83:7c:dc:ad:ba:45:50:74:86:2d:13:f7:4d:0c:bf:02:
b3:a1:a9:c7:8b:be:57:54:e8:83:1f:73:6e:41:05:3a:cd:60:
36:c7:e5:be:9a:9b:1a:b1:12:2c:00:47:e0:b3:9a:02:dd:74:
38:fd:b9:33:cd:e2:b8:ab:f8:2c:30:2b:6a:aa:fb:49:17:52:
22:64:95:57:be:f5:01:99:9a:e3:fa:82:ef:6e:c0:32:34:6e:
7a:ab:6c:e6:05:21:1b:a6:8a:16:0c:8a:24:fb:6d:de:77:50:
a2:31:36:56:99:03:37:1c:6e:e6:91:84:ec:e0:c0:c7:26:5c:
81:59:91:21:d7:b6:42:e9:7f:79:52:b3:08:4d:9a:cc:19:7b:
07:16:e2:fd:20:01:3c:0f:5e:b4:63:e9:5b:f9:fd:31:61:85:
3e:73:75:57:78:54:72:b3:1b:fc:6e:0e:c9:24:ad:81:ab:22:
37:b2:a2:59:0c:08:82:c2:b0:5f:bf:48:d1:05:9a:37:c9:c5:
78:ac:02:8c:dc:57:5c:95:15:5d:39:4b:35:63:3a:1f:86:16:
4f:c5:02:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:07:30 2026 by rpki-client