
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
File: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft (raw, json)
Hash identifier: SlF4HlWmZaQFrxAJ+04TEdWmm1b8jX/Uw+i1QkkxkrY=
Subject key identifier: 39:FE:8C:31:6D:7D:55:B9:24:4E:0B:AC:9D:31:5C:9F:5A:3F:20:37
Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Certificate issuer: /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
Manifest number: 54
Signing time: Thu 23 Jul 2026 10:17:07 +0000
Manifest this update: Thu 23 Jul 2026 10:17:07 +0000
Manifest next update: Thu 30 Jul 2026 10:17:07 +0000
Files and hashes: 1: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl (hash: ItT9wGTiz80E7HGyCysOSdYCds/I4lZTTug4thau1eE=)
2: 9ABBE50C0DFD11F18537B598053D8C67.roa (hash: B/TqzACGEfySc+XaR76BsEZga/Tqj8LPu2hT0skPKbE=)
3: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (hash: hWKKvsTt7zCxD5Fv8v2sGwk7XoSlQUlgVYDrraM8C1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Validity
Not Before: Jul 23 10:17:07 2026 GMT
Not After : Jul 30 10:17:07 2026 GMT
Subject: CN=6a61ea23-00ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:a8:47:62:ce:8e:89:0e:1d:fa:26:e8:3e:
75:6e:dd:b2:e6:eb:8e:8c:39:97:1c:fd:8d:a4:f3:
32:7e:c5:a9:85:f0:b0:94:27:58:2f:19:d4:cb:da:
2c:7b:91:83:95:2d:62:cb:52:aa:85:52:67:a0:a4:
41:22:d6:3b:df:75:68:ad:06:5b:2f:17:08:cd:f0:
81:be:b0:2e:30:57:ff:9d:a4:4e:4d:35:7c:d7:3d:
18:b8:63:a7:bf:b8:2a:6b:f9:1c:25:92:64:04:94:
e1:7c:76:76:8b:b2:35:36:be:83:01:f9:ae:64:03:
d0:43:93:a9:5c:45:39:2a:ce:30:dc:7a:ae:07:bf:
48:38:f1:26:4e:ea:96:30:b7:c5:6f:7f:c9:54:43:
3d:b4:14:62:7d:b3:d5:cf:06:5e:f9:90:be:1e:46:
f3:26:8b:95:a3:fb:c6:e1:6c:2c:c4:16:91:59:dc:
e2:92:83:18:3f:34:24:34:32:9f:8d:24:b1:8a:99:
4b:1b:87:de:65:6c:23:e8:ff:99:26:42:31:e4:0f:
8d:b1:11:50:16:22:05:aa:47:cb:9d:e6:02:70:c4:
a6:1a:f1:ae:25:db:62:11:73:26:93:60:21:d8:a7:
eb:10:63:0c:0d:91:ba:63:c1:f9:e6:82:e6:0e:ec:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:8C:31:6D:7D:55:B9:24:4E:0B:AC:9D:31:5C:9F:5A:3F:20:37
X509v3 Authority Key Identifier:
keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:1f:d4:0e:b1:18:e2:8d:1d:37:15:b4:3d:d5:64:9c:90:
bc:d0:52:f1:4e:f0:24:66:54:9f:f2:3f:ef:4b:54:4e:d2:9c:
a9:83:da:86:d2:59:ca:0a:07:25:03:68:91:d0:17:a6:48:6a:
a5:43:af:46:a9:6c:9d:a9:23:29:88:72:e6:56:bb:4e:5a:f9:
2f:65:38:08:f6:0e:f7:f5:57:2a:6e:3b:c4:05:25:39:74:bd:
fe:e3:ef:d8:ce:20:14:b0:2f:2e:25:d1:19:4e:c3:5b:75:5b:
ed:bb:5d:6c:59:bf:14:73:f9:84:7f:f3:34:b4:78:f2:72:cd:
2a:f0:00:b3:46:49:68:0d:5d:a9:be:b1:84:c9:18:e6:9b:a7:
d0:12:6f:39:98:8b:ce:c9:aa:46:01:dc:30:23:1f:6c:4f:25:
71:b7:76:f3:62:87:17:37:11:fb:53:ea:6c:10:36:96:6f:01:
ec:00:fb:ba:3f:1d:1d:da:1e:ba:f5:02:f0:85:05:41:dc:50:
5e:70:c2:8a:b4:d8:64:63:ca:7f:d5:f3:73:d6:7d:86:c4:fd:
c3:20:6f:d6:bd:3d:54:06:50:97:6d:43:bc:80:ec:96:2e:9e:
80:d7:66:3c:a9:4b:4c:3c:20:96:22:f9:ea:a9:5b:1a:d5:5f:
84:0a:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:19 2026 by rpki-client