
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json)
Hash identifier: xRlmVn9wK8K6azqnrCAx0aJb2oRhiy6wqob34loiVEs=
Subject key identifier: D4:70:0E:B5:13:51:D1:15:57:09:8D:C7:B9:95:25:43:35:7A:29:E0
Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37
Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
Certificate serial: 10B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
Manifest number: 10AA
Signing time: Wed 22 Jul 2026 17:29:56 +0000
Manifest this update: Wed 22 Jul 2026 17:29:56 +0000
Manifest next update: Wed 29 Jul 2026 17:29:56 +0000
Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: H+S2g73aLkden47IkoPyJeBS7F43OiJNxSMqL4Eo0BM=)
2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: qFHFmRVCbMNHnJYtHdzfYVVLl0Q/VMUun8JPyz9/IMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl
rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4281 (0x10b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
Validity
Not Before: Jul 22 17:29:56 2026 GMT
Not After : Jul 29 17:29:56 2026 GMT
Subject: CN=6a60fe14-6976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:f3:d1:f3:3c:6b:b1:1a:af:c6:90:8d:11:
32:1c:4d:f2:aa:e6:d8:8d:38:93:c8:10:5a:c9:31:
0f:6b:53:63:72:02:19:54:d5:cf:a1:e0:f9:9a:0b:
4d:5e:4c:0e:04:31:fe:f5:b8:81:b0:d9:7b:33:96:
94:d5:bc:7f:4d:e7:ac:5d:b9:20:52:bb:7a:64:cc:
4e:ea:44:45:b6:0e:ca:bb:d1:87:52:b6:47:f4:70:
51:fc:89:cb:c8:87:38:e8:07:35:fe:fe:49:83:ee:
9b:30:11:f6:f4:38:fd:c2:ce:1a:9c:e9:25:7f:53:
b2:29:81:28:c7:57:b1:6f:93:a7:4e:0e:12:eb:e7:
52:ed:93:9c:d7:ab:a3:55:c9:49:75:fb:05:64:e9:
b9:ec:7f:61:51:eb:c7:ff:dd:78:7f:01:c3:c9:2b:
08:e1:c6:6e:df:69:3d:ef:55:4c:29:d7:7c:f2:6b:
0f:e4:6d:36:3e:7e:00:7c:4b:68:f4:06:8d:55:c4:
bf:13:1b:33:3a:80:93:f1:53:fd:2f:2e:f5:45:14:
25:cf:b9:fc:ab:ab:92:b9:ff:86:54:10:85:2c:ca:
17:cc:27:c5:19:81:d2:9c:d1:fa:b2:c9:8b:56:3c:
d7:0e:d8:e7:8b:71:ff:7f:af:2a:bf:17:98:c0:5a:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:70:0E:B5:13:51:D1:15:57:09:8D:C7:B9:95:25:43:35:7A:29:E0
X509v3 Authority Key Identifier:
keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:11:6b:bd:9a:cd:fd:aa:2f:b1:88:1f:f3:1e:b5:62:f0:37:
e8:a4:dd:2b:7c:ed:63:14:5a:15:c9:b0:ec:c9:30:f7:71:be:
48:a2:8a:11:81:39:5d:0e:8d:bb:c4:1f:5f:0c:a0:75:25:f7:
90:ce:e7:fd:a4:1f:93:5a:b6:45:17:fb:fc:e8:63:8a:62:ef:
61:1f:d8:02:83:e3:e4:9f:31:db:34:ce:ac:39:bd:cb:53:3a:
3c:e5:e0:38:a3:0b:78:97:ad:63:34:0e:8e:00:53:ed:06:11:
dc:50:14:51:cd:47:af:3c:23:37:f5:96:aa:a2:4e:c5:90:72:
63:d0:56:3c:83:4a:42:e1:5b:58:8d:9e:85:06:8d:82:07:84:
38:8d:9a:14:e0:5b:07:81:75:6a:b8:5a:ad:1a:8f:7d:76:1c:
28:12:ee:a1:6d:e3:7e:5d:5c:79:16:2c:7b:92:7d:02:7f:62:
3f:ce:31:ef:9b:39:2b:f5:d7:ff:32:e5:9c:cb:be:63:fe:e8:
f0:17:43:fb:89:f9:11:34:de:2d:04:65:42:44:aa:d9:a9:73:
98:66:83:26:94:d3:65:cf:23:b8:9f:c0:7e:13:dc:95:3b:a8:
e1:eb:22:69:71:c9:c0:42:98:ac:77:b9:17:76:44:1f:49:a0:
95:a8:5d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:19 2026 by rpki-client