
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json)
Hash identifier: lqvqrYEk0vQRe/dzf6Qvr4QzFz5k6kdIrwvfYIN85gA=
Subject key identifier: BC:1F:10:04:60:9F:C4:D6:19:15:5E:A2:73:3B:18:F7:9E:58:6D:A3
Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Certificate serial: 0386
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
Manifest number: 037F
Signing time: Wed 23 Sep 2026 00:22:45 +0000
Manifest this update: Wed 23 Sep 2026 00:22:44 +0000
Manifest next update: Wed 30 Sep 2026 00:22:44 +0000
Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: /PWEpvA/QWBbwj4JktD7p07QztApBISOcdKRrTSRq64=)
2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: 29K2ZnxfsREabwvW75JdevdfpxGttuGyu01zW0uB57A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Validity
Not Before: Sep 23 00:22:44 2026 GMT
Not After : Sep 30 00:22:44 2026 GMT
Subject: CN=6ab31bd4-cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:9b:da:41:bc:25:0b:b2:dc:6d:14:1e:63:
91:c6:08:d3:e5:02:f2:aa:64:bc:31:8b:0d:b3:e1:
ac:f3:42:73:a5:62:5c:bc:4f:0b:b4:a8:2d:aa:c2:
22:d0:72:6f:6b:23:55:ea:90:0e:71:3c:7c:d2:96:
fd:2a:cf:11:8c:da:98:db:97:d6:89:3b:96:82:3d:
7a:b6:75:fe:f4:d8:90:24:eb:93:37:de:31:1c:b4:
bc:b2:0c:84:04:fb:4e:4a:42:12:bb:47:3d:ff:b8:
0b:8b:3c:14:b0:e7:46:61:5f:6a:1d:e2:8c:de:05:
f9:8b:0f:d5:f8:26:18:dc:e8:92:e4:7b:1e:74:bb:
f6:89:31:c3:ef:8e:72:21:00:14:97:29:ef:01:db:
01:6d:de:78:00:25:24:7d:51:c4:9e:a8:d8:d5:29:
72:ef:e9:eb:4e:9f:b6:6f:4b:73:f6:1f:ca:37:90:
5a:d4:b8:a1:4e:7e:fe:a4:d7:46:ee:37:6f:50:d3:
63:d9:b2:c3:fa:49:d4:37:c7:f3:12:53:9d:7e:ea:
23:21:3c:4b:75:63:57:19:a7:c3:c0:0f:15:57:59:
53:39:cb:c0:5f:c8:29:c8:b4:07:cc:59:af:71:e2:
31:5f:1a:0f:f1:29:c0:af:5f:fe:14:97:f4:06:74:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:10:04:60:9F:C4:D6:19:15:5E:A2:73:3B:18:F7:9E:58:6D:A3
X509v3 Authority Key Identifier:
keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:04:29:9e:0a:4f:4a:17:dd:b9:ab:c1:30:0c:7b:25:d0:39:
f9:fc:24:78:21:c3:e0:71:ec:e6:55:94:00:95:7a:a0:5b:a6:
20:26:60:ce:c6:4b:f4:ab:2a:9f:97:fa:6f:4f:c9:83:8f:27:
a7:73:5a:70:50:f2:29:c1:02:77:86:c5:27:55:58:f0:1c:e1:
83:cb:15:d1:c1:14:d8:4c:5e:9b:fc:60:c1:5b:2f:f4:64:1d:
5c:c2:42:b4:62:f6:86:17:32:81:f9:3d:d3:da:48:18:b7:0f:
9d:b0:2c:4b:db:ed:98:64:19:5f:e7:ac:ba:cf:5e:87:aa:d2:
fb:69:fa:81:f9:5c:a6:88:5f:c8:7e:31:30:74:78:c4:f0:ac:
f6:94:bd:b7:4f:32:3e:35:b5:8b:78:fd:1f:ea:49:e7:ea:d6:
a2:45:76:0a:ea:18:8f:88:ed:ae:fc:7a:f5:da:74:bb:a9:94:
d9:e6:50:87:04:53:ca:04:d6:c2:16:dc:e3:91:71:89:e5:fe:
94:55:7d:55:31:d0:2a:b5:c6:e9:70:42:8c:12:11:e6:48:e0:
ca:6e:f0:9b:1e:0e:c2:06:b8:37:e1:39:53:fd:a6:a5:cc:80:
a7:e1:fc:5a:b2:04:b2:d6:ca:20:e8:ae:a2:8e:f8:23:f9:6f:
37:da:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:51:25 2026 by rpki-client