
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json)
Hash identifier: tmPLa10typ9W3dcgE0VA/lCFpbeaAV5ebb4EKR9JDzM=
Subject key identifier: F2:80:7A:EE:49:E3:55:9C:48:A1:56:F2:AF:7E:02:02:E1:BF:F1:35
Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Certificate serial: 0326
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
Manifest number: 0320
Signing time: Wed 25 Mar 2026 00:45:25 +0000
Manifest this update: Wed 25 Mar 2026 00:45:25 +0000
Manifest next update: Wed 01 Apr 2026 00:45:25 +0000
Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: W/CUGlsWepXk67w+cITZ+U7aT97IVCwd9KrVCp2VznU=)
2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: 9y7l5xDl3TqzqRPu7NQw/yrhqKT6b0rd979dT8z29Lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Validity
Not Before: Mar 25 00:45:25 2026 GMT
Not After : Apr 1 00:45:25 2026 GMT
Subject: CN=69c33025-7ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:b5:1d:cc:e3:b3:8b:65:72:17:3c:f1:7b:
4e:37:7a:30:c7:99:03:31:31:d3:8f:e6:57:eb:57:
0a:39:2e:63:09:72:8a:9e:4f:62:be:a7:a9:05:66:
a4:06:53:58:45:b9:c0:df:fe:d8:93:40:79:96:79:
6c:c7:a1:ac:a3:94:32:23:ec:1e:cc:75:07:47:96:
95:1b:ac:f5:6a:47:51:7c:6e:b3:ed:a2:89:18:15:
1f:f8:72:98:af:64:a8:27:91:79:f4:12:57:2d:21:
6d:70:9d:89:74:65:f7:7c:e4:08:1f:b3:98:19:31:
ab:ed:53:5d:3a:bd:1c:2b:60:94:7e:7e:ee:86:2e:
fd:29:14:97:b6:11:d4:0a:9d:20:c3:08:f9:b8:ce:
3c:d9:f7:e0:cd:a3:2f:aa:d0:70:91:14:d6:c7:6f:
8d:42:ca:d0:31:e2:48:2e:68:34:d3:39:2b:50:aa:
9d:4f:c7:94:0c:31:39:e0:5a:39:07:d5:56:fc:77:
c4:28:d2:0e:fb:55:45:e2:c4:d9:33:b1:7c:96:29:
56:30:62:fc:9b:62:51:9c:2d:3e:6f:fc:c8:7d:a9:
2c:b3:51:15:6e:1c:9a:ec:25:84:a9:60:33:2a:d9:
06:d4:bd:44:67:90:e5:2c:ba:25:82:43:f7:59:0e:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:7A:EE:49:E3:55:9C:48:A1:56:F2:AF:7E:02:02:E1:BF:F1:35
X509v3 Authority Key Identifier:
keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:25:48:34:e1:a3:eb:96:d4:8c:3a:5b:fb:94:97:95:fd:bd:
1f:e3:bc:b7:4d:04:b2:d2:d1:ec:cf:30:48:ae:f7:c6:bc:f1:
b2:fa:49:63:91:ac:56:86:d7:22:4f:37:57:fc:82:f6:db:2b:
62:ac:1a:16:59:11:bc:d5:f2:f4:7c:f6:81:ac:bc:17:59:bf:
46:f0:bd:ec:40:c6:28:ec:28:48:86:31:83:d9:4a:dd:93:b1:
e7:86:87:8a:a8:c6:25:00:5d:96:34:11:de:ee:e3:38:29:d0:
57:f2:e4:0e:8d:c0:10:03:f5:b4:de:53:33:77:17:5e:d6:56:
66:da:e9:99:a8:63:5b:6a:48:8f:f9:92:a1:e8:b5:ac:eb:f8:
99:e0:78:e2:81:c1:57:48:6a:ad:4f:11:17:66:0c:76:41:42:
01:52:75:73:48:51:13:d1:dc:d3:7d:c1:08:48:28:32:bb:de:
ff:84:38:01:4f:a1:e3:b5:da:86:d1:6b:de:f0:be:ea:7e:fc:
8d:7a:eb:b2:85:be:d1:44:f8:c3:6d:53:1b:33:41:8d:4d:f2:
b9:b2:50:b8:2c:e7:29:17:1d:c6:4f:d1:99:30:ed:e3:4e:00:
a6:ab:3c:db:58:74:96:f7:d3:a5:0d:cf:9d:cf:c1:8d:97:b6:
2b:e1:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:03 2026 by rpki-client