
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: MyTcSE8XknHBn6P1/ZwaKrVWLzm+q5LTv9IlSonwYUo=
Subject key identifier: 23:7C:A9:CB:D8:C8:08:F4:C4:58:DD:6D:B4:0A:DC:D7:41:5B:4A:F7
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 0882
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 0877
Signing time: Wed 22 Jul 2026 21:17:47 +0000
Manifest this update: Wed 22 Jul 2026 21:17:46 +0000
Manifest next update: Wed 29 Jul 2026 21:17:46 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: 7L7f5P2pgTiKIAvrJzsD6n63wVhElqg/5K9yCOlwDPU=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Jul 22 21:17:46 2026 GMT
Not After : Jul 29 21:17:46 2026 GMT
Subject: CN=6a61337a-18ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:46:a7:4b:aa:bc:96:f6:0b:c5:90:2d:c8:
14:2e:94:f5:66:72:f8:5b:ea:3f:0a:2a:7d:c2:12:
6c:55:61:64:88:d2:89:4c:d3:36:da:2f:e2:21:05:
b7:97:c1:41:5e:8c:2b:4f:c7:38:7c:b8:6a:99:b7:
31:fb:81:fe:8e:c4:35:22:59:4e:1d:db:f8:10:c4:
71:ac:fb:e9:27:e4:0a:6a:b4:c8:3c:1b:04:f0:e3:
15:59:e4:91:98:87:ac:46:fd:de:5c:29:10:ce:8c:
2f:64:12:d0:46:4d:6a:4c:bf:4e:95:ef:bb:2d:59:
ae:92:61:32:ef:c5:33:84:b2:d6:b0:a4:c6:4a:4f:
04:46:d7:70:63:07:a0:6f:73:87:e4:66:b0:09:d7:
48:f6:c9:36:3e:f0:66:e5:b9:ea:77:f4:69:4e:ac:
37:49:b6:eb:5a:74:b4:ac:cf:7a:18:46:07:a9:53:
65:96:75:a5:3f:16:6a:03:d3:43:b4:8d:99:ef:b5:
70:8f:47:b9:30:27:8c:17:b0:07:32:c7:38:11:f0:
6c:3c:9a:c2:26:97:4f:8f:4a:8d:b2:3e:30:26:a6:
f8:ad:0e:34:1a:f3:be:a1:10:42:45:b9:11:b5:d1:
0c:70:37:87:ca:d7:4d:a4:c9:41:07:22:02:d4:00:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:A9:CB:D8:C8:08:F4:C4:58:DD:6D:B4:0A:DC:D7:41:5B:4A:F7
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:96:70:25:cd:e1:ea:ed:a6:b5:2e:35:86:dd:3f:ca:90:56:
cc:f5:43:3a:76:ad:6f:65:30:d2:bd:04:ea:41:7b:7d:ff:62:
78:2d:3a:21:f3:53:b6:52:94:e1:d2:c5:ca:1b:f8:6c:fc:cd:
f9:5e:df:9a:dc:bc:73:6c:51:dc:5b:ce:c8:26:be:f1:99:d5:
28:61:91:b6:f5:b7:9d:d3:3e:f5:8d:37:e7:5c:1f:7c:c7:c7:
6a:66:1e:b3:13:a9:85:5f:92:eb:cb:08:52:76:a6:d8:40:e2:
2a:e9:19:d8:d9:e0:e2:8c:62:23:8d:22:a7:1b:0b:2b:8c:c7:
b3:4e:7d:0a:e5:f0:8a:c6:15:da:d9:fb:e0:0d:2b:8f:c0:50:
b7:11:7d:40:c8:fa:29:2f:34:5b:1f:3e:4c:5f:e6:fe:c1:25:
9a:f8:03:81:0d:52:7e:d9:1c:38:e9:09:70:aa:52:a5:de:a3:
2e:0b:ee:10:fd:dc:6c:4e:a4:be:2b:4d:9e:f2:27:15:87:9f:
a7:69:44:5f:28:4c:75:8c:2f:6c:72:e1:84:4d:20:66:a7:5a:
b7:33:84:6f:59:11:2c:74:98:67:03:cc:57:f1:a0:c0:09:20:
68:9b:51:72:78:5f:eb:a5:9b:52:f3:25:81:8d:f7:73:ad:dd:
19:4a:e3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:59 2026 by rpki-client