
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: GaqErCxfI/lWSgtztiyBia7whMLbwmW+mg1aiHOmkTs=
Subject key identifier: FB:03:47:39:D6:4D:FC:75:18:94:1E:AA:56:B7:9A:F2:FF:8E:B6:D9
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 0271
Signing time: Wed 25 Mar 2026 01:25:13 +0000
Manifest this update: Wed 25 Mar 2026 01:25:13 +0000
Manifest next update: Wed 01 Apr 2026 01:25:13 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: kQY+WA7ydRoeOX8B5OWmJ1gpEGhqnvF/Vq5KxG0vyTU=)
2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: fg88o765nCwItF2Hc4hiKhK6MdJibWRYf4SuZ9yJYVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Mar 25 01:25:13 2026 GMT
Not After : Apr 1 01:25:13 2026 GMT
Subject: CN=69c33979-2781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:b9:c9:ad:f0:f0:f5:79:6c:e0:ca:8f:98:
4c:c6:2e:83:f6:f6:5b:fd:d6:a8:52:2d:17:a2:44:
2f:7e:94:16:75:0f:0e:9d:45:d5:28:70:ca:ee:4b:
2a:f4:76:e9:b8:a6:31:ee:7b:0a:3a:53:99:15:61:
8a:a3:a5:6f:4b:f4:18:d8:8b:41:e0:93:ef:21:c0:
f9:2f:45:37:c7:5d:e5:d7:a5:0d:6c:c0:21:99:8c:
d9:8c:82:71:c6:71:64:ad:ab:69:50:1e:e7:73:a6:
58:d1:5c:44:8e:1a:b5:93:fb:db:6c:ae:5b:00:6f:
ae:ed:29:51:cd:c2:c4:9d:18:da:3d:a1:ef:06:3d:
3d:70:7b:e7:8c:01:19:a1:45:c4:45:78:fd:7b:af:
a7:cb:6e:2f:9f:e0:94:f6:da:16:cb:b7:fc:75:dd:
e9:0a:39:09:b3:c4:1b:be:19:c8:78:8c:9a:bd:d6:
43:e2:20:2b:ff:ff:fa:55:cf:57:01:4e:5f:c0:c0:
6c:05:2e:47:85:a5:1d:b4:1a:6e:e9:34:4a:90:64:
b9:45:ab:8e:16:c9:6c:0a:8a:17:71:b9:cf:7b:f4:
2c:35:d6:d0:7b:bc:0a:29:72:4e:e9:25:d1:52:85:
43:9f:4c:d1:a3:77:3f:75:7e:bc:ef:f9:37:c2:e4:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:47:39:D6:4D:FC:75:18:94:1E:AA:56:B7:9A:F2:FF:8E:B6:D9
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:cf:9d:81:c8:83:2a:34:1d:6e:80:9a:4e:fb:4f:15:4e:3f:
0c:28:39:77:27:3d:5a:0a:6e:0b:7d:9c:c7:03:9f:25:c4:13:
b4:bd:38:72:76:8c:d7:89:82:00:cd:5c:17:82:3d:f6:bf:69:
f3:e2:27:68:85:aa:d0:24:56:89:01:f3:8f:2e:25:bf:20:d7:
d5:04:34:6f:45:d7:89:2c:59:59:2f:ed:11:8e:54:5d:e2:b9:
b1:9e:b5:17:51:41:e6:ee:79:ff:a9:0a:15:7b:88:0f:43:b1:
bb:21:7c:4c:2e:56:9e:6c:f9:e6:18:de:cd:64:2e:e3:7b:15:
73:e5:2c:d8:e3:26:9e:d0:65:ff:78:c2:08:e4:33:2b:3b:b0:
44:e2:11:54:ec:a8:bc:7a:17:42:ef:59:50:7e:11:57:f4:73:
2a:78:a8:06:fe:42:22:5a:1b:e3:a3:f3:76:43:52:ec:51:4a:
e2:01:fb:93:85:84:c5:a4:4d:51:c6:98:5e:ae:0f:a2:fa:e0:
d9:db:83:6c:ea:01:be:65:e9:6e:16:f0:cb:29:bf:09:9b:46:
9f:20:61:45:11:83:91:29:3d:ec:02:35:8c:19:55:73:24:3e:
b8:d0:26:01:9c:3e:38:44:03:19:22:99:fc:bf:7f:b5:58:fa:
0d:79:96:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD
MjUwRTgwNzgwHhcNMjYwMzI1MDEyNTEzWhcNMjYwNDAxMDEyNTEzWjAYMRYwFAYD
VQQDEw02OWMzMzk3OS0yNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Ki5ya3w8PV5bODKj5hMxi6D9vZb/daoUi0XokQvfpQWdQ8OnUXVKHDK7ksq
9HbpuKYx7nsKOlOZFWGKo6VvS/QY2ItB4JPvIcD5L0U3x13l16UNbMAhmYzZjIJx
xnFkratpUB7nc6ZY0VxEjhq1k/vbbK5bAG+u7SlRzcLEnRjaPaHvBj09cHvnjAEZ
oUXERXj9e6+ny24vn+CU9toWy7f8dd3pCjkJs8QbvhnIeIyavdZD4iAr///6Vc9X
AU5fwMBsBS5HhaUdtBpu6TRKkGS5RauOFslsCooXcbnPe/QsNdbQe7wKKXJO6SXR
UoVDn0zRo3c/dX687/k3wuRwvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsDRznW
Tfx1GJQeqla3mvL/jrbZMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD
QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n
SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE
UUtJX3NJRm5XVkhDVU9nSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAks+dgciDKjQdboCaTvtPFU4/DCg5dyc9WgpuC32cxwOfJcQTtL04cnaM14mC
AM1cF4I99r9p8+InaIWq0CRWiQHzjy4lvyDX1QQ0b0XXiSxZWS/tEY5UXeK5sZ61
F1FB5u55/6kKFXuID0OxuyF8TC5Wnmz55hjezWQu43sVc+Us2OMmntBl/3jCCOQz
KzuwROIRVOyovHoXQu9ZUH4RV/RzKnioBv5CIlob46PzdkNS7FFK4gH7k4WExaRN
UcaYXq4Povrg2duDbOoBvmXpbhbwyym/CZtGnyBhRRGDkSk97AI1jBlVcyQ+uNAm
AZw+OEQDGSKZ/L9/tVj6DXmWeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:48:50 2026 by rpki-client