
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: njZP8/fOrl63DaqqFTjqM14ioy6/FpRhBwF8lCD2JDg=
Subject key identifier: 52:BB:CB:B1:C2:A1:F5:88:54:10:D0:FA:DE:FC:5E:61:95:95:4A:20
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 03CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 03B4
Signing time: Sun 27 Sep 2026 00:40:37 +0000
Manifest this update: Sun 27 Sep 2026 00:40:36 +0000
Manifest next update: Sun 04 Oct 2026 00:40:36 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: dMrI6cJBxmOf0jqWrAj+cyYivMkrdNesSFPOPlH5Zx0=)
2: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: x4NHVBzqjdaRb4g6D343UGd0Ui9qfpMZfGfoXAmd0qY=)
3: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: 3Ix6jRXAiLunM3PIJZxVlUi54u6IasjEvRYGdXCHut4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Sep 27 00:40:36 2026 GMT
Not After : Oct 4 00:40:36 2026 GMT
Subject: CN=6ab86604-caef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:47:3d:38:69:f1:b4:4b:e0:c7:0e:54:8e:
e5:56:27:a8:c4:be:7c:50:7b:65:c3:3c:fb:c1:de:
5e:15:fb:71:60:43:cb:e5:23:32:c6:4c:c3:bf:1a:
9e:ec:35:7d:ca:6f:21:0d:95:9b:c9:09:8c:39:53:
7f:b9:28:aa:53:1a:70:f2:71:e7:58:58:91:6d:ff:
2f:d3:c2:2d:ed:eb:35:41:97:e4:d1:3d:5b:c2:32:
6b:d9:5b:86:86:ca:cd:9e:e1:90:da:43:8d:95:ee:
0d:df:38:82:49:15:ca:7b:c7:91:f3:5c:93:42:84:
ae:a0:b7:c2:5e:f2:0e:63:44:25:cc:ad:f8:1c:46:
ae:99:07:bd:7d:8e:4c:05:b4:ce:d3:4a:3d:79:52:
07:99:5b:06:aa:8e:ce:58:db:d9:1f:a5:bf:86:42:
34:18:6b:fe:7f:5e:e4:ce:d7:f9:b5:1a:99:8a:fb:
71:a4:06:77:6e:3c:b4:49:a0:4f:33:70:9b:8f:3c:
02:7c:fd:4d:7d:86:d2:79:f9:6a:56:00:56:dc:ef:
0d:03:f2:ba:8a:01:9a:22:64:d4:d6:ad:59:3e:e3:
a4:e1:fb:af:4d:79:0f:f3:26:82:0a:f6:60:c5:07:
60:91:89:35:79:05:78:27:9f:14:fd:1d:f6:28:ea:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:CB:B1:C2:A1:F5:88:54:10:D0:FA:DE:FC:5E:61:95:95:4A:20
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:60:7d:48:ce:99:d7:d1:70:5c:24:32:58:61:cc:9c:81:
09:74:9e:bf:db:50:f5:33:53:78:79:0a:c0:5e:5f:77:f0:57:
16:0c:f0:ef:79:fe:f7:ed:d8:d7:18:af:df:59:03:e2:29:60:
b8:2b:4c:16:c3:fd:0a:dc:f4:ef:ec:67:11:f5:87:b3:04:f7:
6c:b5:f3:c7:8a:a0:af:ad:67:88:da:d0:fe:55:52:79:f5:36:
fc:d0:fc:1b:45:7a:57:3e:f3:02:2c:8f:90:11:1b:dc:ef:e1:
99:85:ff:85:a8:cc:7e:80:d7:45:82:ac:61:3b:7f:dd:1f:c4:
df:c0:42:2a:07:fe:71:df:6c:9a:1f:4e:b7:4c:6b:35:b8:1f:
2f:0b:66:79:39:e7:b3:95:d0:3c:ff:fa:bc:6c:a9:42:18:24:
39:81:9f:ff:0d:13:60:eb:3e:77:11:ec:13:a8:94:46:cb:6e:
c8:ee:4f:08:cf:f1:46:d6:2d:e2:a7:d0:e1:1f:dd:b2:4f:4a:
f4:8e:f6:06:23:e8:08:e8:15:83:6e:8d:ef:2b:e0:18:ac:7c:
36:d8:4f:4d:42:c3:3b:69:73:03:03:24:ff:50:2e:32:f4:7e:
b6:91:e1:35:a9:7c:73:f7:b1:94:36:9d:bb:a0:8c:2f:ea:15:
7d:dc:8e:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5
Q0RCODFEQ0UwHhcNMjYwOTI3MDA0MDM2WhcNMjYxMDA0MDA0MDM2WjAYMRYwFAYD
VQQDEw02YWI4NjYwNC1jYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoa9HPThp8bRL4McOVI7lVieoxL58UHtlwzz7wd5eFftxYEPL5SMyxkzDvxqe
7DV9ym8hDZWbyQmMOVN/uSiqUxpw8nHnWFiRbf8v08It7es1QZfk0T1bwjJr2VuG
hsrNnuGQ2kONle4N3ziCSRXKe8eR81yTQoSuoLfCXvIOY0QlzK34HEaumQe9fY5M
BbTO00o9eVIHmVsGqo7OWNvZH6W/hkI0GGv+f17kztf5tRqZivtxpAZ3bjy0SaBP
M3CbjzwCfP1NfYbSeflqVgBW3O8NA/K6igGaImTU1q1ZPuOk4fuvTXkP8yaCCvZg
xQdgkYk1eQV4J58U/R32KOrAuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFK7y7HC
ofWIVBDQ+t78XmGVlUogMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4
OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP
SndEWVlpZnZTYU9jMjRIYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgulgfUjOmdfRcFwkMlhhzJyBCXSev9tQ9TNTeHkKwF5fd/BXFgzw73n+9+3Y
1xiv31kD4ilguCtMFsP9Ctz07+xnEfWHswT3bLXzx4qgr61niNrQ/lVSefU2/ND8
G0V6Vz7zAiyPkBEb3O/hmYX/hajMfoDXRYKsYTt/3R/E38BCKgf+cd9smh9Ot0xr
NbgfLwtmeTnns5XQPP/6vGypQhgkOYGf/w0TYOs+dxHsE6iURstuyO5PCM/xRtYt
4qfQ4R/dsk9K9I72BiPoCOgVg26N7yvgGKx8NthPTULDO2lzAwMk/1AuMvR+tpHh
Nal8c/exlDadu6CML+oVfdyO1g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:37:40 2026 by rpki-client