
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: 8yUByDgCcKcWZOunKTT/vTRkNkdhlr/8ofAthRd8weU=
Subject key identifier: 2D:86:93:48:79:5A:24:E4:07:0C:6A:E7:D4:6F:30:69:36:95:16:FF
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 02C8
Signing time: Sat 05 Sep 2026 01:08:16 +0000
Manifest this update: Sat 05 Sep 2026 01:08:15 +0000
Manifest next update: Sat 12 Sep 2026 01:08:15 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: U1va6TNdWW+Y7TmynSXds1By7ze4ax7kcBc169kyUSs=)
2: A087AB8E760711F1A490B62F7BA30FBC.roa (hash: njzkkI9wNTfnXkYP55U43TrhfzxC/wfJfSoPFuagf0M=)
3: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: 3JVZTKT2bTQfUQV6fcjK9Pz/evus9qiGDaA8VU+l7vM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Sep 5 01:08:15 2026 GMT
Not After : Sep 12 01:08:15 2026 GMT
Subject: CN=6a9b6b80-0c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:60:e5:78:1d:eb:ce:ae:b7:24:88:a4:56:
53:33:3c:b5:9e:e4:95:d3:d7:f0:1c:e4:dd:f7:d9:
a8:99:8d:2d:3a:15:22:90:5c:40:1e:e5:bb:0b:5e:
5d:5d:3d:2e:22:d7:7a:3d:ee:ba:14:04:e3:83:8c:
86:93:67:24:50:3f:05:20:cb:f1:43:2c:2b:5a:a4:
8f:f9:6f:59:57:d9:90:00:55:8a:e8:64:49:a0:4a:
0b:03:71:2e:21:5c:07:58:8d:f2:bb:19:1c:05:2b:
c3:b8:59:a5:de:4b:b8:d3:29:9a:ba:12:b4:45:69:
e1:d5:50:39:7a:af:bd:12:12:b7:43:23:51:74:53:
a0:01:37:aa:52:ac:4a:3c:95:aa:cb:a6:dd:08:52:
ff:a6:c9:51:ae:9a:1c:d6:c0:04:de:c8:d2:5f:6d:
66:d4:2f:fa:fa:c1:13:49:5f:e0:31:30:58:71:d0:
8e:cd:18:25:71:8a:3b:af:e3:31:71:01:e6:ce:c7:
20:cd:c5:18:f1:74:2c:91:44:ff:50:d3:ea:41:af:
74:68:05:1d:91:e4:c6:ef:38:d7:cd:59:7d:de:a9:
96:76:7b:c7:d4:bf:8e:d8:58:fd:a0:83:e4:6a:6a:
57:44:19:f0:4d:3e:cf:d9:3a:0c:ed:8d:ff:4e:83:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:93:48:79:5A:24:E4:07:0C:6A:E7:D4:6F:30:69:36:95:16:FF
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:48:59:aa:8f:9e:0f:7d:34:ec:db:d3:84:2e:b0:2c:86:2f:
3f:e9:90:1e:81:f5:8d:43:c2:0d:c0:7f:3b:33:b3:8a:8f:8c:
65:ec:dc:5f:5d:18:85:40:f2:04:ad:f2:29:00:fc:d0:e1:82:
fd:7e:00:0d:e4:64:8c:f1:30:f3:5c:7f:bf:2b:54:b4:2e:40:
99:6b:e4:41:11:d4:30:ae:fc:b2:1d:30:bc:45:43:7e:37:37:
f6:c9:63:00:ee:23:82:a9:4f:42:cd:99:1a:62:76:fa:d7:be:
52:da:71:f4:6b:2e:b5:6f:a3:c7:3f:2c:76:60:cb:f0:2c:81:
9d:0f:b7:dd:08:43:cd:f8:98:c1:ef:b0:da:b9:e9:18:66:ea:
6c:06:fb:bb:08:9a:14:e4:ce:61:fa:bc:5a:af:77:f1:bf:84:
49:29:95:21:59:e7:54:bb:04:42:c9:1b:46:b1:5e:70:0d:86:
9b:33:f5:bd:c6:d8:17:77:d6:16:c2:85:05:62:fe:bc:ee:e8:
23:d3:2a:4f:2f:c4:86:db:6c:a3:aa:8f:a8:a8:68:f9:ef:da:
d8:55:e0:78:ca:e6:e3:a4:db:74:32:1c:f7:f7:60:cb:e3:3b:
60:d4:21:29:59:a4:c9:f6:d0:0e:c3:d1:3d:bd:7c:c9:49:66:
61:8b:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:21:40 2026 by rpki-client