
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier: mjxGRxE/D09O1xFbfGMzS1N1WSuRFjS2y/TLAHK322Q=
Subject key identifier: 33:C0:8F:45:6C:2F:5A:FF:76:4A:71:AA:73:12:EB:7F:A7:E2:4D:18
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 061C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number: 0607
Signing time: Sun 18 Oct 2026 23:02:48 +0000
Manifest this update: Sun 18 Oct 2026 23:02:48 +0000
Manifest next update: Sun 25 Oct 2026 23:02:48 +0000
Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: GmERdjNvuGaJrgnl6FuLWxtfrolra8omCjzTAIb5yVo=)
2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 23:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Oct 18 23:02:48 2026 GMT
Not After : Oct 25 23:02:48 2026 GMT
Subject: CN=6ad55018-53f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:00:79:f6:62:31:93:e6:95:0b:08:f0:33:
1c:4b:17:fb:86:fe:24:e8:c1:7a:23:1a:c2:f2:25:
d7:34:c0:7e:b9:01:8f:9b:74:ec:b3:04:3f:3b:17:
6c:4b:62:19:c4:f4:a0:03:ff:04:87:1c:34:78:b3:
b5:52:d9:ee:9d:21:b8:b5:61:37:6e:21:a8:e3:b3:
8d:d6:8b:2c:3a:6f:4b:9e:7b:d9:5c:55:47:5e:64:
24:9a:1e:e0:f7:3f:68:92:c6:69:fd:81:52:f1:bc:
b9:53:4b:3c:d3:a9:56:9b:7d:88:14:11:22:0a:df:
39:cf:f4:4d:83:fa:15:1e:36:1c:69:69:65:17:99:
67:cf:98:79:47:30:e0:f8:3b:57:5b:3a:24:d8:62:
14:c3:6e:e7:7f:7b:78:c7:f6:76:47:6c:b1:b9:45:
af:8b:14:f4:78:90:db:f9:c6:03:61:df:8b:30:8e:
e3:b8:8d:8f:ab:05:39:c4:16:1a:26:ab:1f:05:8c:
78:cc:76:e9:c9:bb:55:23:b8:85:d9:e0:fc:e4:18:
2a:a8:d4:35:0c:ee:07:f8:73:cf:73:72:9f:65:a1:
32:60:4b:b6:0c:a5:ea:f9:a6:0a:53:6f:d6:64:29:
fa:51:ce:d4:74:de:3f:be:4a:61:bb:ee:bc:e9:d6:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:8F:45:6C:2F:5A:FF:76:4A:71:AA:73:12:EB:7F:A7:E2:4D:18
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:96:34:73:30:4a:45:76:c2:bc:16:d6:48:cd:19:66:89:ed:
3d:3a:a4:9d:ad:3c:eb:c0:e5:5a:35:c0:e0:12:c7:f1:04:52:
69:09:36:87:0d:d3:e5:ff:fb:5b:06:1d:a4:ad:5e:07:2b:7c:
87:57:36:f2:9d:35:50:a0:96:f7:a4:73:a1:cb:36:71:0a:04:
ee:19:b6:35:20:ec:58:13:fb:72:ac:ee:45:cb:8c:86:e4:c2:
69:35:cb:61:96:f3:63:9a:88:be:75:1a:df:b4:e4:47:31:14:
81:69:7f:ef:eb:e1:f0:87:58:8c:09:da:cf:df:b2:77:30:54:
e8:58:d4:b8:e5:1d:52:c8:36:2a:ef:59:50:91:6b:25:be:c5:
d1:ea:0c:09:9e:b1:c2:5e:7c:72:89:c8:10:0f:20:3c:d7:b1:
ea:38:a4:ac:31:7e:ea:d7:fc:f8:c2:9f:5a:9a:a8:79:83:14:
fd:5b:1c:55:1d:49:12:e5:17:5d:22:73:f8:14:93:3f:44:b6:
25:97:8a:0c:3d:09:97:7e:46:cd:72:3c:15:29:34:a9:19:7e:
ce:e3:19:12:19:ae:ba:c3:8b:3e:ff:5a:aa:88:f6:67:b0:67:
09:b0:a0:dc:80:85:72:74:a3:d0:db:cb:97:e3:45:9b:26:cb:
12:cb:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:20:26 2026 by rpki-client