
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier: ihkS4Jyg3Gx1x5bRpfEwyr2e+4g7mC9jesalB3Uu8i0=
Subject key identifier: F3:11:93:48:EA:93:89:06:4A:B4:D0:38:43:42:9E:F8:80:AB:77:A5
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 05B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number: 05A3
Signing time: Sat 04 Apr 2026 23:00:21 +0000
Manifest this update: Sat 04 Apr 2026 23:00:20 +0000
Manifest next update: Sat 11 Apr 2026 23:00:20 +0000
Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: EgyvlY5v4QP18gT4EmslGgsMYAV3kUMmxx50fr0/f4k=)
2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464 (0x5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Apr 4 23:00:20 2026 GMT
Not After : Apr 11 23:00:20 2026 GMT
Subject: CN=69d19805-9f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:48:78:59:bd:d9:79:bf:8d:a9:ed:dd:cf:
30:74:fc:e1:c5:92:cd:f5:44:5d:4c:b9:34:bb:04:
55:13:4a:de:06:42:43:4d:cc:86:d3:06:db:17:57:
00:5a:8c:b9:b1:b8:fd:83:39:7e:c7:4e:1d:1b:d1:
52:9f:ad:6c:a0:84:63:d6:a7:e2:cf:a1:4e:09:28:
89:86:84:77:a6:fe:f5:62:44:41:14:65:fb:93:6b:
01:91:bc:dc:ae:27:23:ab:6f:33:d0:d8:d8:0c:af:
36:0b:a7:b8:3f:74:27:08:35:56:c0:4b:75:07:65:
2e:d5:fc:af:e0:9b:a9:6b:c1:61:d8:a0:ed:46:85:
ef:ee:d8:26:9e:05:93:a6:6a:ad:d9:3b:02:43:b3:
3c:c9:01:6f:f0:63:29:1d:c3:81:15:eb:c9:b1:25:
64:e2:3c:17:23:9f:b6:4f:a2:02:54:9d:8d:e3:0b:
5c:56:e8:44:fb:78:20:8e:ad:a5:2e:ec:18:5b:94:
c9:c2:27:c7:94:fb:34:89:f2:1b:07:5c:b3:14:33:
88:d2:49:e4:2b:40:0f:9a:11:e5:cd:4c:b3:b9:6c:
76:37:7a:4c:e4:53:12:b7:0c:1a:b6:97:c2:c2:b0:
8b:e3:ae:ff:bb:89:bb:b7:9d:66:6c:db:be:c6:4f:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:93:48:EA:93:89:06:4A:B4:D0:38:43:42:9E:F8:80:AB:77:A5
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a8:f0:0d:5f:33:2a:06:90:8b:8f:76:9a:fd:84:e1:81:88:
91:5b:89:17:5c:ce:b3:17:c7:7b:c9:4e:7e:f4:31:b5:d2:d3:
cc:10:a7:14:d4:94:aa:12:5c:39:5a:78:5c:74:49:fd:ba:58:
78:dc:ac:20:c4:05:b7:26:a0:17:d6:f8:6a:38:bb:18:15:94:
e7:27:8c:79:ac:1d:b2:97:28:dc:f0:19:08:9d:c0:91:d1:1f:
61:75:3a:aa:b9:89:8f:f9:f8:10:b7:3e:30:60:74:a0:c3:5b:
98:b4:a4:5b:85:40:fa:76:e9:c7:5c:a8:01:30:62:39:31:a9:
35:d8:55:03:02:13:1b:df:01:8c:ea:32:76:fa:ba:a0:0e:6b:
4c:26:3a:82:87:a8:6c:55:18:b1:f3:6c:3c:22:9f:7f:8e:60:
b4:44:33:1f:9e:f2:76:3c:00:61:df:a3:76:8c:ee:18:64:75:
c3:97:c7:a6:73:f0:03:e5:12:3f:c0:65:cb:a8:a5:b5:d5:a9:
f2:4e:e5:30:6e:53:e6:27:48:31:56:0b:d1:7b:5c:85:5a:89:
a7:c2:81:1c:4c:83:c0:80:82:d1:c8:c6:45:c2:0e:65:69:b9:
82:3e:50:61:97:7d:8e:3f:40:11:09:0e:3a:23:6d:f4:c2:4d:
69:83:14:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEzQjAxMTAvBgNVBAUTKDAxOTgzMTExRkQ2RjBCMjdFMjQwNDYzQjY4QTdBMTk4
NDVDN0JCMEEwHhcNMjYwNDA0MjMwMDIwWhcNMjYwNDExMjMwMDIwWjAYMRYwFAYD
VQQDEw02OWQxOTgwNS05ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IhIeFm92Xm/jant3c8wdPzhxZLN9URdTLk0uwRVE0reBkJDTcyG0wbbF1cA
Woy5sbj9gzl+x04dG9FSn61soIRj1qfiz6FOCSiJhoR3pv71YkRBFGX7k2sBkbzc
ricjq28z0NjYDK82C6e4P3QnCDVWwEt1B2Uu1fyv4Jupa8Fh2KDtRoXv7tgmngWT
pmqt2TsCQ7M8yQFv8GMpHcOBFevJsSVk4jwXI5+2T6ICVJ2N4wtcVuhE+3ggjq2l
LuwYW5TJwifHlPs0ifIbB1yzFDOI0knkK0APmhHlzUyzuWx2N3pM5FMStwwatpfC
wrCL467/u4m7t51mbNu+xk8SiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMRk0jq
k4kGSrTQOENCnviAq3elMB8GA1UdIwQYMBaAFAGYMRH9bwsn4kBGO2inoZhFx7sK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNCMC8xMzhFMTQzMDE0
NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5ZmlRRVk3YUtlaG1FWEh1
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FaZ3hFZjF2Q3lmaVFFWTdhS2VobUVYSHV3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTNCMC8xMzhFMTQzMDE0NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5
ZmlRRVk3YUtlaG1FWEh1d28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt6jwDV8zKgaQi492mv2E4YGIkVuJF1zOsxfHe8lOfvQxtdLTzBCnFNSUqhJc
OVp4XHRJ/bpYeNysIMQFtyagF9b4aji7GBWU5yeMeawdspco3PAZCJ3AkdEfYXU6
qrmJj/n4ELc+MGB0oMNbmLSkW4VA+nbpx1yoATBiOTGpNdhVAwITG98BjOoydvq6
oA5rTCY6goeobFUYsfNsPCKff45gtEQzH57ydjwAYd+jdozuGGR1w5fHpnPwA+US
P8Bly6iltdWp8k7lMG5T5idIMVYL0XtchVqJp8KBHEyDwICC0cjGRcIOZWm5gj5Q
YZd9jj9AEQkOOiNt9MJNaYMUuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:32 2026 by rpki-client