
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier: 9v349BJWWR64q4coOqwBlaKOw8gKkgQywLNSyN4tbf0=
Subject key identifier: 5D:DE:6A:C9:9D:57:44:B5:84:E1:87:B9:98:92:5B:87:A0:7C:F3:9B
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial: 0F72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number: 0F5D
Signing time: Tue 18 Aug 2026 17:45:21 +0000
Manifest this update: Tue 18 Aug 2026 17:45:21 +0000
Manifest next update: Tue 25 Aug 2026 17:45:21 +0000
Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: b3nHOtf3EZwvNb56JD7IE6nYdGpKy39/eH9C6UC4OLc=)
2: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: +qoTLB4KGdOq7tBr+CT5TB+FxY8uAOKgWCjbTm8+jho=)
3: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: UTqTDw+6C0kCCjzWGb1ZXGyuDiWfWII0jQrmfbm2l34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3954 (0xf72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
Validity
Not Before: Aug 18 17:45:21 2026 GMT
Not After : Aug 25 17:45:21 2026 GMT
Subject: CN=6a849a31-042f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:8f:6b:a2:a4:31:03:37:d4:1a:13:d9:8f:
56:f9:4f:72:8b:f6:8f:81:6f:74:15:60:43:53:8d:
ec:aa:76:10:4e:02:0e:50:a2:dc:31:b4:f8:a6:f5:
98:92:9b:44:ca:45:b2:71:4e:c4:57:f2:b0:3e:96:
5b:7d:cb:54:9d:2f:93:b8:4d:ee:02:66:b9:7c:95:
19:60:d8:4c:57:13:33:69:1b:90:35:0e:8a:33:8f:
9a:13:06:b4:87:5f:bd:b3:86:ca:d3:1e:cf:20:b4:
c0:95:a2:60:e6:91:be:a5:a6:40:96:cc:e3:44:8b:
e5:ce:99:42:9e:14:c2:a4:18:d0:f1:3e:69:e1:78:
db:89:a1:1b:5d:e7:c1:57:1b:ca:0c:b7:88:24:7e:
07:c3:f3:61:be:82:a0:ce:3d:fb:c0:1e:da:61:8a:
97:b3:65:dd:5c:9e:60:6f:33:a9:f8:c9:e3:86:94:
c4:5d:f4:64:70:d3:61:c7:59:c2:b7:a5:d7:1f:67:
05:8d:f4:63:47:b7:71:03:0d:a1:51:bb:31:30:97:
98:88:25:ed:ee:cc:c4:cd:ef:1e:b5:b7:f7:d9:8b:
40:ee:23:08:dc:02:58:7d:a6:2c:80:8b:0d:5b:6e:
36:dd:97:a0:fa:3c:2e:60:52:e9:ee:bb:04:0e:0e:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:6A:C9:9D:57:44:B5:84:E1:87:B9:98:92:5B:87:A0:7C:F3:9B
X509v3 Authority Key Identifier:
keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b3:ee:e4:36:26:d2:bf:1e:e9:45:42:3e:96:d1:75:32:30:
be:94:1d:e4:42:c7:68:f8:76:b4:ca:e1:66:bf:4a:a5:93:ef:
1f:02:f7:38:d3:5d:7e:d7:35:07:cb:75:bf:c9:56:4a:7c:d1:
2b:e5:ed:6e:29:6c:1c:e3:dd:85:95:68:99:81:0c:92:87:1e:
30:cd:92:8b:a2:71:0f:e8:01:1a:3c:20:e9:6f:2b:ad:5d:39:
75:f1:11:b2:d8:19:ee:3c:1c:4d:70:83:f2:ac:18:dc:0d:ff:
3b:e2:17:65:fc:78:bb:cc:27:67:ff:16:ef:f0:7d:85:a2:b5:
d9:b9:2f:4e:c0:97:f3:8b:9c:9b:d1:52:76:61:98:61:ce:44:
14:21:69:dd:3f:93:84:12:19:6b:e0:a4:47:33:ae:45:1a:5a:
2e:3e:20:12:bf:7e:ae:4d:00:02:7f:f2:1d:55:1f:17:f7:65:
93:3c:7e:7d:53:60:56:85:02:ce:64:b5:71:86:a9:71:35:01:
ed:52:66:9b:03:25:85:af:a8:0f:48:79:66:8e:ff:ab:72:4a:
e8:1b:c6:9b:6f:8c:1e:ce:ae:6e:3a:1d:4d:e9:da:82:17:1b:
f3:99:d2:aa:d6:4b:5d:7a:34:fe:4d:c9:e0:3c:15:e8:3a:d4:
c7:77:79:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx
MzM5MTAxOTIwHhcNMjYwODE4MTc0NTIxWhcNMjYwODI1MTc0NTIxWjAYMRYwFAYD
VQQDEw02YTg0OWEzMS0wNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfePa6KkMQM31BoT2Y9W+U9yi/aPgW90FWBDU43sqnYQTgIOUKLcMbT4pvWY
kptEykWycU7EV/KwPpZbfctUnS+TuE3uAma5fJUZYNhMVxMzaRuQNQ6KM4+aEwa0
h1+9s4bK0x7PILTAlaJg5pG+paZAlszjRIvlzplCnhTCpBjQ8T5p4XjbiaEbXefB
VxvKDLeIJH4Hw/NhvoKgzj37wB7aYYqXs2XdXJ5gbzOp+MnjhpTEXfRkcNNhx1nC
t6XXH2cFjfRjR7dxAw2hUbsxMJeYiCXt7szEze8etbf32YtA7iMI3AJYfaYsgIsN
W2423Zeg+jwuYFLp7rsEDg64AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3easmd
V0S1hOGHuZiSW4egfPObMB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4
QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0E2RS83OUVDRTgzODk4QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tY
aEZmZml0b3BFUUFUT1JBWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA7Pu5DYm0r8e6UVCPpbRdTIwvpQd5ELHaPh2tMrhZr9KpZPvHwL3ONNdftc1
B8t1v8lWSnzRK+XtbilsHOPdhZVomYEMkoceMM2Si6JxD+gBGjwg6W8rrV05dfER
stgZ7jwcTXCD8qwY3A3/O+IXZfx4u8wnZ/8W7/B9haK12bkvTsCX84ucm9FSdmGY
Yc5EFCFp3T+ThBIZa+CkRzOuRRpaLj4gEr9+rk0AAn/yHVUfF/dlkzx+fVNgVoUC
zmS1cYapcTUB7VJmmwMlha+oD0h5Zo7/q3JK6BvGm2+MHs6ubjodTenaghcb85nS
qtZLXXo0/k3J4DwV6DrUx3d5SQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:01:40 2026 by rpki-client