
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier: L3lfAm81H9uCAQDI1tUSoB/pMdnE046zalSsFXkd2II=
Subject key identifier: 36:5A:B4:23:6D:99:F7:A2:6D:B0:70:BB:DE:39:DF:8D:6C:AD:B1:BA
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial: 0F40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number: 0F2D
Signing time: Wed 20 May 2026 17:35:32 +0000
Manifest this update: Wed 20 May 2026 17:35:32 +0000
Manifest next update: Wed 27 May 2026 17:35:32 +0000
Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: UYAOrbg/AJY2/389eOwowAFPexn65TH83BudKYrBNsI=)
2: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: CJcOsAsRwI2HXjgfMv8XqLziZucuo7uRUTz3QROpN9g=)
3: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: BXSVEWRNWk6Z5rdKJ6F8tnumvM/u/16zJocy0sihtdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3904 (0xf40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
Validity
Not Before: May 20 17:35:32 2026 GMT
Not After : May 27 17:35:32 2026 GMT
Subject: CN=6a0df0e4-169b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:e6:f2:0f:39:c8:0a:9d:9b:a2:b5:4c:a5:
7b:93:9e:4f:a3:f5:a5:0c:ce:a1:4c:46:10:e2:bb:
26:b3:c3:e2:37:5a:67:40:9b:0f:9e:b4:a7:1a:ea:
dd:81:98:1c:55:9b:60:8c:c6:b7:fd:f1:c6:82:dd:
aa:fd:b7:73:a6:d7:16:7a:90:9e:a6:6a:03:b3:3c:
65:1d:b5:62:d2:cc:5a:8d:06:80:b2:b9:ce:c4:62:
16:92:d2:08:fb:1a:1a:0a:96:83:97:3d:7a:02:26:
16:2f:d9:78:c6:c8:4f:7d:b0:af:dd:e0:54:8f:7e:
2d:59:96:f1:be:73:7e:f4:ca:27:23:98:ac:bf:8b:
22:99:89:ee:03:a8:3b:f9:00:99:f3:38:e5:e0:88:
69:b8:f5:50:cf:71:54:4f:84:6e:36:68:65:24:80:
6d:63:68:3a:fd:c4:bd:5c:7d:37:b2:15:9b:24:a4:
a9:0b:3f:d1:2a:15:ec:0e:aa:67:ee:fc:88:cb:44:
1c:52:61:1d:ae:52:44:61:5f:0d:2d:3e:44:f0:a9:
11:df:71:70:a9:aa:4d:a1:ec:8d:50:1d:4b:8e:59:
71:2e:5e:98:cb:f7:16:72:a6:6b:fd:2e:23:d3:37:
95:55:4c:ba:41:a3:98:83:30:cb:8b:b1:75:2b:6e:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:B4:23:6D:99:F7:A2:6D:B0:70:BB:DE:39:DF:8D:6C:AD:B1:BA
X509v3 Authority Key Identifier:
keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c1:90:11:26:d8:6b:91:dd:fd:ac:33:ff:97:79:18:bb:a4:
d1:4a:d3:42:ca:8a:4d:a7:c5:9c:a5:51:ae:11:74:11:dc:a5:
bc:5b:61:38:fd:99:16:09:0a:92:cb:8c:87:21:c1:91:9b:b4:
3c:b6:a1:2d:70:6d:97:c8:bb:71:29:ea:14:23:49:3f:63:1f:
e8:a8:20:fc:98:57:58:86:a4:3e:c8:52:c4:94:6a:33:39:2d:
90:80:5b:df:db:0f:43:ba:b5:c5:fb:4b:df:c8:38:12:88:b5:
cf:91:3e:85:8c:5a:1e:c0:6e:e9:05:a5:f0:f0:df:ba:9e:c6:
9b:d6:47:e1:4a:9f:cb:f0:77:fa:e3:79:ca:84:fc:e5:fb:fa:
63:f1:20:e7:dc:c9:0c:18:52:47:bb:c4:54:c3:c5:98:40:e2:
a6:58:7f:c2:b8:66:69:7c:54:e9:e4:5e:01:57:73:ad:55:ff:
9e:fd:85:ca:a4:f3:aa:3e:83:37:f8:be:fe:5c:e1:05:0b:41:
cd:d0:a8:68:4a:f4:85:0a:44:e8:e7:93:11:69:e9:64:3e:1a:
18:89:92:e5:82:e4:83:43:19:b7:8f:4f:97:bd:e0:89:49:23:
23:15:b4:a3:8f:63:ba:f7:bc:8a:f0:27:08:06:58:da:21:56:
fd:f5:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:50 2026 by rpki-client