
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier: pETdEbFs1g+o45fv9n+/jK+Kli/nd+6sQhV5hxB34LQ=
Subject key identifier: 4D:7D:45:0E:51:35:53:F7:EA:74:A5:15:06:A0:04:04:3F:91:11:73
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 073C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number: 06EF
Signing time: Thu 10 Sep 2026 22:20:26 +0000
Manifest this update: Thu 10 Sep 2026 22:20:26 +0000
Manifest next update: Thu 17 Sep 2026 22:20:26 +0000
Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: Dgb44OZa4Seiu5KTxsI37fqHcI/6i97lPMFRUu3EM48=)
2: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: OIMoYuOlDFIxnQLjJwwfFn81y6oP24XgHKLcwV1zvZk=)
3: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: TqJzuidUjyyQb1G7wiFhjyqX67oOjt0bf49SD3Yyr2c=)
4: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: g+Gj7U1+efQL3hqCetjfGn6GeGSvm7QivUZN+eVJ75c=)
5: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: gxgtsWBnEAP6vapnZK0uqNLpyymktd5A/5L7ecDmBUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852 (0x73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Sep 10 22:20:26 2026 GMT
Not After : Sep 17 22:20:26 2026 GMT
Subject: CN=6aa32d2a-fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:70:9e:01:ce:e6:c1:e4:e4:a2:37:43:9c:
41:d3:54:75:bb:58:1c:af:53:f5:1e:40:59:80:a5:
2f:f8:cc:f3:64:0f:37:15:ce:9d:50:87:8a:2d:8a:
2b:c3:da:c1:0d:17:d8:48:14:2f:78:53:64:f8:3e:
08:c7:e7:11:72:bb:c0:c2:e7:f1:c5:57:ea:61:57:
20:d2:a2:31:05:29:72:aa:32:b4:76:6a:57:fb:00:
f7:4e:33:d8:ed:60:5d:3c:fe:29:6d:d0:9d:f2:a1:
e8:cd:23:45:3e:12:7c:78:77:1c:af:e8:ab:ba:ae:
b4:3d:8e:f1:fc:75:b5:5e:71:f4:d1:fa:81:92:97:
71:d0:31:7d:fd:82:e5:aa:83:ef:a3:d2:5f:78:be:
39:07:51:2e:fc:35:97:cb:0d:bb:3d:e6:0e:77:b5:
c0:09:aa:f1:5a:4b:92:20:eb:e6:fc:c3:15:29:ba:
47:1e:15:27:3e:af:4d:ed:69:9d:b4:3d:39:10:f5:
76:98:56:ee:a6:59:5a:55:a1:16:2c:3f:36:b1:d9:
9c:d8:a7:c3:8f:ea:7b:c6:36:a4:03:db:c6:7f:f2:
89:c8:eb:bd:7f:57:ea:e9:a7:45:a1:46:64:29:96:
ce:56:9e:f5:3a:09:f9:8d:79:3e:f6:8a:d8:f6:d0:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7D:45:0E:51:35:53:F7:EA:74:A5:15:06:A0:04:04:3F:91:11:73
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e5:cf:0b:4a:21:bc:12:92:07:4f:99:fd:5e:be:9f:cf:be:
77:64:d2:aa:47:96:b6:83:0c:d0:d4:0a:14:07:d6:24:ae:83:
7f:16:99:e8:f2:c4:e8:69:b1:65:45:2c:07:23:7e:e6:cf:21:
19:c0:ce:a4:8a:97:a6:6b:d6:ce:0c:da:85:91:c9:a2:36:58:
d6:dc:7b:c1:bd:ac:2f:ab:a8:b7:bb:94:92:5e:0f:00:6c:aa:
50:4c:ee:7f:24:80:1a:95:d3:8b:a1:6b:b6:d0:f0:f9:f1:04:
c1:72:e6:c4:3e:bf:f9:4e:4d:1f:1a:ff:06:14:a2:56:c5:08:
4e:d0:de:fe:3c:38:ed:e0:aa:ce:ce:af:6b:fe:f5:b6:00:82:
c5:9c:87:52:14:23:e1:b2:16:37:7f:a9:7e:b5:81:18:1e:28:
9c:12:47:b0:8e:75:ac:c5:07:41:02:9e:a5:75:c4:83:a7:e2:
c1:97:2f:ee:7e:90:a1:46:38:e4:08:2f:11:88:0d:d4:90:b3:
22:4f:d6:73:79:90:18:06:0c:d3:e5:41:12:5d:a9:cb:11:e9:
32:70:a1:54:ad:d3:8f:d2:6a:d5:a9:e8:ec:6b:3b:a5:7d:cb:
28:13:87:67:71:c7:13:8f:24:20:8d:f0:74:19:c1:ae:27:cb:
47:86:fe:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjYwOTEwMjIyMDI2WhcNMjYwOTE3MjIyMDI2WjAYMRYwFAYD
VQQDEw02YWEzMmQyYS1mYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA17xwngHO5sHk5KI3Q5xB01R1u1gcr1P1HkBZgKUv+MzzZA83Fc6dUIeKLYor
w9rBDRfYSBQveFNk+D4Ix+cRcrvAwufxxVfqYVcg0qIxBSlyqjK0dmpX+wD3TjPY
7WBdPP4pbdCd8qHozSNFPhJ8eHccr+iruq60PY7x/HW1XnH00fqBkpdx0DF9/YLl
qoPvo9JfeL45B1Eu/DWXyw27PeYOd7XACarxWkuSIOvm/MMVKbpHHhUnPq9N7Wmd
tD05EPV2mFbupllaVaEWLD82sdmc2KfDj+p7xjakA9vGf/KJyOu9f1fq6adFoUZk
KZbOVp71Ogn5jXk+9orY9tDhGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE19RQ5R
NVP36nSlFQagBAQ/kRFzMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi
QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACeXPC0ohvBKSB0+Z/V6+n8++d2TSqkeWtoMM0NQKFAfWJK6DfxaZ6PLE6Gmx
ZUUsByN+5s8hGcDOpIqXpmvWzgzahZHJojZY1tx7wb2sL6uot7uUkl4PAGyqUEzu
fySAGpXTi6FrttDw+fEEwXLmxD6/+U5NHxr/BhSiVsUITtDe/jw47eCqzs6va/71
tgCCxZyHUhQj4bIWN3+pfrWBGB4onBJHsI51rMUHQQKepXXEg6fiwZcv7n6QoUY4
5AgvEYgN1JCzIk/Wc3mQGAYM0+VBEl2pyxHpMnChVK3Tj9Jq1ano7Gs7pX3LKBOH
Z3HHE48kII3wdBnBrifLR4b+xQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:45 2026 by rpki-client