
$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
File: AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json)
Hash identifier: YTMyPM53Xbn+aq5jRRxRHeUjQ6+HShr+oBWbQYxw2OU=
Subject key identifier: 1B:35:F3:7D:6D:15:63:B4:E2:98:AB:2E:F0:25:73:92:A9:9D:24:D4
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
Manifest number: 02D1
Signing time: Wed 19 Aug 2026 01:42:33 +0000
Manifest this update: Wed 19 Aug 2026 01:42:33 +0000
Manifest next update: Wed 26 Aug 2026 01:42:33 +0000
Files and hashes: 1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: /SR9ayETmDnjMNEGgTNdHJN0sgjrhdzH/KwycGNFu2w=)
2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: LRYq0mPrjweqGJPSdcgLlt3nrjlK6fosCT9C7fklNuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Validity
Not Before: Aug 19 01:42:33 2026 GMT
Not After : Aug 26 01:42:33 2026 GMT
Subject: CN=6a850a09-563d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:bf:93:e9:88:9d:c2:c6:e7:8d:90:40:bb:
ff:a6:88:c0:b2:9e:28:bb:62:07:62:aa:64:94:e5:
7b:ec:40:2c:0e:93:58:18:ef:57:c4:2a:d9:74:f3:
e1:29:1e:a5:4a:56:e8:52:db:f9:19:0f:05:4b:e2:
63:3f:ae:29:c5:63:3f:6a:ab:44:53:ab:09:13:6f:
b9:74:3f:62:0b:f7:0b:bd:ce:e9:df:61:a9:36:27:
5f:12:b4:6a:5f:7e:5e:b5:5f:cc:e0:34:b3:be:bc:
a9:3b:c6:3e:6b:6d:92:b9:c0:ba:c0:25:4e:6a:78:
6c:83:66:83:71:0c:e7:0d:10:84:40:c3:56:24:28:
5c:c3:3a:44:43:e2:02:24:e3:bd:68:57:67:04:d2:
3b:12:e1:21:f0:db:1c:67:65:1d:d0:3a:dd:2e:7f:
fd:b4:14:05:52:6f:f7:40:c9:8a:d2:d6:e1:9a:ed:
94:d5:ae:67:e7:da:73:ec:cf:96:5e:69:9b:f8:1a:
b3:27:2a:5e:3f:af:7b:ff:6b:a2:50:42:5e:e1:97:
f9:78:8a:08:a7:a7:6d:7b:83:21:53:15:a2:5e:ca:
39:f3:06:da:6e:7c:4b:88:10:f0:14:e6:e1:d5:6c:
56:fb:bc:0e:85:42:bd:17:d9:f6:3b:6f:7f:6e:97:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:F3:7D:6D:15:63:B4:E2:98:AB:2E:F0:25:73:92:A9:9D:24:D4
X509v3 Authority Key Identifier:
keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:89:7c:f2:cb:64:bc:c6:05:e5:07:28:3c:18:4b:47:53:91:
4c:6b:c6:57:ee:ca:dc:18:1b:ad:cd:0d:d5:de:91:2e:1c:b5:
f2:e9:dc:34:fc:66:1a:36:86:00:e5:6d:d7:95:3c:96:28:2c:
52:fe:84:8e:68:10:89:d5:59:3f:94:7e:04:70:04:1f:90:b2:
55:b1:19:ff:22:79:c1:d7:0f:fa:23:de:9d:e2:37:87:c5:89:
0f:a9:84:1c:d3:a5:b1:c0:b1:21:f4:33:b0:1b:d3:ea:ed:fc:
42:20:ff:06:2e:b9:d1:05:76:94:92:e8:3b:9b:53:61:00:fc:
1f:62:a9:a8:49:5f:44:f1:9e:44:8a:f3:57:75:a5:e5:a6:9e:
67:f3:ca:54:66:d5:76:fd:92:61:f4:6f:b2:21:01:ca:02:e9:
29:4d:f7:02:43:c3:68:f9:c3:3b:dc:74:0b:34:ab:09:7c:42:
fa:73:e8:7f:bb:d6:99:b1:39:c8:e5:a2:5f:bf:93:d5:95:91:
20:b4:c5:34:08:f2:57:a6:72:dd:ac:be:92:93:42:40:85:3e:
bc:dc:16:fa:d2:23:51:31:a6:9d:cf:fa:41:c1:5b:1e:03:7f:
74:06:5b:31:0c:2e:78:46:1b:f7:1b:fc:11:5b:27:31:3c:44:
7c:f3:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:39 2026 by rpki-client