
$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
File: AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json)
Hash identifier: /ptRAvk8/M4+PiHeKP0mVRCWZjMXkpQ9+W4D5x/HHtU=
Subject key identifier: 33:ED:AE:10:5E:E2:48:33:8B:58:D9:4F:30:F1:EF:92:99:A3:F4:6C
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
Manifest number: 02A4
Signing time: Thu 21 May 2026 01:37:07 +0000
Manifest this update: Thu 21 May 2026 01:37:06 +0000
Manifest next update: Thu 28 May 2026 01:37:06 +0000
Files and hashes: 1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: KIbgK/AyzccFVgsmMYrjHzmCk4rJM9XzyKL8ye8NBO4=)
2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: LRYq0mPrjweqGJPSdcgLlt3nrjlK6fosCT9C7fklNuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Validity
Not Before: May 21 01:37:06 2026 GMT
Not After : May 28 01:37:06 2026 GMT
Subject: CN=6a0e61c3-bed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:df:48:dc:60:76:7a:a9:18:33:22:ef:83:
72:9b:ce:5d:44:62:cc:27:a4:e4:37:3e:69:d2:a0:
c8:02:2d:92:21:bc:09:59:72:91:03:18:e6:26:9d:
1d:13:e9:5c:6e:1c:5a:b4:a1:3a:2a:41:1e:53:af:
94:b1:d2:ea:49:51:35:ef:71:e6:84:f7:39:38:e6:
99:6a:23:46:0b:53:c0:fb:78:d2:90:ea:c1:7d:8a:
66:f5:f2:a6:87:85:5d:e6:56:c3:13:86:84:25:fc:
77:70:56:22:4f:92:b8:75:84:bb:8f:da:88:2c:8d:
78:48:ef:9f:32:67:88:d3:c9:98:37:d3:15:64:de:
61:d1:0e:44:58:4c:21:74:00:1d:56:1b:5a:4e:69:
6c:df:be:e8:f6:86:6a:ea:b2:dc:57:2f:3d:3b:dd:
5d:a0:eb:9b:ce:c9:1e:6a:39:17:95:40:13:f8:1d:
89:17:ae:b6:75:5e:5a:ad:46:17:d6:62:76:7d:91:
ab:58:6c:61:38:0e:3f:d7:41:76:7b:5d:75:18:65:
f0:2b:7a:fd:12:a6:3f:98:f9:89:81:b9:fa:43:b9:
e9:44:c9:d3:c9:bb:53:e0:d1:d2:b3:96:f3:e5:25:
f6:1e:dd:fd:33:27:1c:a9:c1:b0:fe:f4:95:f5:93:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:AE:10:5E:E2:48:33:8B:58:D9:4F:30:F1:EF:92:99:A3:F4:6C
X509v3 Authority Key Identifier:
keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:cd:3a:a8:b7:f4:08:77:12:af:79:1c:a9:46:24:a6:70:b7:
77:e5:f5:01:d9:9d:bb:5f:19:31:fb:59:8a:cd:04:74:12:76:
6e:d2:e2:5c:2e:60:c9:2c:dc:89:d3:1f:dd:95:37:65:d8:83:
d5:21:17:5c:fc:d6:ec:4a:0b:a8:05:a1:04:fa:cf:0e:3b:ad:
f7:f0:6e:e7:1c:d0:24:28:65:5a:ac:6e:c5:56:2e:d5:70:03:
b8:8d:ca:ee:99:84:4a:96:d9:43:0e:90:15:3c:48:1e:73:25:
16:5e:de:01:9f:b6:93:0f:24:e6:52:0c:fe:19:e0:84:7b:7d:
71:1d:45:73:05:cf:8f:0b:c4:1a:a4:84:f1:30:e2:78:77:38:
27:57:e8:df:26:71:b9:82:fb:1a:93:e2:d0:07:cf:fd:c5:97:
ca:a9:ae:ab:aa:7a:ab:33:29:25:b3:01:65:65:72:e4:5a:3c:
71:af:ae:e9:ca:c0:59:db:bc:af:05:cb:7a:41:8a:ac:d1:82:
cb:c5:c3:15:fa:b2:c8:86:3d:bd:11:48:4f:2e:2f:65:e7:32:
29:32:31:c1:68:54:eb:c9:e1:ff:cc:7f:5e:05:42:0f:05:c6:
24:47:e2:30:e5:ae:fc:36:cf:96:99:bd:cd:41:eb:44:6f:6b:
c4:50:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:36 2026 by rpki-client