
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
File: ax_z7YHR7aC43YxdpE5A-css0q8.mft (raw, json)
Hash identifier: zyKVRfRcriTM6P3dhc59k2x27SjK01Qj+DZsU1ZSias=
Subject key identifier: 49:33:B4:47:88:CE:1A:26:AB:EE:01:CF:18:72:E1:14:B6:59:43:A5
Authority key identifier: 6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF
Certificate issuer: /CN=A9175C96/serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
Manifest number: 36
Signing time: Mon 05 Oct 2026 09:05:40 +0000
Manifest this update: Mon 05 Oct 2026 09:05:40 +0000
Manifest next update: Mon 12 Oct 2026 09:05:40 +0000
Files and hashes: 1: ax_z7YHR7aC43YxdpE5A-css0q8.crl (hash: fEQJGxYDDHwsBwuwDBQKarXKyOEbQgnFJX2K1HHz2Is=)
2: F9F4A9C6710511F1AB87369C65A30FBC.roa (hash: vF7yzq71bKd9/EBHrcKUsFw6zWZiI9lEWL6wZYfxLto=)
3: CC84D0BA710511F1A8E0DB7B65A30FBC.roa (hash: W/k3tTym2pPqddOTOs65rSq65DSs2mHOJ53vJkYkUlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl
rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175C96, serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
Validity
Not Before: Oct 5 09:05:40 2026 GMT
Not After : Oct 12 09:05:40 2026 GMT
Subject: CN=6ac36864-dce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:69:97:32:b5:21:64:72:88:5b:42:b4:4c:
58:40:11:2a:5f:49:dc:ce:1c:58:92:26:36:a4:7a:
23:71:63:02:32:a6:03:18:1a:7a:ba:fd:02:c6:f3:
11:16:f4:28:11:e6:2e:0a:68:5b:10:ac:c2:c3:90:
2b:13:33:f3:62:51:c6:51:40:9d:5c:40:d8:7a:dd:
21:84:4e:1c:2c:f3:7c:85:b6:62:34:7d:05:81:ac:
2c:d8:7c:98:44:52:49:65:75:54:fb:3a:dc:93:14:
8b:45:22:8a:28:9a:82:f8:86:21:ac:b6:9a:44:cd:
42:2e:e6:a0:0c:87:3c:dd:44:68:e6:b6:b5:96:a0:
3c:8b:62:8f:a5:cc:dc:a1:a6:6b:4e:41:c7:1c:40:
e4:db:af:f8:64:7a:d9:ad:76:c5:f9:53:18:1d:64:
43:84:6e:59:79:41:3f:67:9c:25:6f:e3:71:de:5b:
af:18:d9:ed:1e:52:64:56:45:ad:2b:e5:6f:0c:20:
4e:60:c3:d2:d1:9e:7d:38:fb:fb:d1:48:dd:6e:9b:
fb:36:ba:ca:b9:ed:de:21:93:74:c1:15:a1:3c:b4:
f6:e5:0c:57:8a:db:11:83:e9:bd:12:8d:4c:0f:85:
63:32:f2:fe:b2:9e:3a:98:8d:87:5f:5b:7d:e5:02:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:33:B4:47:88:CE:1A:26:AB:EE:01:CF:18:72:E1:14:B6:59:43:A5
X509v3 Authority Key Identifier:
keyid:6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cd:ec:e6:a3:21:30:39:8f:e2:34:92:ad:7e:73:b1:25:86:
d4:35:19:a6:f6:83:12:2e:fc:b4:a9:b8:3a:c2:9f:e9:70:b2:
df:cf:82:78:17:f1:ac:9c:2b:cf:69:cc:6a:54:8e:d8:c8:12:
d0:ef:b2:56:f4:91:8f:6d:9f:05:8a:28:01:e0:e5:ba:74:95:
2c:ad:60:54:9c:e5:95:4b:1f:4f:bc:ea:12:f4:aa:34:0f:48:
60:e8:0c:05:71:fc:f6:e8:bf:6c:44:b3:26:a7:e9:df:da:66:
14:36:f9:2e:15:f5:56:25:b9:88:53:b1:6c:c3:01:c2:42:ab:
c1:70:04:ff:00:86:1c:8e:34:2d:52:56:b7:61:2e:e0:dc:37:
f0:67:ab:4d:be:68:e8:86:96:51:74:b7:86:50:7b:cb:87:d0:
2b:c0:d1:94:5e:92:ea:2a:36:36:8e:f6:aa:9f:ba:5f:71:15:
a3:01:29:45:7a:ad:23:f8:e2:a2:44:b9:f9:55:cf:52:44:e8:
8b:8c:26:5d:e2:38:2b:e4:8a:f8:c3:12:41:df:c7:62:e1:0e:
e6:72:af:95:ec:6f:ba:b2:16:25:75:cf:55:ea:f6:b1:98:d4:
d4:9a:77:cd:17:c9:d9:4e:25:b2:81:9b:3b:48:c4:ac:ca:c2:
1a:aa:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:01:03 2026 by rpki-client