
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
File: ax_z7YHR7aC43YxdpE5A-css0q8.mft (raw, json)
Hash identifier: /WnvQJeNwqoYNtbN1zVqQAcRvwXlCHWzPfTld6Zuwtk=
Subject key identifier: DB:37:C9:4F:3C:12:C4:FC:73:E0:02:4E:5A:37:B3:08:26:8F:F1:E1
Authority key identifier: 6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF
Certificate issuer: /CN=A9175C96/serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
Manifest number: 1E
Signing time: Wed 19 Aug 2026 09:39:43 +0000
Manifest this update: Wed 19 Aug 2026 09:39:43 +0000
Manifest next update: Wed 26 Aug 2026 09:39:43 +0000
Files and hashes: 1: ax_z7YHR7aC43YxdpE5A-css0q8.crl (hash: 37N4So4shy9DI0gbXAoSC+nQSJ/pN6J1IsENWrjNWMI=)
2: CC84D0BA710511F1A8E0DB7B65A30FBC.roa (hash: W/k3tTym2pPqddOTOs65rSq65DSs2mHOJ53vJkYkUlI=)
3: F9F4A9C6710511F1AB87369C65A30FBC.roa (hash: vF7yzq71bKd9/EBHrcKUsFw6zWZiI9lEWL6wZYfxLto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl
rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175C96, serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
Validity
Not Before: Aug 19 09:39:43 2026 GMT
Not After : Aug 26 09:39:43 2026 GMT
Subject: CN=6a8579df-7938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:96:6c:cb:36:18:e3:5e:82:b2:7c:d5:e7:
b7:83:2a:62:5e:ff:38:93:c1:a0:e8:b0:60:0c:e0:
13:84:7b:e3:97:b1:c1:89:b7:be:2f:bf:6a:62:76:
c6:d0:f9:03:31:97:97:61:bd:23:52:9e:95:51:54:
2e:ae:bf:9f:99:e2:8d:5b:56:71:bc:80:f8:84:84:
ce:a6:48:99:8f:47:66:01:7f:0b:60:0f:6b:44:cd:
6d:37:d2:d0:10:04:96:fd:f8:21:c2:10:42:54:f0:
a3:f4:06:fa:54:5b:fb:43:a7:ee:11:eb:ef:94:1a:
f1:e1:f5:4c:b0:d0:29:e1:a9:77:d8:1c:ce:df:c7:
0b:47:87:4b:0b:d9:0c:ad:0e:d2:50:e5:f0:a0:4b:
99:7e:28:28:4c:ee:84:b6:8b:e4:22:6f:30:9f:2f:
65:9c:19:29:7c:6f:89:5a:a4:4e:1f:91:0d:dc:0a:
eb:84:9e:05:58:f9:97:7e:cb:43:3a:2d:76:07:c5:
b5:b8:14:d4:7f:57:4c:08:cb:d4:be:70:a9:96:dc:
0d:54:73:3c:3f:ff:2f:59:49:dc:91:a4:af:2d:49:
d5:e1:13:4a:fc:b8:bb:c0:c1:8b:8c:d9:05:b6:59:
2f:94:71:5d:a9:18:e2:24:52:c7:fc:b6:ee:cd:13:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:C9:4F:3C:12:C4:FC:73:E0:02:4E:5A:37:B3:08:26:8F:F1:E1
X509v3 Authority Key Identifier:
keyid:6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:54:bf:dc:69:9e:65:6b:a0:7e:1a:d6:1c:26:81:fa:f3:78:
4b:54:1f:09:b1:51:71:cf:77:f4:a4:93:08:2c:30:71:f2:e7:
3c:5b:cf:83:b3:cc:ec:25:6f:2f:e4:c0:0c:b8:f0:c8:71:99:
0d:fe:49:46:50:53:9c:69:45:e9:a2:31:50:3f:19:cf:66:8a:
f1:97:cf:15:df:23:9d:9c:12:93:4e:4d:ff:38:10:4a:ef:a1:
31:0d:d6:6e:c3:2a:2c:50:4c:11:18:ad:d6:38:c2:f1:be:09:
23:a6:03:a3:08:db:22:2d:64:74:2e:8a:28:73:94:f5:c3:9e:
c6:d3:6d:51:70:9f:78:8b:49:f7:4b:2a:ee:8a:49:77:df:09:
8e:af:96:b3:8a:b0:95:5e:14:bc:b8:2d:7d:a9:0e:75:06:44:
b8:48:5f:7f:0d:db:42:75:df:b9:14:d4:7f:b3:20:3f:a7:44:
e1:ce:21:61:20:51:92:b7:1e:c1:c2:72:49:d9:da:35:77:63:
63:43:13:0a:7f:0e:7b:68:71:7a:a7:db:b3:6c:3e:1a:3d:46:
4c:17:a1:3d:9f:8f:4d:d9:4f:69:92:62:f5:d6:fd:1a:eb:e8:
e8:0b:32:84:da:1c:4f:dd:ac:cf:ce:8f:6a:fe:87:5d:f8:88:
6a:d3:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:49 2026 by rpki-client