
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier: YJBcNO2dwEeSf1octgWdKzuKEZZ8ol8oVtkNwe8GO28=
Subject key identifier: 05:FE:3A:2B:82:E9:78:29:7C:99:B7:1C:26:F9:CD:9C:8F:0E:9F:D3
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial: 084A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number: 083F
Signing time: Sun 31 May 2026 21:33:56 +0000
Manifest this update: Sun 31 May 2026 21:33:56 +0000
Manifest next update: Sun 07 Jun 2026 21:33:56 +0000
Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: x4XegAb/rXHnd1SBxrg+hKeyLlGvrzKHkt91tWZEY+g=)
2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 21:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Validity
Not Before: May 31 21:33:56 2026 GMT
Not After : Jun 7 21:33:56 2026 GMT
Subject: CN=6a1ca944-8448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:7a:b2:91:b2:26:01:99:b2:de:1b:7b:a0:
fd:ef:be:cf:b2:ce:57:36:61:ae:1c:0d:e2:07:1a:
b7:f7:b5:6e:d6:ee:4b:9e:3b:ef:e9:0d:35:8d:65:
80:38:d9:84:5c:6e:47:81:08:61:ad:52:62:f2:f1:
7e:e9:19:75:77:ae:62:b4:54:d8:3c:6f:f2:b2:be:
a1:2e:2c:c0:52:1a:2a:7f:b6:8f:bd:81:31:e3:25:
99:1c:52:bb:02:02:de:fe:6b:7d:d1:03:d9:bd:a1:
63:09:7c:42:d8:15:8b:7d:9b:21:9d:3a:7e:b3:47:
5e:5d:14:49:43:f3:50:04:f4:53:42:2b:ed:a9:c5:
77:26:70:51:33:be:4f:42:98:45:7b:33:99:a3:c4:
91:b6:7c:14:f8:89:c6:e4:0c:52:20:76:7d:14:b6:
23:e7:2a:f3:81:b6:54:f0:42:7f:5b:a9:85:37:e4:
60:b4:2c:36:72:22:e0:38:d5:77:c6:e9:c9:00:55:
5e:db:77:b2:e1:d8:dc:9a:58:8a:38:75:73:53:7c:
72:b6:88:e1:db:ce:9c:99:dc:bc:8b:d4:fd:62:ac:
b9:32:11:10:59:72:54:33:7f:fd:46:91:5e:8e:82:
8b:d4:cb:9b:a5:9b:f1:d7:61:ed:e6:17:a3:30:b2:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:3A:2B:82:E9:78:29:7C:99:B7:1C:26:F9:CD:9C:8F:0E:9F:D3
X509v3 Authority Key Identifier:
keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:ee:b8:8f:3b:7f:c4:37:22:8d:49:69:57:63:2a:2f:21:c2:
a2:2a:f9:5d:40:cc:cf:b9:ac:02:48:28:d7:7b:f2:f1:eb:dc:
0b:6e:d4:53:6a:72:5e:a6:f9:b7:9f:c8:d4:b3:45:d1:a9:0b:
0a:ff:db:77:2d:78:b5:d8:8d:19:01:22:23:23:22:b7:31:84:
35:e4:39:f6:c4:0e:e8:f1:f0:98:e0:10:db:ac:54:6a:30:3f:
55:5b:a9:60:4e:97:b4:7d:9b:20:0b:74:34:95:10:86:26:42:
36:89:0a:f3:33:e0:bf:bf:6f:c9:cd:41:60:c8:9f:2d:5c:11:
b6:6b:bd:0b:cc:6e:0f:3a:96:3c:b7:65:42:ea:92:4b:2f:6c:
40:52:37:12:42:43:54:b8:13:ae:aa:58:90:fc:3e:f2:d4:95:
30:ec:78:a7:e7:6f:a9:d0:a2:c0:4c:c7:41:1f:32:f4:30:43:
01:5e:fe:b5:ff:fe:f4:26:a3:c3:71:7a:d6:96:e6:34:6c:82:
35:64:19:49:3a:d9:78:6b:a8:11:a4:29:95:62:26:e6:b3:75:
ae:8c:ad:48:34:4f:9c:2c:4e:5f:a8:c7:51:8b:0c:4b:e6:97:
17:42:2d:62:b6:e3:98:94:13:bb:5b:e5:14:30:a7:1a:d2:12:
ff:6c:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:40:15 2026 by rpki-client