
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier: q/jEEHSl11PbWmOwKGnP1fH2xnfh/6Wn+BeD/CJyG3s=
Subject key identifier: EE:BB:04:85:95:C8:B9:B2:BD:68:3B:2A:76:2D:3C:24:70:92:0D:8D
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial: 0861
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number: 0856
Signing time: Thu 16 Jul 2026 21:15:34 +0000
Manifest this update: Thu 16 Jul 2026 21:15:33 +0000
Manifest next update: Thu 23 Jul 2026 21:15:33 +0000
Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: mTOvp5cstO0LHIgKqr/KuDQswmdddVdG9cqvdtb+XeA=)
2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 21:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Validity
Not Before: Jul 16 21:15:33 2026 GMT
Not After : Jul 23 21:15:33 2026 GMT
Subject: CN=6a5949f5-df7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:b3:6e:5e:66:02:aa:4c:a3:7b:b8:fb:16:
09:ad:b7:4a:2c:5e:08:36:e8:1e:9a:b6:4d:d0:7f:
ed:01:d8:73:c5:8b:1c:7a:a4:d9:6a:fe:ec:66:b1:
a2:79:5b:f9:a4:d5:64:46:0b:69:a2:df:23:a9:54:
81:44:7f:bc:5b:88:2f:5f:e6:57:8c:7f:08:c4:f0:
f8:11:df:6b:00:49:b7:93:a0:86:12:95:35:35:48:
5c:e7:01:c9:eb:8a:67:63:56:9b:b8:5b:d4:10:3c:
84:f4:72:c8:ab:57:a1:6b:6e:c1:0c:f5:5e:11:e9:
05:db:17:95:ff:4c:44:6b:08:95:b9:60:d7:c1:d3:
41:ae:0c:0b:10:87:f6:22:76:e9:92:9e:5d:b9:b4:
51:86:fe:39:9b:3a:27:2e:3b:1b:6b:8b:1a:43:ff:
19:39:84:83:59:0f:3d:28:48:21:76:66:c3:4c:90:
dd:9b:ec:75:e5:7f:13:46:b5:16:e1:c8:d0:d3:bd:
14:66:d0:12:9d:42:c7:45:e5:32:d1:7a:8c:65:2c:
b7:c0:e7:e1:47:db:ab:48:93:a1:b2:2b:3b:ff:94:
05:9e:71:a0:7a:e9:ef:45:f2:ff:a2:2e:58:4a:f9:
ae:6c:8b:63:a7:91:71:0e:42:79:64:e9:42:27:ca:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:04:85:95:C8:B9:B2:BD:68:3B:2A:76:2D:3C:24:70:92:0D:8D
X509v3 Authority Key Identifier:
keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:6a:39:36:4f:8c:7b:19:10:84:af:c3:a5:45:7a:c2:c5:23:
ee:bc:cc:b1:5f:4e:be:73:66:71:d4:60:fd:de:37:a8:a1:f3:
97:cc:d8:71:23:32:29:65:b8:d9:4c:eb:58:5f:3c:07:7b:4b:
cc:f5:6a:6a:de:54:85:81:8a:a8:35:46:5f:0b:50:e4:dd:13:
8e:0e:1a:9d:0b:d1:97:60:69:8b:44:a3:3a:08:f9:07:38:a3:
91:a9:69:be:28:1a:ff:d8:a0:ca:5f:3d:53:e0:70:05:d5:fd:
d1:ee:6d:c4:02:44:b4:37:61:c2:69:b0:60:18:41:ab:7c:c1:
e8:61:61:32:e9:0f:5e:f1:55:ee:8d:42:4d:5d:10:21:38:47:
b1:86:db:b2:e2:48:d8:c1:f7:60:ab:4d:4c:80:96:a5:0d:43:
ad:97:d4:eb:81:30:d3:5d:5b:9c:a9:a6:e0:4b:13:6f:0b:c8:
d8:c7:9e:b1:43:20:43:b3:5d:f0:38:a6:a7:9c:97:4a:f7:40:
86:76:45:31:6a:31:a1:52:54:9c:57:22:86:71:3f:67:b9:08:
b4:f9:54:dd:88:37:b2:ae:21:71:d6:e9:e1:85:f2:a4:13:4c:
9d:1b:10:b5:d7:db:78:35:42:cf:e5:0b:cb:f9:ec:25:34:1a:
d5:ea:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:22 2026 by rpki-client