
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json)
Hash identifier: VV3xeeOSgr42UoaDmRhE3RmGXr05+wXqd2fxM8lCrnE=
Subject key identifier: D0:3D:BC:8E:C2:33:AA:6D:67:C3:81:C3:B3:80:11:2C:00:93:49:85
Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Certificate serial: 043A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
Manifest number: 0433
Signing time: Thu 17 Sep 2026 00:12:33 +0000
Manifest this update: Thu 17 Sep 2026 00:12:32 +0000
Manifest next update: Thu 24 Sep 2026 00:12:32 +0000
Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: GoorOerf+GFHMuq9Ap42eOn1bT2K+TE21dNQJdDfh84=)
2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: psNUn0KVy8LcXg75lwX0oEYThtl+Fy/xxsSylBXFzFo=)
3: 2678DE4275A011F1A0FDA4E35BA30FBC.roa (hash: HO4c9apAU+SF4J/bcSAIOWLgnk4/jkKppRJxjoUD8Lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Validity
Not Before: Sep 17 00:12:32 2026 GMT
Not After : Sep 24 00:12:32 2026 GMT
Subject: CN=6aab3070-0eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:fa:60:68:e6:84:2e:bf:05:57:ad:50:7a:
e6:96:e4:b2:13:45:19:11:7b:e9:00:11:34:37:eb:
66:28:ff:3a:b4:31:14:d0:9b:68:60:e5:1d:1b:3a:
31:d3:cb:12:41:5e:15:83:78:33:7c:d7:3d:13:16:
4d:dc:07:0e:66:2a:53:1f:ee:e3:8d:a9:d0:65:80:
7c:e4:43:54:6d:5d:62:95:ad:54:9d:9b:9e:36:c8:
9e:67:2f:34:7d:e0:89:65:44:44:3a:b2:13:b4:bc:
c4:95:48:65:9c:85:a8:4d:f2:84:9c:a5:aa:7b:60:
66:73:54:65:ab:c1:99:db:10:89:70:e2:df:5a:10:
6c:7a:4d:3d:ac:b6:82:51:63:63:ed:db:22:d9:3f:
54:6e:16:06:eb:45:06:11:c9:42:cc:2f:73:b1:ea:
c0:c0:91:b0:e1:de:78:d6:9c:e8:19:e9:0f:15:e4:
86:06:eb:c4:05:70:f8:c0:7e:43:87:80:4d:43:34:
62:c8:b8:61:6d:9a:30:b1:5e:88:af:49:ff:ac:93:
e2:a3:54:5f:ca:1d:63:3a:df:02:98:d1:13:a2:93:
08:9a:01:48:bf:4f:e7:9f:bb:19:67:a5:05:cb:e9:
d6:ce:90:91:d4:48:2f:2d:12:f9:78:75:40:d6:a0:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:BC:8E:C2:33:AA:6D:67:C3:81:C3:B3:80:11:2C:00:93:49:85
X509v3 Authority Key Identifier:
keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:65:33:b5:98:41:e4:bd:e6:9e:0d:78:04:06:f5:cf:68:4e:
d8:f8:04:a2:c6:49:09:c5:b8:2f:0c:a9:bd:2b:f8:5c:65:e8:
1d:fa:54:91:f7:46:23:3e:7a:9b:cc:03:69:18:f2:c9:5c:85:
4d:9a:ac:f2:b1:89:b4:6a:4d:6d:26:bb:d2:9d:be:24:1d:f1:
3f:b8:9c:f0:17:0c:fd:1b:70:ee:5f:55:c8:ff:d6:0a:aa:31:
b6:fb:57:6f:b1:69:a9:b7:7c:79:25:34:9b:1d:97:c4:c0:ed:
5e:dc:bc:59:df:78:57:95:79:13:05:96:2d:41:f7:59:e8:29:
9c:bc:fc:cd:80:74:ba:18:f9:96:a9:e7:82:2e:f7:35:de:ed:
9e:e1:9e:03:8e:79:a3:c6:4c:3a:93:b9:14:25:61:82:e2:e0:
bc:1c:37:9a:44:2a:0e:e5:86:e5:ad:ca:01:c3:0e:9f:a9:b8:
ae:f5:7d:b5:68:10:0f:a8:d9:8f:5d:7f:10:40:64:67:16:e4:
0c:5e:ca:e2:6b:b6:a0:22:cc:66:ec:69:6d:4b:e3:89:33:e8:
c4:ff:ce:2d:50:46:64:65:7d:24:3e:a1:9a:84:75:6b:9f:79:
d5:fd:17:2f:69:f8:3e:0c:7a:b3:d2:a3:0c:48:c6:76:05:83:
f5:5e:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:18 2026 by rpki-client