
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: jMMGM4aP/buMSUNt5cosmq+X+r4zIgM35WIk7LIiz+U=
Subject key identifier: 75:11:98:36:08:C7:5A:61:71:91:B2:BA:8F:59:E6:62:5B:81:9A:14
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 0874
Signing time: Thu 16 Jul 2026 21:06:20 +0000
Manifest this update: Thu 16 Jul 2026 21:06:20 +0000
Manifest next update: Thu 23 Jul 2026 21:06:20 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: h7EuMWCUUiPXu3n2NL8RppOIHYK/3MmnYULDZPk1jpc=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 21:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Jul 16 21:06:20 2026 GMT
Not After : Jul 23 21:06:20 2026 GMT
Subject: CN=6a5947cc-0b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:f4:e7:ed:e6:74:81:b4:da:50:a3:59:05:
2c:6a:ba:22:b3:a7:d1:86:5c:0d:fe:f9:9b:a2:70:
00:cc:fa:c7:88:df:e0:56:42:b8:bb:cb:28:3c:b8:
21:df:5a:6c:a9:19:95:1f:95:13:9f:da:d2:2c:01:
00:f4:3d:91:6b:43:33:61:e4:1a:c1:d0:02:e1:ff:
cc:1e:5f:20:53:30:79:77:a2:92:0d:dc:16:a7:5c:
f9:4f:a5:00:91:b5:4c:31:03:3e:a2:da:3d:6b:3f:
ee:5a:01:aa:49:e3:00:4b:97:e0:40:dc:a6:6d:86:
d5:5a:52:2d:7f:98:dd:1c:46:20:cf:fd:00:69:10:
04:7a:77:86:dd:86:d5:78:ca:a2:50:ac:2f:60:12:
08:9a:36:57:ca:73:46:91:83:d3:b3:72:77:d9:a3:
ef:64:2d:61:d3:39:96:08:9b:03:78:f0:e5:48:74:
56:36:98:d9:d0:d4:13:6d:a2:7d:21:1b:6f:08:c7:
d6:3e:20:86:bc:3a:29:b0:7c:22:ae:97:f3:fa:50:
7a:8a:40:06:2b:52:ed:06:a4:b6:84:91:cf:99:fc:
63:ac:f6:ba:cc:16:a8:13:a2:df:9d:10:f5:51:00:
f4:93:bb:46:23:72:57:4f:a3:a8:70:f9:91:fb:55:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:98:36:08:C7:5A:61:71:91:B2:BA:8F:59:E6:62:5B:81:9A:14
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:d6:7c:02:e9:1e:29:6a:a7:98:a9:33:95:7d:55:42:bd:93:
9d:d6:9b:5d:f8:f6:ab:77:fc:bb:25:f5:2d:f7:89:7f:0f:dd:
5f:eb:b8:06:b5:6a:c2:5e:59:47:25:30:90:f7:1f:bb:04:bb:
2d:6b:38:9a:58:9c:bd:e9:48:28:b3:30:f1:64:db:93:eb:52:
ae:a2:67:24:a7:8c:90:4c:2d:d7:2a:79:6e:ef:8c:b2:7e:e6:
f1:82:77:cb:4f:3e:c9:5c:6f:5f:00:05:b3:2f:9f:79:9a:a3:
30:f6:af:5d:ff:c8:f3:18:c6:87:84:f1:a7:6d:ae:50:1b:cb:
be:9c:82:1b:4b:55:ae:4d:58:98:cf:f8:10:b4:4e:eb:76:d2:
ad:70:76:79:73:71:20:e4:25:aa:58:2f:4c:98:e8:9d:40:20:
c8:7d:78:b4:7d:93:3c:e4:03:31:61:fe:e2:f1:af:6e:5c:07:
44:ae:3a:02:a6:5e:ca:0e:4a:cc:25:70:b7:23:21:ba:bc:ae:
0e:70:a9:19:da:48:2f:5e:92:ab:f8:39:f3:09:d9:f0:2c:aa:
f9:db:49:af:f6:b7:1d:fc:6a:68:f9:94:18:11:5f:97:4c:9d:
97:84:cc:3a:c3:7a:18:b5:82:b2:ab:da:cc:e9:74:b9:29:96:
c0:4b:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:17:15 2026 by rpki-client