
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier: nmpxT5MD9m2iFWekhooSrP7KhU6AXmFAlmX/cZlwXmU=
Subject key identifier: F5:F3:B9:BA:17:8D:B4:BE:3A:85:CB:8F:BF:5C:C8:B4:05:3F:AB:3B
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number: 02B1
Signing time: Mon 27 Jul 2026 02:59:27 +0000
Manifest this update: Mon 27 Jul 2026 02:59:27 +0000
Manifest next update: Mon 03 Aug 2026 02:59:27 +0000
Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: fPdyzcYkm7gwEIY87IHB2CbAkl41XTonQCJvkpq9TzM=)
2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: lzyN5MNSEZnDugz21KoEYtAxenHtxzzxEPsQqNcKc4k=)
3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: Hb11VPodi8i0P+rMM2y+1RDJ6AN+xMk67SgHzAaL58I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Validity
Not Before: Jul 27 02:59:27 2026 GMT
Not After : Aug 3 02:59:27 2026 GMT
Subject: CN=6a66c98f-4c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:0e:e2:be:81:41:d5:0b:82:76:90:f7:50:
79:9b:9a:f4:c0:ed:6f:6f:10:0b:ad:c8:d9:ab:de:
e3:2b:42:60:bc:51:df:01:f5:67:81:98:c7:85:32:
2a:5d:5a:0f:e5:c7:68:c9:97:db:ca:d1:9c:7c:9d:
50:d8:ac:8b:f1:b5:14:e8:b5:8e:f1:fe:09:65:39:
6b:26:98:e5:66:df:ca:63:2e:44:08:a7:69:dd:89:
d3:8d:ff:ee:e6:24:b5:bc:50:8d:9c:38:d0:85:80:
fb:02:c1:fa:0a:97:6f:71:be:a5:e3:9d:ec:a3:61:
9a:34:cd:f9:f1:bb:04:06:1c:34:98:63:ac:82:b6:
c1:37:3d:72:84:fd:3b:2b:ff:1f:e1:68:b2:3d:67:
fd:23:c9:33:49:e4:0d:f8:3c:02:a4:30:2e:06:a4:
f8:f2:32:6e:52:13:05:cb:88:fb:de:9d:25:5c:41:
56:43:0a:80:7e:40:73:02:2d:04:b5:03:24:31:fb:
ef:7d:5d:a2:09:8b:23:e4:b0:25:cb:1b:c7:f7:be:
66:39:3e:ad:bb:f5:00:22:fb:0b:39:ef:e8:3f:31:
8a:af:0a:1f:fe:e5:46:6a:39:ad:1a:68:2a:89:ce:
0f:4a:cc:41:3b:4e:f6:50:83:73:12:3d:57:20:6d:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:B9:BA:17:8D:B4:BE:3A:85:CB:8F:BF:5C:C8:B4:05:3F:AB:3B
X509v3 Authority Key Identifier:
keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:02:bc:72:d2:85:72:5a:f5:99:09:42:2f:49:c6:22:da:ef:
5f:6d:0a:57:38:5a:8a:47:9e:6c:05:63:2c:73:28:72:17:7c:
c3:eb:54:68:39:e0:56:87:fc:6f:df:fe:b1:af:d4:27:0c:cd:
b4:ea:0a:ab:29:36:14:fe:5c:ea:89:88:fc:78:ca:b7:c7:65:
f5:85:49:5d:2e:fc:09:78:1a:c5:b6:ad:f8:67:b8:17:8f:c4:
e4:b6:f7:20:1b:4a:71:ee:93:41:45:f4:d6:0e:fa:52:c0:26:
2a:2e:df:53:61:69:97:5b:b9:7f:f3:63:76:93:17:cf:c1:b7:
64:0c:91:fb:d6:46:14:8e:4e:f7:a6:d4:97:dd:4d:31:38:0d:
95:ca:a1:c3:79:5e:09:78:67:4e:2c:51:72:a4:50:05:a8:8c:
9d:0e:39:d2:c3:be:5c:2f:5e:36:c4:c0:8a:cc:b6:37:fe:bc:
ab:5c:cb:9d:62:8d:83:69:43:37:71:9d:74:2f:62:c5:a1:11:
40:42:74:7d:39:2c:e8:d2:62:f5:60:00:e7:44:f5:14:77:c0:
5b:99:46:7e:73:87:df:8a:38:7f:9f:32:4f:ea:40:6c:5c:ff:
6e:80:cc:c4:ab:41:8b:78:fb:56:70:76:92:35:a6:40:06:46:
91:01:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:45:24 2026 by rpki-client