
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: ESvepl96gD0oCofo3khcvc6gyxj5bpmrJt7aECMyyyQ=
Subject key identifier: AF:69:D8:44:D5:28:06:83:74:F9:F0:FB:11:63:C2:2F:E8:0B:A1:8E
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 0296
Signing time: Mon 01 Jun 2026 02:24:07 +0000
Manifest this update: Mon 01 Jun 2026 02:24:07 +0000
Manifest next update: Mon 08 Jun 2026 02:24:07 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: JBs83AL209qdB6KjYpTMUdkeIYsonmm8mAZDIVjRzsc=)
2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: 3JVZTKT2bTQfUQV6fcjK9Pz/evus9qiGDaA8VU+l7vM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 02:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Jun 1 02:24:07 2026 GMT
Not After : Jun 8 02:24:07 2026 GMT
Subject: CN=6a1ced47-0efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:44:e9:3d:62:dc:3e:38:2c:8e:5d:4a:23:
d7:08:64:69:3f:43:04:88:64:fa:bd:de:90:68:29:
25:fe:46:49:52:56:80:27:f0:8e:62:b0:f3:a2:8f:
ae:e9:9c:52:94:ce:87:b9:03:27:dc:ff:13:c2:12:
83:41:34:d3:de:24:38:d4:5e:0f:7e:30:27:ef:28:
c3:64:0e:78:c5:f4:d1:26:6e:f3:f4:96:ef:81:df:
9f:0b:24:56:1e:48:a0:68:fa:9a:9b:dd:96:c6:d8:
d3:3d:85:da:1d:06:39:2b:9a:41:8a:7e:14:8f:34:
f9:75:0b:b1:a9:14:de:ad:68:08:2b:41:c7:d0:db:
e6:0c:8b:27:51:37:bd:d2:c0:57:fd:36:64:c3:23:
76:e2:fa:86:c4:22:65:da:5a:a1:8c:b1:d0:b9:74:
2b:ae:f1:59:dc:5f:22:27:0a:0d:b6:2c:07:0f:77:
03:86:56:a9:4a:d7:ae:b1:bf:5a:5c:d0:d4:2d:a4:
99:ff:7f:f2:f1:43:2d:59:19:d4:b0:e0:60:10:40:
d2:a7:e0:fb:8d:b9:b1:e6:42:e0:40:e1:71:b3:21:
c8:4c:63:a9:9c:f3:28:cb:b8:85:7e:89:c2:42:eb:
78:37:3b:d0:86:e0:fd:7e:7c:64:63:11:b8:a1:48:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:D8:44:D5:28:06:83:74:F9:F0:FB:11:63:C2:2F:E8:0B:A1:8E
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:1d:e5:3e:b2:ec:d5:1b:1f:8f:85:9d:4c:5a:dc:31:bf:16:
35:ee:1e:bf:7b:58:c6:94:9a:92:64:79:0a:50:c3:52:b2:52:
8f:1c:31:b6:17:46:ec:02:9f:02:50:77:ea:32:da:2e:7f:20:
2f:21:f6:2f:c1:0f:76:21:6f:30:fc:93:e5:1d:39:bc:ef:e3:
2f:99:58:ff:f4:24:1b:af:fa:20:23:07:8b:59:e9:f0:fe:e8:
06:41:25:ba:92:83:0f:f6:45:57:a1:e2:6d:18:45:13:5a:09:
76:a8:99:71:90:9c:ee:a9:fb:3b:63:45:aa:bb:82:b2:10:d5:
17:3b:48:26:4f:04:84:89:61:4d:b6:a2:be:a1:a3:5e:b6:0a:
3c:61:9e:fb:60:c1:7d:2e:ec:8d:6c:a2:89:cd:3b:a9:6a:52:
ff:cf:3f:71:42:8b:c4:bb:49:99:74:fa:53:b1:c0:d5:a4:bc:
d0:66:d6:94:30:47:c8:14:45:0a:e1:73:ac:fd:6f:9a:16:c5:
8c:c9:1f:31:05:bd:16:1c:00:cf:da:9d:10:03:7a:65:45:7a:
ff:50:c8:fd:49:6b:06:db:88:b3:9e:f2:41:33:ef:02:04:97:
3e:a8:32:fe:c0:b6:b0:69:85:32:1c:db:cd:ca:3f:4c:7a:48:
ce:60:e7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:47 2026 by rpki-client