
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: 1zIA0tA270b9RRP/3cfIeSCvmJE+CYmTx+Fsl08RuQo=
Subject key identifier: D7:FD:72:66:6C:CF:09:6C:3E:E3:B7:22:6A:45:CA:31:F3:F9:E3:05
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 0277
Signing time: Sun 05 Apr 2026 01:30:49 +0000
Manifest this update: Sun 05 Apr 2026 01:30:48 +0000
Manifest next update: Sun 12 Apr 2026 01:30:48 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: EZ4pGM8JBmvzkdruwHQdEdPruQENzIDbkomeV3nwer0=)
2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: fg88o765nCwItF2Hc4hiKhK6MdJibWRYf4SuZ9yJYVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Apr 5 01:30:48 2026 GMT
Not After : Apr 12 01:30:48 2026 GMT
Subject: CN=69d1bb48-fcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:af:51:dc:e7:7d:1d:d9:97:b6:3d:2b:39:
f8:43:b6:3b:2b:14:72:c3:89:5c:dc:d2:5d:87:13:
78:d8:e8:9b:36:b9:d5:7e:d0:cf:19:ae:ff:af:3c:
ea:c6:86:48:db:06:65:14:7c:5c:f8:2e:c5:e0:05:
58:ad:3c:4f:8c:0b:99:52:9a:50:df:68:a5:0e:5e:
be:94:fc:c2:4c:aa:18:35:72:9b:29:1d:58:fc:f2:
86:dc:da:c3:e9:04:c7:e6:31:81:14:a9:64:71:de:
b7:52:6f:fb:b1:46:0e:6c:71:79:63:b5:32:91:dd:
41:93:55:b5:3d:fe:d6:c5:13:8e:70:a5:a8:3e:0b:
a0:d4:d0:14:d6:79:83:08:70:63:5a:db:7f:8d:8a:
60:19:00:65:93:61:c7:48:b3:2e:d2:9f:74:39:3e:
7a:d1:7f:bf:f2:aa:51:0c:20:fc:f7:8b:13:de:78:
bf:e5:43:a1:64:b0:4f:08:27:d4:c9:d0:21:f2:1d:
9b:21:b0:c4:8b:2e:e1:3d:7d:37:35:41:42:ec:b0:
4c:d1:01:c3:be:d1:4a:97:01:26:6f:ee:a6:a8:6a:
63:cd:63:7b:9f:09:77:39:2d:15:41:d3:22:4d:db:
c8:89:75:5d:6d:d4:8b:a0:e0:69:2e:b8:0f:cc:d1:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FD:72:66:6C:CF:09:6C:3E:E3:B7:22:6A:45:CA:31:F3:F9:E3:05
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:dc:24:33:a8:3e:03:de:af:b4:86:16:d2:1f:7d:f3:49:0f:
f2:bd:83:36:58:ad:48:7d:c9:31:71:3b:85:1b:92:e4:08:07:
c2:60:1a:77:e5:7f:11:09:03:bd:93:49:b8:70:1b:36:a9:fb:
33:bf:42:c1:62:5e:49:64:79:55:b6:81:6f:48:f2:51:85:b6:
e5:20:99:a4:34:d2:fa:c1:6d:99:30:fa:88:53:da:5b:d4:6a:
be:8e:fc:70:dc:59:77:2b:6d:2f:ea:c5:8c:fb:e0:ae:75:b3:
32:e2:9e:64:04:8f:5a:af:a0:b6:81:1d:2c:f1:87:fd:63:03:
29:4a:0b:7f:22:e7:2d:f6:33:b6:25:98:37:6e:18:49:ce:5e:
81:d0:11:1d:d5:99:ef:0c:d4:6d:87:fe:bb:33:55:df:b8:f4:
cf:06:6d:04:4a:7f:39:05:50:d4:4e:78:2a:24:03:da:a6:6b:
12:c4:de:f2:e0:a2:c4:15:a3:5a:09:c0:df:5a:b7:9c:34:56:
0d:ac:d2:f0:dd:69:56:76:00:b9:06:27:c6:51:ec:f2:f2:51:
50:1a:02:44:c4:89:8a:59:75:d8:38:9b:b6:ba:a4:27:c2:b8:
0a:24:b3:55:ff:e7:a5:d8:16:37:69:72:55:70:d3:7b:46:8a:
9a:14:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:57:19 2026 by rpki-client