
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: 2ZSbvfPGjZ5sBdi9tud6owuULhtwmKpduEYtNbKDTeY=
Subject key identifier: 15:67:09:A9:E2:7A:21:5D:A3:B4:8B:99:A1:88:A9:D8:AE:E2:71:52
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 03CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 03B9
Signing time: Wed 07 Oct 2026 00:44:25 +0000
Manifest this update: Wed 07 Oct 2026 00:44:24 +0000
Manifest next update: Wed 14 Oct 2026 00:44:24 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: FaHO5AUOs5+WuHd59dVy28RZOJuZOlv6jdMODHKc364=)
2: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: x4NHVBzqjdaRb4g6D343UGd0Ui9qfpMZfGfoXAmd0qY=)
3: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: 3Ix6jRXAiLunM3PIJZxVlUi54u6IasjEvRYGdXCHut4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Oct 7 00:44:24 2026 GMT
Not After : Oct 14 00:44:24 2026 GMT
Subject: CN=6ac595e9-30b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2a:2b:5f:b4:e7:4b:ef:e3:23:d6:7e:92:44:
ad:8f:4c:31:f1:dd:3a:f3:fe:24:bf:70:67:e4:01:
25:d4:2e:42:26:3b:5f:eb:89:c2:13:e8:aa:6e:cf:
c0:b4:0a:44:e9:da:11:20:8a:65:e5:f7:f7:33:84:
03:ca:04:8d:45:67:5c:0e:a1:4b:fc:37:f3:b4:7e:
4b:b5:73:32:a4:19:8b:21:7e:39:56:7f:98:f0:bd:
77:2f:d7:46:6c:37:15:7e:2b:5d:57:11:a4:d0:35:
b6:05:d4:59:5a:e7:70:3c:f2:25:5b:5e:74:2f:b5:
8c:44:4e:31:3f:d8:bb:9d:82:86:27:80:9d:bd:f3:
53:5b:00:4e:99:50:d5:60:98:f8:a8:dd:5b:4a:92:
54:2c:99:b1:f8:8e:52:f1:6d:ee:20:b4:c0:25:b1:
f9:e0:b3:fb:6b:48:7e:05:c7:2b:7e:f2:81:8f:ee:
8b:3d:ba:f4:f1:06:7e:0f:8c:4d:bb:73:72:4e:11:
8d:6e:7d:a7:9d:aa:f1:b0:46:46:92:f7:21:07:df:
dd:8c:af:2a:7c:08:69:34:5b:e6:0f:c8:98:af:f6:
a7:eb:ba:ff:de:d9:2d:51:eb:25:01:ef:b0:cc:50:
aa:46:a4:24:14:db:45:12:5c:b1:6f:35:ee:21:e9:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:09:A9:E2:7A:21:5D:A3:B4:8B:99:A1:88:A9:D8:AE:E2:71:52
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:8d:ae:07:eb:b0:bf:24:a1:81:5f:62:53:1a:15:5e:aa:00:
e2:27:b2:f7:4a:c2:29:b1:f7:23:f2:72:7d:86:6e:e8:c2:3e:
93:a9:71:58:f1:b3:71:6e:74:f3:cb:db:5f:1c:c4:ee:5c:db:
46:7e:ee:1e:f2:a9:23:05:58:b2:2e:44:b6:ab:5b:1a:56:5c:
f6:7f:b0:7a:71:6e:5e:48:da:f4:8c:56:f9:fa:71:6c:ba:46:
23:7f:ff:72:c4:6c:6f:d1:ae:c5:c4:6d:52:3b:91:59:20:32:
01:46:f1:35:f7:f0:3f:62:d9:b6:40:41:ee:c3:de:86:52:04:
11:4e:ec:62:be:d6:60:9a:d1:f6:0a:49:83:6e:99:a3:c4:99:
84:f3:8a:bf:50:1d:04:48:3b:45:4a:4c:41:e0:f8:36:85:2b:
d4:81:2a:a3:fc:7a:bd:c7:df:3e:90:b0:4f:80:5a:c2:e2:b0:
0f:a9:b5:50:df:69:83:4f:bf:1b:09:d0:45:1b:d3:40:84:bb:
4f:6e:a4:64:66:5b:e0:ce:03:fa:45:de:e6:67:81:b6:a9:a8:
5e:d8:5f:a5:e1:13:ec:17:1e:df:1b:8e:22:eb:5e:64:8e:b0:
ca:3d:1e:04:a5:d1:f3:de:4f:57:9d:1b:5f:8e:67:a9:25:03:
86:80:d0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:31:26 2026 by rpki-client