
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json)
Hash identifier: /o3/qUN05S87WsZOQjDEwcjhoQcBham4W1l35TR8I/4=
Subject key identifier: 04:11:09:AC:45:8C:F2:B0:3E:44:DD:9C:E8:B5:78:51:C1:B3:51:91
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
Manifest number: 0130
Signing time: Sun 29 Mar 2026 05:24:52 +0000
Manifest this update: Sun 29 Mar 2026 05:24:52 +0000
Manifest next update: Sun 05 Apr 2026 05:24:52 +0000
Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: tr8yk3Lhe08NQ6l/py5vepBn3qA3m057AGAe8wzRGqM=)
2: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: YSZYviBTPxtzDHVeHnT8ow3/nXxU9t04H0K+ZmSVj7U=)
3: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: /Mfb+/GCj01R9lifsGJinmVrLBP5+B8J3/UWQZMFbAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 05:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: Mar 29 05:24:52 2026 GMT
Not After : Apr 5 05:24:52 2026 GMT
Subject: CN=69c8b7a4-a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:f4:07:3e:d1:1b:8f:99:a3:33:83:9f:f1:
41:19:05:8b:68:75:9b:e3:e1:07:5c:8b:55:3d:c4:
da:ac:23:3e:5a:22:98:4d:6f:a1:c5:5b:d5:eb:43:
69:5e:80:1d:c3:03:65:5c:76:66:a6:ee:cf:0c:d7:
cd:20:62:99:f1:1f:32:36:18:b6:5f:71:b5:f6:d5:
53:2d:da:e0:b5:9f:32:04:75:f0:26:3b:09:ac:1d:
78:18:dd:53:0c:04:58:56:2a:a0:e2:14:e1:43:1e:
80:74:26:9b:7a:09:6f:af:4b:c3:11:d0:83:69:b0:
db:b8:c6:84:38:02:f7:20:6e:66:a4:fe:38:a0:7f:
b8:b6:a0:59:f0:f1:2b:38:1c:97:85:d9:db:5d:ce:
0d:52:6e:33:96:74:8d:5e:96:ce:6d:09:4d:fd:e7:
5e:15:8c:2e:59:10:f6:de:64:47:b7:62:08:d8:71:
4e:61:a7:fa:f7:a3:47:05:97:64:0d:37:34:9f:18:
c0:72:10:3a:bc:50:e5:56:63:e2:37:99:82:46:ce:
de:b4:51:f7:7d:ea:c9:75:93:13:be:1c:5c:50:5c:
59:5f:b9:d4:8a:83:26:a1:e1:3c:d6:ff:bd:aa:73:
3b:f1:df:a9:7b:5d:ab:1f:76:cd:ff:76:0d:49:f6:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:09:AC:45:8C:F2:B0:3E:44:DD:9C:E8:B5:78:51:C1:B3:51:91
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:de:56:92:e5:34:2b:ce:13:bc:eb:77:a8:93:2c:a1:48:21:
a0:0b:7a:83:9c:ba:d1:84:1d:00:04:3e:bc:dc:d1:ca:f4:f7:
1e:24:6b:10:e7:c2:3a:48:08:9a:d6:a1:fa:8a:8c:81:59:a1:
2b:b0:39:4a:2f:81:e7:a4:25:c9:a3:09:cb:12:64:11:90:8a:
6b:29:cb:d3:9f:92:61:84:d9:b3:5f:0f:bb:84:70:09:6d:f8:
4d:f9:42:7c:d1:a2:d2:6a:7a:24:a0:dd:e1:73:45:77:fb:25:
38:47:15:59:93:14:18:d3:11:4d:78:1f:30:93:d9:b2:df:b6:
1a:53:cf:42:82:af:fe:8c:19:ab:f5:e1:54:42:34:27:f1:01:
85:e3:c0:a6:22:0e:ed:12:f1:a3:79:05:9c:1e:19:0a:37:52:
55:92:70:7e:8b:c0:54:2b:2a:59:44:e9:82:15:ce:8b:5e:c9:
c8:f4:9c:ad:30:dd:bf:74:c8:72:c1:d2:79:ad:8e:b8:80:a1:
27:31:aa:dd:74:23:66:f3:44:5d:ac:22:af:44:bf:5f:36:3d:
08:3b:c0:4f:f9:75:28:1e:f3:b7:b4:98:25:be:dc:3c:09:09:
86:b6:c5:0f:7b:87:5a:44:d7:7f:0a:5c:63:7f:c9:1e:16:82:
06:6d:a0:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD
MzkwNUNCNjUwHhcNMjYwMzI5MDUyNDUyWhcNMjYwNDA1MDUyNDUyWjAYMRYwFAYD
VQQDEw02OWM4YjdhNC1hNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1wf0Bz7RG4+ZozODn/FBGQWLaHWb4+EHXItVPcTarCM+WiKYTW+hxVvV60Np
XoAdwwNlXHZmpu7PDNfNIGKZ8R8yNhi2X3G19tVTLdrgtZ8yBHXwJjsJrB14GN1T
DARYViqg4hThQx6AdCabeglvr0vDEdCDabDbuMaEOAL3IG5mpP44oH+4tqBZ8PEr
OByXhdnbXc4NUm4zlnSNXpbObQlN/edeFYwuWRD23mRHt2II2HFOYaf696NHBZdk
DTc0nxjAchA6vFDlVmPiN5mCRs7etFH3ferJdZMTvhxcUFxZX7nUioMmoeE81v+9
qnM78d+pe12rH3bN/3YNSfbRcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQRCaxF
jPKwPkTdnOi1eFHBs1GRMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB
RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR
NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxt5WkuU0K84TvOt3qJMsoUghoAt6g5y60YQdAAQ+vNzRyvT3HiRrEOfCOkgI
mtah+oqMgVmhK7A5Si+B56QlyaMJyxJkEZCKaynL05+SYYTZs18Pu4RwCW34TflC
fNGi0mp6JKDd4XNFd/slOEcVWZMUGNMRTXgfMJPZst+2GlPPQoKv/owZq/XhVEI0
J/EBhePApiIO7RLxo3kFnB4ZCjdSVZJwfovAVCsqWUTpghXOi17JyPScrTDdv3TI
csHSea2OuIChJzGq3XQjZvNEXawir0S/XzY9CDvAT/l1KB7zt7SYJb7cPAkJhrbF
D3uHWkTXfwpcY3/JHhaCBm2gOw==
-----END CERTIFICATE-----
Generated at Mon Mar 30 03:01:18 2026 by rpki-client