
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json)
Hash identifier: ZlafWUWijzsgwoEOJVqDjFH2Ni7kDMyLNv9UXSHh1z4=
Subject key identifier: CD:36:C3:39:AB:FA:1A:4B:56:1E:D3:E4:0A:E3:20:68:56:81:77:47
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
Manifest number: 39
Signing time: Fri 19 Jun 2026 08:50:50 +0000
Manifest this update: Fri 19 Jun 2026 08:50:49 +0000
Manifest next update: Fri 26 Jun 2026 08:50:49 +0000
Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: I7dD3rHGDd0uut4gCFwL0Ej7z/MA58HTtja2hqEZkX8=)
2: 7E0A2AD822E611F1A3C138F6CC833773.roa (hash: z0RXPVTLkvsIzF0pOhO2UmlkU0gKTzJ6WJ2WACgPdDM=)
3: EC61B8905FD911F1BCFAB64E7447A888.roa (hash: 14ChNOnaqeRoMs3wWE9pdDym9f8/BmS3Zf9ag/0ql1E=)
4: EA9A11EA214C11F1A100880B383D8C67.roa (hash: eeD6uCbIvlHKsgpeKIC0IXAVj8jY3ITgO5O6p0iRhic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 08:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Validity
Not Before: Jun 19 08:50:49 2026 GMT
Not After : Jun 26 08:50:49 2026 GMT
Subject: CN=6a3502e9-2091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:bf:46:12:0c:4a:34:77:a6:b9:8b:19:ca:
88:99:c8:38:4e:30:f3:35:45:16:e7:5f:cc:6b:f3:
74:2b:e0:1e:20:a1:ae:18:88:bb:4a:16:d1:97:8a:
d0:56:b0:02:66:69:98:1d:b3:aa:a8:9f:70:9e:15:
06:2f:14:c7:dc:c6:4f:42:6b:08:3a:cf:0e:b3:b0:
71:9a:32:ab:25:f3:68:b4:13:1f:6e:89:82:43:72:
3e:4e:fb:6a:1a:f1:72:f5:73:98:89:82:0a:a2:81:
db:2c:69:ad:72:3c:14:3c:6a:e7:62:28:98:8e:17:
f9:db:68:f2:aa:45:39:dc:78:eb:c8:0e:cf:0e:20:
91:8f:00:35:f5:1c:4d:2a:e7:20:1b:d6:01:bf:eb:
94:7c:78:b7:17:9b:8b:e5:8a:6f:b2:5f:b6:ba:1f:
fa:c0:05:03:11:85:3d:4f:04:80:cd:24:e3:54:f9:
65:fd:75:6b:30:99:e8:0f:99:fb:29:b7:cf:96:fe:
64:a9:97:7b:91:35:53:d7:75:81:45:be:6c:df:4b:
3b:6c:7e:81:44:2e:d9:62:17:9a:ab:35:e8:30:3d:
78:6a:4d:ee:b5:ea:a3:fd:88:76:b0:21:d4:6f:29:
e3:a7:6f:31:66:a8:5d:58:d3:32:89:17:a6:c2:78:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:C3:39:AB:FA:1A:4B:56:1E:D3:E4:0A:E3:20:68:56:81:77:47
X509v3 Authority Key Identifier:
keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:bb:ec:f5:c9:4f:ba:9d:96:ac:59:b7:3e:bd:16:aa:a8:
d9:80:55:ed:e9:ec:c5:2b:81:d9:1e:bb:0f:96:f0:bc:d3:41:
cb:02:3f:b5:51:5d:2f:1d:5b:36:ef:40:60:9c:e7:b8:e1:c9:
61:c6:97:e4:b5:76:19:2e:89:62:50:ef:4b:67:af:8f:5b:88:
4d:45:aa:a4:3d:10:37:bc:b6:b9:c3:fa:6f:cf:06:0a:80:a8:
83:de:ac:83:d6:68:f4:99:cc:d5:81:83:94:40:48:a7:de:68:
f9:d0:9f:f6:dd:16:a5:d1:78:fa:e7:47:0a:19:ec:ba:54:c7:
e9:2d:d9:6c:1d:39:33:b1:8b:09:f2:02:76:4b:26:95:59:81:
9e:16:ea:6e:14:9e:87:7c:02:99:20:48:9f:1e:03:33:e2:ee:
a8:d2:dc:04:5f:2f:5a:fd:27:dd:73:3c:3d:13:ca:4a:8f:c2:
6b:32:7e:f2:00:e6:e8:bb:35:40:28:ae:7a:45:38:c7:ef:58:
de:38:85:1b:3c:7b:4c:68:5b:e6:cb:90:81:ac:87:f8:ec:8a:
22:cd:15:06:a6:d0:59:cc:c4:ac:aa:bd:28:0d:d9:51:1b:75:
df:c0:68:75:d1:c4:05:39:40:95:54:de:4a:dc:dc:18:e2:9d:
cc:2f:79:dd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
MDhDMDExMC8GA1UEBRMoRDgwNzM4MDNFRUNGRjRGMTlFRkY5OTU3QzcxNDdBRkND
QUEwMTlGNTAeFw0yNjA2MTkwODUwNDlaFw0yNjA2MjYwODUwNDlaMBgxFjAUBgNV
BAMTDTZhMzUwMmU5LTIwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5i79GEgxKNHemuYsZyoiZyDhOMPM1RRbnX8xr83Qr4B4goa4YiLtKFtGXitBW
sAJmaZgds6qon3CeFQYvFMfcxk9Cawg6zw6zsHGaMqsl82i0Ex9uiYJDcj5O+2oa
8XL1c5iJggqigdssaa1yPBQ8audiKJiOF/nbaPKqRTnceOvIDs8OIJGPADX1HE0q
5yAb1gG/65R8eLcXm4vlim+yX7a6H/rABQMRhT1PBIDNJONU+WX9dWswmegPmfsp
t8+W/mSpl3uRNVPXdYFFvmzfSztsfoFELtliF5qrNegwPXhqTe616qP9iHawIdRv
KeOnbzFmqF1Y0zKJF6bCeNcRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzTbDOav6
GktWHtPkCuMgaFaBd0cwHwYDVR0jBBgwFoAU2Ac4A+7P9PGe/5lXxxR6/MqgGfUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOEMwLzc5NkFBMTQyMjE0
QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dm
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMkFjNEEtN1A5UEdlXzVsWHh4UjZfTXFnR2ZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw
OEMwLzc5NkFBMTQyMjE0QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBH
ZV81bFh4eFI2X01xZ0dmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAuTrvs9clPup2WrFm3Pr0WqqjZgFXt6ezFK4HZHrsPlvC800HLAj+1UV0vHVs2
70BgnOe44clhxpfktXYZLoliUO9LZ6+PW4hNRaqkPRA3vLa5w/pvzwYKgKiD3qyD
1mj0mczVgYOUQEin3mj50J/23Ral0Xj650cKGey6VMfpLdlsHTkzsYsJ8gJ2SyaV
WYGeFupuFJ6HfAKZIEifHgMz4u6o0twEXy9a/Sfdczw9E8pKj8JrMn7yAObouzVA
KK56RTjH71jeOIUbPHtMaFvmy5CBrIf47IoizRUGptBZzMSsqr0oDdlRG3XfwGh1
0cQFOUCVVN5K3NwY4p3ML3nd
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:34:11 2026 by rpki-client