
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json)
Hash identifier: 66nDTapQotd/95ctGpqYGCC+6NMPWBkpTxAJkZm9nPA=
Subject key identifier: 58:62:E1:9F:71:AC:41:E9:C7:34:D3:CD:FB:1B:A1:2D:1F:36:5E:5B
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
Manifest number: 7C
Signing time: Wed 07 Oct 2026 08:31:38 +0000
Manifest this update: Wed 07 Oct 2026 08:31:37 +0000
Manifest next update: Wed 14 Oct 2026 08:31:37 +0000
Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: BsyQbzidXGIUBIwKhrV3rjkUUmcLhy9ic34ei2m3Efo=)
2: 65E54028BE0911F1B07D70305411F970.roa (hash: qsVWxHxDV1XO+u2dkDtoW+PXZvBZ2AgdkW90LlAc/bo=)
3: CE93738EBE0811F19E65C7285411F970.roa (hash: eTePzZthCLCfAO4M8nOmebFDRGb48Mw6WRdsRQl/fUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Validity
Not Before: Oct 7 08:31:37 2026 GMT
Not After : Oct 14 08:31:37 2026 GMT
Subject: CN=6ac60369-2dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:f4:1a:5d:05:8b:60:56:f1:47:8b:2b:1e:
e1:58:07:c2:2d:7f:fc:36:96:73:ab:6d:83:09:81:
51:12:e7:0c:c3:eb:a2:d8:b1:e1:fa:f8:d5:65:f8:
2b:88:cb:89:aa:7c:26:a6:0f:c6:ba:4f:8c:8a:f1:
65:14:c4:0d:56:e2:8a:cf:33:f4:dc:10:4a:0c:f7:
0f:3b:c6:4d:17:9b:d9:4d:03:b4:cf:71:31:e4:d5:
67:ff:d5:2c:ac:03:2e:05:84:33:a9:f5:94:35:a1:
67:ca:fe:b2:12:53:11:d3:61:09:b7:88:63:23:05:
b8:99:b8:e5:ed:58:ca:46:62:bc:6d:2f:fa:56:e8:
2d:26:0e:15:97:c8:2f:b6:ec:4c:ad:da:a5:45:e9:
3b:69:79:ba:4d:cf:3a:32:e8:ba:55:7d:1c:98:97:
16:44:49:ee:0b:0b:f0:d9:14:52:9e:10:a9:5b:8f:
ef:66:ae:56:ec:bf:a2:a2:7e:88:93:41:c6:76:e9:
b1:c6:c2:b5:c2:27:4d:f9:c2:ce:86:87:bb:bd:e3:
0c:30:c7:11:cb:0f:cc:21:e9:05:bd:58:68:36:6f:
62:77:b4:eb:8f:7c:0d:c1:ee:25:93:90:cf:31:a0:
c9:fc:2f:59:0c:55:2d:ce:7c:0f:bc:28:d7:fc:4b:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:E1:9F:71:AC:41:E9:C7:34:D3:CD:FB:1B:A1:2D:1F:36:5E:5B
X509v3 Authority Key Identifier:
keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c8:1b:97:1f:4f:d4:44:82:6a:02:fb:7a:4f:70:7f:9e:e0:
a1:64:1b:08:44:f9:ea:d0:19:09:20:5f:75:ba:d2:8d:49:4d:
98:6a:c1:60:5c:03:5f:fb:c4:0a:d4:28:74:ff:21:b4:90:a0:
32:ef:f8:3c:ef:1e:dc:58:8a:cf:24:be:b5:b4:37:7c:53:da:
fa:ae:0f:83:f8:7a:bc:7f:b0:69:37:b9:2e:d1:44:1a:df:fc:
34:01:21:72:22:bb:b7:70:37:64:a0:f4:cc:36:a5:60:07:55:
38:8f:d9:ec:ee:dd:16:29:cd:c8:cf:d3:94:b5:e8:8f:72:9f:
15:6d:a2:3f:8d:2b:a1:33:12:f8:24:b3:38:fb:6d:d1:f1:16:
42:48:7f:e7:7c:cd:a5:49:ce:4b:0e:de:11:4d:82:b5:98:64:
91:37:5d:f3:40:86:11:6e:68:8a:55:18:20:c8:a0:d7:42:fb:
4b:3f:08:bb:65:ab:71:88:f6:89:8e:59:61:38:7a:1d:77:eb:
1a:98:14:ba:9e:7d:db:6c:35:1a:92:94:07:19:b4:eb:02:92:
09:4f:9b:c8:6b:d7:4c:63:45:b5:68:31:31:e5:a0:29:47:99:
ae:f9:ba:60:31:22:0f:24:d4:70:3d:5d:67:b8:3b:a4:cf:23:
af:89:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:31:59 2026 by rpki-client