
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json)
Hash identifier: TokcBdkDyKLPdPC0OuzmlWeeF4XiUbFLSH4qo6HaULw=
Subject key identifier: 89:F2:5B:F6:35:19:71:63:7A:48:85:32:64:8E:3F:6B:54:80:C4:30
Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Certificate serial: 02BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
Manifest number: 02AC
Signing time: Thu 21 May 2026 01:35:41 +0000
Manifest this update: Thu 21 May 2026 01:35:40 +0000
Manifest next update: Thu 28 May 2026 01:35:40 +0000
Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: UihKJtQZEZbhr1oSDU86sX7DV5cRVqmkg2MaXZaLy6o=)
2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: uF93ugcNEDMZcHQur8dHIYLF7HLhxy7ZY6L/0rj59kk=)
3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: dXxXH3k4HDVIe0Nszw/qyhG1QYul5iP9wevqRM4orcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Validity
Not Before: May 21 01:35:40 2026 GMT
Not After : May 28 01:35:40 2026 GMT
Subject: CN=6a0e616d-42e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:03:d5:91:de:d0:a8:1f:97:29:a9:54:69:
e1:77:79:20:0b:bc:0a:dd:04:6b:1e:14:0f:0a:21:
48:c2:56:56:3c:c9:32:b7:03:44:27:d7:9b:ee:5c:
39:1d:7b:15:6e:3b:e4:7b:e7:17:dc:b1:6a:02:c1:
75:80:60:f5:be:1a:dd:79:ac:10:4a:36:da:cb:65:
f0:19:bf:f8:eb:6b:cc:67:01:d0:e1:85:a6:07:a4:
90:62:72:3f:b3:ee:18:15:aa:27:71:5e:f0:de:29:
8e:97:ba:1f:32:86:92:f9:72:95:0a:1b:bd:01:2e:
23:52:9c:93:1c:2b:c1:b1:ba:82:7e:6d:d2:9d:24:
42:f8:7b:af:73:10:9c:a9:e2:6e:ef:10:df:04:99:
8d:f8:f1:f4:8e:2c:ee:97:8f:3b:19:8a:96:c2:89:
e1:76:55:e6:c4:9a:d0:a3:bd:0a:cc:9a:e0:8d:c7:
10:b0:8c:fb:41:4f:24:c9:8e:9b:f8:1a:af:84:80:
50:9c:1e:b3:e9:d9:db:b3:fc:8e:84:b3:34:3e:70:
79:37:88:40:5c:7d:c4:cb:04:66:8e:55:a0:d3:b8:
6e:14:38:ee:f7:c4:f6:e3:0a:9a:08:91:60:a8:22:
2f:85:c9:ea:12:89:9b:df:df:62:09:41:f8:89:76:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:5B:F6:35:19:71:63:7A:48:85:32:64:8E:3F:6B:54:80:C4:30
X509v3 Authority Key Identifier:
keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4e:e7:70:b3:e9:5e:c1:b4:18:d1:42:d5:23:4b:ef:e9:80:
8d:c4:4c:22:5e:ae:be:8b:ab:39:b3:82:cd:d5:4e:3f:61:75:
9a:6b:68:4f:d3:75:cd:9a:b0:10:ad:9a:bf:10:33:19:14:05:
9b:32:f1:bf:41:47:54:fc:11:03:74:b5:60:90:3b:2a:13:a0:
fd:e7:57:db:64:d1:33:7f:77:0b:e1:f5:79:3d:00:9f:8e:77:
6a:6a:06:b6:00:0b:8e:03:33:2f:98:7a:35:35:55:a4:e2:bc:
3b:66:2a:33:a1:7b:25:d6:88:83:f6:27:20:f1:a7:ae:81:65:
dc:3f:2c:c9:5c:23:aa:e5:84:3b:f8:df:b3:fd:7c:5e:38:c1:
d6:d6:68:3b:36:cf:39:89:20:fe:56:c9:c3:f7:52:b4:ce:40:
02:f0:aa:e8:3e:d7:e9:85:44:1f:60:fd:96:03:c5:55:8f:40:
37:f1:fd:6f:ab:23:c9:8b:5c:10:4d:c9:c9:5f:ca:6b:c4:df:
ee:4f:7b:53:c1:f5:b1:1e:67:54:eb:4a:af:80:ce:09:c5:1a:
2e:b7:3b:34:0f:e2:48:dd:39:34:8e:c0:26:d1:52:35:29:ee:
f1:4d:6d:3a:68:2a:3c:0f:d1:78:64:d3:f7:12:e9:12:1c:8c:
3c:86:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:53 2026 by rpki-client