
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier: DTjuLv6y5oE8D8cTWWl8SVnSzC5ciR1OBiB/5baae/c=
Subject key identifier: 05:E4:A7:B9:7B:CB:71:D6:7D:32:B5:98:A8:8E:96:4D:6D:77:38:44
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number: 94
Signing time: Thu 21 May 2026 07:36:59 +0000
Manifest this update: Thu 21 May 2026 07:36:58 +0000
Manifest next update: Thu 28 May 2026 07:36:58 +0000
Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: zZa9Ugk7I++Mib1d/u0V+qoOoEu5FrpogzdF4bFwvmw=)
2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Validity
Not Before: May 21 07:36:58 2026 GMT
Not After : May 28 07:36:58 2026 GMT
Subject: CN=6a0eb61b-c663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c5:46:9f:80:c1:15:72:1d:4d:e0:5d:b0:f6:
a9:2f:3e:7c:8e:71:f8:3f:21:d8:af:53:c0:7e:5a:
cf:7b:9d:a9:43:79:35:b1:31:91:d2:ff:e5:32:4d:
eb:0d:9c:41:c9:e9:30:fe:e5:6f:0d:73:73:bf:18:
bd:60:1a:5a:a1:ea:bd:1d:ad:91:2f:5b:09:b8:cf:
8e:11:1c:0f:45:7a:5f:47:36:07:6e:b1:42:02:9b:
c6:55:0f:14:18:e4:7b:99:a5:72:d2:05:50:a0:ac:
fd:46:ec:82:84:7a:a2:79:2a:f6:8d:c0:ae:18:9c:
b0:0c:f8:7a:83:79:dc:37:8d:f1:57:34:35:da:a7:
2b:cb:1e:07:5e:cd:c1:67:9e:0c:b9:e7:8e:50:62:
1a:40:8e:6d:fd:f4:c7:a3:04:5e:c3:50:c0:dc:22:
13:86:3c:89:07:36:c9:48:48:40:19:56:28:75:5e:
a0:38:a6:1c:4f:b2:50:a4:80:44:dc:52:bc:ff:be:
e1:c4:3c:19:ef:d5:7b:37:c3:94:1b:d2:a2:e7:3f:
be:c4:42:b2:33:88:5d:ff:2b:b2:11:4c:0f:03:e8:
73:21:28:f7:0c:90:2b:54:41:7b:23:cc:b9:a4:a0:
c7:5c:1d:e9:c6:5b:02:94:80:f2:1d:65:19:d3:c7:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:A7:B9:7B:CB:71:D6:7D:32:B5:98:A8:8E:96:4D:6D:77:38:44
X509v3 Authority Key Identifier:
keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:1e:db:d4:b0:8d:2c:09:78:a0:b5:b7:3c:16:79:2c:b9:
15:f5:b4:27:5f:c5:9f:80:14:8b:a9:fe:73:59:fa:93:f4:11:
c0:0b:8a:90:c4:84:bb:c2:6d:ff:a7:b9:74:f1:92:42:13:87:
e8:f6:d6:1c:db:fd:c1:f6:b4:5e:79:dd:37:e4:ee:8a:c8:0f:
81:9f:99:2d:fe:18:6e:17:64:d0:c1:4a:6e:a9:49:36:45:b1:
c9:6b:b6:99:46:80:b6:bc:c5:84:ae:fd:7c:75:09:7a:a1:dd:
1b:37:1b:63:be:2c:08:1f:3c:8e:3f:22:1f:d6:0b:28:22:fc:
1a:2c:25:c0:32:a2:68:95:c2:1e:43:2e:07:e7:20:e0:ba:7a:
71:16:44:1c:a8:d9:f6:64:d4:0f:e8:7c:aa:4b:43:a5:5c:83:
32:82:e9:52:b0:5d:33:f1:08:d7:3c:ba:15:da:e3:be:54:7d:
d9:ca:7a:3b:5d:12:14:b3:82:e6:45:a2:cd:41:50:d2:d2:56:
87:3f:96:b8:6d:96:ae:c3:48:6a:45:7a:53:07:5e:d4:60:50:
4b:b2:b5:59:52:6c:be:fd:5c:86:fb:b4:01:98:71:d7:15:7a:
b0:40:39:26:45:0f:2c:a4:6d:3c:9d:b5:a0:23:3d:13:94:94:
dc:a7:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:55 2026 by rpki-client