
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: XSbeCFTx0rHELwMkjRJ5Tbp3TckCElZOmOMxundOpq0=
Subject key identifier: E5:E4:B5:5A:13:9F:AA:56:8B:F7:F4:D7:08:BE:86:0B:15:BE:44:77
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0C16
Signing time: Mon 22 Jun 2026 18:49:02 +0000
Manifest this update: Mon 22 Jun 2026 18:49:01 +0000
Manifest next update: Mon 29 Jun 2026 18:49:01 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: 9kMJwcJa98x5xxAIqCmC6GY1oZHgp4Gr03P0kiR4SDM=)
2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=)
3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Jun 22 18:49:01 2026 GMT
Not After : Jun 29 18:49:01 2026 GMT
Subject: CN=6a39839d-ec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:d5:72:0f:01:58:f5:f3:55:19:37:90:15:
bc:18:9c:7b:1f:f3:55:1a:a2:48:e3:bd:e9:08:4c:
36:0f:35:85:e9:6b:dd:ca:e4:4c:08:25:a4:47:31:
f4:40:f8:97:1d:79:5f:77:58:a0:b1:98:de:74:e3:
73:a3:05:95:52:e4:c4:fa:19:d9:b2:56:34:2c:56:
71:83:45:7c:d7:bf:66:91:90:f0:89:74:76:f6:33:
7e:bb:6c:04:1d:34:b6:55:6e:d4:41:95:2f:29:79:
cc:3b:04:77:5c:fd:e9:9f:eb:5f:d7:56:a0:49:53:
49:27:30:b6:c1:5c:b6:8b:21:a1:33:37:7d:3b:cc:
23:e0:05:aa:5f:f4:20:c9:73:6f:d6:1b:00:4e:2a:
bf:f0:4f:5d:cc:9c:bd:91:f3:2a:88:ab:00:ee:18:
13:0c:a2:28:61:e7:a3:a9:94:fc:6c:f9:8d:20:2f:
97:12:7a:ef:67:53:b9:a0:ef:68:96:25:c4:f2:6e:
66:87:c1:04:62:65:e6:77:8c:0f:53:6b:e1:e1:8f:
3a:7a:d8:a1:ed:c0:82:e1:6f:7b:1a:ea:5a:bf:33:
a4:1a:c8:bc:d7:35:d6:10:da:5a:6c:39:bf:5f:99:
30:c1:38:ce:43:d5:a5:6f:98:2e:07:db:10:52:73:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:B5:5A:13:9F:AA:56:8B:F7:F4:D7:08:BE:86:0B:15:BE:44:77
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ea:ad:45:d3:63:9b:36:18:81:29:5b:7d:8a:42:47:ff:b0:
3c:a0:f5:39:14:28:ab:60:44:65:51:17:95:07:de:f4:63:6d:
07:37:53:e6:45:95:9c:e2:4a:df:c0:23:e6:26:80:fb:06:6d:
4c:ed:25:51:08:93:80:4b:eb:23:7d:0f:7e:ef:74:1a:22:4f:
e3:b0:03:7d:be:f2:d8:d5:cb:4f:9a:5e:7b:7e:d4:9f:3d:27:
48:fa:70:ed:af:51:c4:35:d3:39:28:83:e1:47:16:7c:97:01:
8d:47:db:5d:ec:35:5d:42:c9:89:2c:82:78:5c:94:ca:b2:6f:
9e:26:e5:8d:08:f8:03:74:fa:f7:72:5d:1f:fd:3f:2f:29:11:
0e:23:27:1e:29:fb:1c:29:33:e7:05:04:e5:93:7b:7c:dc:3a:
7a:61:be:21:cf:0a:d1:3a:07:cf:70:20:fb:e3:27:3b:2e:29:
05:ff:d5:0e:a2:73:11:df:1f:8b:c6:6b:72:ab:43:18:56:0a:
04:f0:0e:68:a8:a8:b0:5a:55:25:68:d7:93:67:0a:3d:90:08:
44:08:57:91:f5:df:6c:c7:9d:cf:29:1c:ca:9e:25:1a:82:d6:
19:20:da:83:db:02:70:f0:dd:91:ed:9f:70:8e:33:50:38:06:
99:eb:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:57 2026 by rpki-client