
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: sK3WiyojM6RfUB03RwI4fvLHZJPTOuoS8YD8jhIQsYQ=
Subject key identifier: 49:A6:8E:59:A5:99:C9:DF:C0:04:17:B1:DE:D9:62:59:3F:17:E2:B6
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0C51
Signing time: Thu 08 Oct 2026 18:50:44 +0000
Manifest this update: Thu 08 Oct 2026 18:50:43 +0000
Manifest next update: Thu 15 Oct 2026 18:50:43 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: a/G+GA1Hu3AV7waHMCIMZTLBxmL/EhJdVKZlHxK+5yg=)
2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: ay4GIuiEnpuYZETBZhn2rjkhmfn883sJShryuS/KCcM=)
3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: LDiFdNaZoZIrEKZ4J2tu1FR/lQxHX7nyvF7xLwKiOpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3179 (0xc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Oct 8 18:50:43 2026 GMT
Not After : Oct 15 18:50:43 2026 GMT
Subject: CN=6ac7e603-e891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:b7:b6:d8:88:d5:5a:3f:c9:2b:cf:b5:15:
85:6a:65:80:65:2c:69:58:9a:b5:40:4e:c8:d7:fb:
88:7b:89:f4:ae:58:11:3c:0f:c0:b8:da:b6:57:e5:
f8:47:6e:65:07:38:d4:d6:ce:da:c8:86:65:88:0b:
fc:99:3a:c0:16:c9:76:71:ef:6d:13:15:b5:e6:98:
08:8a:7f:49:b5:27:21:c6:52:2e:8e:0f:72:5c:a1:
5e:0b:8d:ef:62:91:06:43:70:af:21:6e:45:47:99:
29:36:bb:a0:fe:78:16:a5:9c:34:11:a4:6c:ef:17:
fb:fb:9b:3f:3c:98:0b:05:cd:b4:e6:e1:c5:2c:1a:
52:bc:76:ed:09:77:eb:cd:38:27:d0:a1:8b:ee:e2:
5f:e9:eb:6f:e4:4f:4b:a6:51:f7:68:e3:8e:d6:c2:
99:f7:98:9b:91:2d:b7:7a:40:32:41:d7:b6:e6:aa:
e7:57:40:1c:37:69:69:ef:4b:41:01:5f:20:aa:09:
35:d4:af:b1:7a:3e:43:bd:29:98:d1:f5:27:fa:3d:
26:54:38:2f:39:12:ea:38:c1:21:11:9f:3d:60:95:
76:56:cf:d4:a4:0a:4b:f9:31:18:d9:16:06:40:3a:
b0:81:9a:d0:23:83:1b:7c:64:15:e9:b3:e6:74:97:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A6:8E:59:A5:99:C9:DF:C0:04:17:B1:DE:D9:62:59:3F:17:E2:B6
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:b5:6a:66:2d:84:94:4c:87:3e:8d:2f:e4:37:5f:84:da:
22:df:8b:6d:63:4d:3f:17:05:dc:87:86:e4:51:d3:ff:d1:db:
05:60:6f:35:a0:5b:c0:42:91:3e:38:db:fa:d9:5c:6d:db:d8:
c3:bb:7d:9c:31:98:df:e3:be:61:6e:68:c7:78:f8:ee:3a:f7:
cf:5c:db:02:04:fe:38:3e:57:40:aa:b4:49:88:b0:dc:ca:53:
4c:d3:71:54:79:54:63:df:e2:50:b8:a1:79:b0:71:d2:66:0e:
2e:47:9f:33:18:bd:0a:40:e0:08:90:f5:5a:20:12:f7:af:41:
ad:fa:a5:b2:58:59:63:e4:3c:bc:3c:cd:98:c3:63:51:c8:96:
c4:35:09:bb:17:2f:cf:e9:67:ae:56:d5:66:be:36:5d:c7:b1:
14:c2:67:8c:05:fd:95:4d:83:e2:c6:11:15:97:bf:40:c5:1c:
96:9e:49:d7:90:bd:ca:5f:a1:d1:ed:ad:5f:44:68:93:31:39:
a9:a3:31:32:b7:cd:70:67:d3:01:fa:05:3a:e3:f7:ab:cc:7f:
f4:0f:06:0f:99:62:f8:2f:24:58:9d:1c:bd:7a:2d:77:df:67:
96:eb:19:7a:91:dc:94:a0:fb:25:aa:9e:8d:3c:ff:86:e4:8c:
f5:fa:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:36:06 2026 by rpki-client