
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: dyMIE8fuxMM73XpKPAKE0dJPaF0uqslehgXI59/FC0c=
Subject key identifier: 8E:27:88:AF:5C:AE:8B:C2:E4:E8:96:2E:B1:91:E5:F8:18:76:A5:38
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0BEE
Signing time: Sat 04 Apr 2026 18:42:23 +0000
Manifest this update: Sat 04 Apr 2026 18:42:23 +0000
Manifest next update: Sat 11 Apr 2026 18:42:23 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: jXJBT4zCGN2mqmbfwYav4tW/LkgiXa4Iv7J3m+AyE0M=)
2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=)
3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3076 (0xc04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Apr 4 18:42:23 2026 GMT
Not After : Apr 11 18:42:23 2026 GMT
Subject: CN=69d15b8f-083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:f5:27:f1:41:25:9f:22:69:0e:17:fe:02:
12:af:ff:61:02:0a:0b:17:75:47:87:6b:7d:3e:5c:
19:42:5a:26:c8:9a:7d:95:46:3c:12:21:c2:b9:b5:
27:5a:15:56:60:2e:ca:b1:41:2d:5f:58:24:e0:8a:
cf:60:51:53:2c:74:ec:a2:34:32:64:2f:09:89:8e:
e8:26:38:4c:2e:e9:65:b1:68:28:0d:b7:86:37:b9:
51:0b:55:e3:17:9a:fd:e4:7b:8f:3e:bd:6d:a4:c9:
b5:dc:70:e9:27:29:f5:de:ab:a9:ce:23:ec:8f:be:
fb:15:7c:e2:19:57:64:e6:b2:85:8e:ec:72:30:77:
49:70:b6:75:6f:70:68:b3:70:e0:73:44:6d:3f:cf:
0b:f2:4a:18:ca:52:a4:e6:7b:da:69:a0:83:56:aa:
1a:09:d2:d5:d4:61:e2:5c:47:b4:aa:47:d7:c9:42:
72:3a:d2:95:a4:54:b0:96:12:4d:f5:cb:30:dd:44:
36:29:ff:da:1e:03:cd:37:64:51:be:ec:99:7f:08:
e9:c3:32:43:ed:6e:31:95:c9:eb:2a:19:13:11:8f:
d2:ed:f9:2e:4b:75:52:7f:84:4d:27:af:40:04:30:
2a:57:52:47:1d:06:68:0b:57:9f:68:ca:e2:49:d8:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:27:88:AF:5C:AE:8B:C2:E4:E8:96:2E:B1:91:E5:F8:18:76:A5:38
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4c:3f:28:24:bc:6c:8c:2b:55:4c:92:22:63:dc:f1:61:80:
67:da:14:30:03:ce:0b:f6:99:4e:07:d1:f8:44:f3:00:26:bd:
3a:ee:6f:3e:79:be:2f:27:54:06:0a:21:e7:04:7d:6f:99:05:
27:02:56:d6:b2:0d:54:14:e3:c7:78:2f:58:aa:5c:28:78:e6:
f5:92:85:e1:a2:66:fc:af:28:02:b1:f5:97:64:57:b9:ba:d9:
42:3f:1b:5d:62:b8:21:f0:95:05:99:3f:6b:71:f7:6f:bc:12:
d3:ff:dc:1b:11:c3:57:4b:56:83:8b:c1:31:95:84:29:9f:7f:
15:a9:ee:ed:26:34:eb:64:31:f7:e1:ac:b4:c9:06:26:1f:08:
f4:1b:78:ba:16:a3:0b:37:41:e7:7e:af:62:da:02:d9:88:98:
67:c1:32:8c:48:a4:0e:77:09:60:e1:2c:5b:95:87:a7:b9:6a:
9e:b3:09:84:0c:65:d7:f2:6a:a8:8e:d6:af:31:57:ee:ac:ce:
79:04:5e:95:8d:b1:e0:12:c4:6a:97:b9:1e:40:dc:db:bf:75:
06:e0:a7:17:f5:ec:8b:49:25:ba:a5:b0:5d:bb:df:26:8d:e8:
91:0d:87:e2:4f:e3:16:2e:27:c7:a1:56:e6:5e:5c:87:b4:6a:
39:09:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:16 2026 by rpki-client