
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier: 103GiasvuuE4nRyap/bCxShYJg9hqGSxggX7s2fP6JQ=
Subject key identifier: 0C:14:DA:0B:98:A0:DF:C5:42:C6:10:A6:BA:ED:01:3E:7E:5F:E6:F5
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number: 84
Signing time: Sun 19 Apr 2026 07:18:10 +0000
Manifest this update: Sun 19 Apr 2026 07:18:10 +0000
Manifest next update: Sun 26 Apr 2026 07:18:10 +0000
Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: c7FbmVqwMB7xeRRXvVDzKaRV9XwyrA0yifzzajhkHXI=)
2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Validity
Not Before: Apr 19 07:18:10 2026 GMT
Not After : Apr 26 07:18:10 2026 GMT
Subject: CN=69e481b2-9c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:0b:03:68:fc:6f:6d:0e:78:59:ef:54:d0:
be:72:fd:f2:a2:42:c5:b1:c2:db:2a:0f:1c:09:62:
31:53:cc:d8:7b:7c:fb:83:71:e9:f9:8a:c6:f5:3b:
ba:ef:12:45:ee:95:9f:93:bc:ac:17:ed:6e:78:3b:
b4:f4:bc:8e:ec:bb:62:62:a2:b8:bf:96:22:e4:22:
5d:bd:05:3b:b2:ea:8d:21:15:7e:45:ba:ee:43:46:
23:d3:4f:0f:a1:00:8f:be:70:24:eb:36:d9:16:f1:
78:4f:f4:fb:3c:3b:68:a5:4e:cc:f3:06:aa:f4:2d:
9a:a7:fd:4b:0d:bb:4e:58:5f:7a:f1:17:65:e1:f4:
ca:9c:f4:6b:1a:e4:dc:f8:c4:dc:d0:21:0d:80:d3:
30:9e:04:e2:c5:f3:d9:33:43:c8:53:7d:26:28:a9:
37:2d:12:1b:9f:1e:f7:a7:ed:86:f3:cc:ff:38:e7:
dd:a1:29:57:71:e2:ac:34:cb:6f:84:29:f1:75:a6:
23:87:a4:26:13:50:b0:49:b2:6e:c7:74:f5:fc:54:
5c:6e:f5:c7:fd:e8:b3:b4:5b:ee:7a:a4:2a:82:f6:
8f:3e:11:56:d8:f7:40:e3:10:d0:10:9a:44:45:8c:
10:77:8a:96:b2:3e:68:36:0a:08:ac:e1:47:2b:e1:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:DA:0B:98:A0:DF:C5:42:C6:10:A6:BA:ED:01:3E:7E:5F:E6:F5
X509v3 Authority Key Identifier:
keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:14:70:14:b6:2e:b4:31:58:d1:f3:b1:bd:5f:ab:d8:5d:dc:
f1:cd:e0:ea:5c:30:24:11:6d:10:2a:36:e7:20:2a:66:ad:a2:
9c:c4:85:84:ed:a9:ea:31:06:0e:6d:91:e3:8c:26:d5:ec:ba:
0c:70:3f:28:56:be:f6:85:a9:3b:fe:8d:7d:38:e7:e9:c8:91:
48:26:f7:cf:23:1c:83:3a:cf:14:69:f6:10:04:a1:9a:3a:d1:
d6:7b:d1:88:82:18:28:0b:4a:65:9e:d6:27:36:59:18:3c:e6:
ab:ef:63:ae:8a:28:f7:8a:8a:dd:87:10:a4:f1:fe:33:3c:6c:
9b:67:98:95:76:95:6e:7b:0b:da:f4:3a:b7:e8:61:e6:24:b3:
29:7a:93:be:4f:9b:8b:fd:3e:f7:8a:ae:a2:2a:b7:51:d6:84:
2d:e0:04:09:ad:7b:d0:8f:00:f6:b5:2d:d7:1e:81:06:86:a1:
e9:55:d2:b9:88:b1:99:05:52:1f:73:5d:ef:02:dc:1d:13:17:
e2:a0:75:53:a4:7e:65:ac:f2:67:d3:e1:51:15:e5:0b:d5:a9:
0f:f7:6a:cd:a2:64:9d:d1:31:e8:75:a0:91:18:fe:84:3b:53:
4d:40:e8:cd:9e:2c:c9:bf:e9:fc:2b:78:92:83:ee:10:37:c7:
8e:1d:12:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU5NzkxMTAvBgNVBAUTKDAxQzg1ODE4MTA4OEUxQjlDNTc3NURDQTBDNEJBRTlC
OUZGNTc3QjMwHhcNMjYwNDE5MDcxODEwWhcNMjYwNDI2MDcxODEwWjAYMRYwFAYD
VQQDEw02OWU0ODFiMi05Yzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQILA2j8b20OeFnvVNC+cv3yokLFscLbKg8cCWIxU8zYe3z7g3Hp+YrG9Tu6
7xJF7pWfk7ysF+1ueDu09LyO7LtiYqK4v5Yi5CJdvQU7suqNIRV+RbruQ0Yj008P
oQCPvnAk6zbZFvF4T/T7PDtopU7M8waq9C2ap/1LDbtOWF968Rdl4fTKnPRrGuTc
+MTc0CENgNMwngTixfPZM0PIU30mKKk3LRIbnx73p+2G88z/OOfdoSlXceKsNMtv
hCnxdaYjh6QmE1CwSbJux3T1/FRcbvXH/eiztFvueqQqgvaPPhFW2PdA4xDQEJpE
RYwQd4qWsj5oNgoIrOFHK+GEpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwU2guY
oN/FQsYQprrtAT5+X+b1MB8GA1UdIwQYMBaAFAHIWBgQiOG5xXddygxLrpuf9Xez
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk3OS81Mzk1MDc4NjdG
MjcxMUYwOTRCQTU3MjdDNEY5QUUwMi9BY2hZR0JDSTRibkZkMTNLREV1dW01XzFk
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FjaFlHQkNJNGJuRmQxM0tERXV1bTVfMWQ3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTk3OS81Mzk1MDc4NjdGMjcxMUYwOTRCQTU3MjdDNEY5QUUwMi9BY2hZR0JDSTRi
bkZkMTNLREV1dW01XzFkN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANRRwFLYutDFY0fOxvV+r2F3c8c3g6lwwJBFtECo25yAqZq2inMSFhO2p6jEG
Dm2R44wm1ey6DHA/KFa+9oWpO/6NfTjn6ciRSCb3zyMcgzrPFGn2EAShmjrR1nvR
iIIYKAtKZZ7WJzZZGDzmq+9jrooo94qK3YcQpPH+Mzxsm2eYlXaVbnsL2vQ6t+hh
5iSzKXqTvk+bi/0+94quoiq3UdaELeAECa170I8A9rUt1x6BBoah6VXSuYixmQVS
H3Nd7wLcHRMX4qB1U6R+ZazyZ9PhURXlC9WpD/dqzaJkndEx6HWgkRj+hDtTTUDo
zZ4syb/p/Ct4koPuEDfHjh0SOw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:57 2026 by rpki-client