
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier: ZLf2K6RY7oHzm8vZxvlP6vfDNjLfMedzlFPnImWqdys=
Subject key identifier: 62:4D:1C:E2:15:4A:B3:B8:B1:2A:34:99:F4:85:18:08:0F:2A:51:46
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number: 9F
Signing time: Sat 13 Jun 2026 07:27:31 +0000
Manifest this update: Sat 13 Jun 2026 07:27:31 +0000
Manifest next update: Sat 20 Jun 2026 07:27:31 +0000
Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: QRMnmCBzFZyTdsLPhLPhkA4ZFRHTY7ncJ9oY9Vym3XY=)
2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Validity
Not Before: Jun 13 07:27:31 2026 GMT
Not After : Jun 20 07:27:31 2026 GMT
Subject: CN=6a2d0663-cd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:b4:a2:0a:8a:08:13:24:54:ef:18:9e:dd:
32:cf:98:f2:18:89:6a:23:67:61:40:bd:9f:e7:5e:
4b:d1:25:be:8d:bd:d6:52:1c:6f:3f:18:b8:77:0e:
b6:be:7d:a9:de:9d:2d:ce:21:6a:03:13:40:18:89:
cc:12:9b:5b:d2:1a:e0:e0:c6:d8:2f:69:84:9d:20:
1f:eb:98:fe:6f:80:81:d9:fe:6f:3e:dd:94:26:5d:
06:5e:c0:d0:b8:87:82:0e:29:e7:95:70:31:8f:80:
ec:93:2c:5d:ae:a0:a9:17:b0:a8:af:55:16:b6:85:
16:ff:19:55:92:ec:2c:e2:ae:24:3c:93:2e:98:ed:
e4:c2:13:0e:30:06:f5:30:91:0b:89:f9:a7:2f:e1:
5e:39:bf:2b:7a:c0:df:cf:b8:21:00:68:0b:ad:a5:
2e:52:ea:aa:66:bf:00:fe:e3:49:e7:12:98:8d:18:
74:2f:4f:18:2c:0b:8c:7b:64:3b:5e:40:bb:ab:33:
01:e9:97:95:00:84:5a:26:a1:c3:23:21:3e:e9:fc:
ec:91:74:35:98:bb:a4:14:ef:7b:b3:61:e8:e3:56:
5a:23:a5:8e:10:01:42:78:ff:c7:8c:09:bc:d2:c8:
38:d2:07:6c:1c:53:ed:02:a1:e7:f7:eb:53:6e:d9:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4D:1C:E2:15:4A:B3:B8:B1:2A:34:99:F4:85:18:08:0F:2A:51:46
X509v3 Authority Key Identifier:
keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:84:18:fa:70:7f:dd:bb:66:86:45:dd:b0:74:fb:ea:7e:94:
e1:05:1f:91:1e:6a:87:31:c6:7c:94:74:36:6e:ef:78:77:7c:
2c:35:5e:31:25:4e:e0:fd:5d:11:af:70:8d:a3:44:23:02:4f:
2f:7d:ea:05:4c:dc:c1:d8:1a:8f:54:25:9d:9f:c2:37:98:4a:
61:59:b8:22:dc:71:98:2a:2f:c2:2e:74:4b:f0:c5:0d:67:74:
00:4c:78:5f:8e:03:e8:f6:93:9f:df:d1:f6:34:8f:b9:9a:37:
f2:19:33:69:b8:ad:0e:a5:b8:e3:f2:30:2f:af:d3:25:95:f9:
0d:23:8b:e7:fd:5b:12:69:c9:0f:f5:75:92:04:0f:ca:a7:47:
fe:f5:4c:c0:58:f7:77:df:49:04:72:29:fa:c6:d0:f9:c0:3c:
3d:64:e6:0f:99:fd:3c:2a:0f:2f:37:fe:ae:e8:9d:b8:9a:d3:
0b:53:60:41:ba:93:e2:1d:9c:88:b3:25:78:26:8d:d9:dc:c9:
1f:e2:9c:aa:4e:5f:1a:58:73:93:37:2c:10:8d:31:69:09:4f:
df:8a:ae:85:63:b6:33:42:3d:28:bb:fc:28:1d:84:cc:f2:b3:
5b:2e:1e:98:a7:69:b9:4d:07:d2:aa:54:03:91:06:51:91:27:
f5:8a:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:35 2026 by rpki-client