
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier: QpIuo3ebjolOD9N8OgHzrOQulwR1Bm+NP/NTHH3ZO6o=
Subject key identifier: D9:BB:E4:1C:E3:F9:A8:76:5A:76:AB:81:AF:0D:F2:3F:C9:F5:BB:E7
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number: 6B
Signing time: Sun 01 Mar 2026 09:21:47 +0000
Manifest this update: Sun 01 Mar 2026 09:21:47 +0000
Manifest next update: Sun 08 Mar 2026 09:21:47 +0000
Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: GODyI3hUxa7rNaE+wfjAP5a303lrXrDMZecCx4r+v3I=)
2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Validity
Not Before: Mar 1 09:21:47 2026 GMT
Not After : Mar 8 09:21:47 2026 GMT
Subject: CN=69a4052b-60c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:dc:16:74:aa:a8:da:7a:7c:4e:74:22:d8:
2c:2a:25:dc:29:91:70:3e:72:96:9d:b8:d7:46:5e:
30:ef:eb:4d:d0:d6:ec:9e:d7:1a:d4:c3:dd:9f:a1:
e3:2a:70:37:13:7d:be:15:fa:3b:ad:ba:06:61:bc:
31:a1:f3:26:88:bb:e1:ee:d4:66:dc:fe:6b:f2:bf:
22:fa:2f:9a:ec:47:d2:a0:75:e6:be:2b:1a:63:42:
62:6b:71:70:5c:8e:14:72:e5:09:31:fa:31:84:16:
0e:03:85:84:fa:8f:0c:2c:ca:b2:9a:d2:35:6a:4b:
30:d3:60:45:9a:6d:06:85:67:7b:a4:55:fd:46:91:
0c:d8:c4:69:9c:e2:20:6b:5b:43:b0:ed:1f:0a:2f:
48:93:79:4d:6f:86:1e:7f:5d:78:b4:56:b6:ce:84:
43:93:da:e6:b4:99:fa:70:46:06:cb:fe:28:05:ca:
89:ad:22:83:a7:6b:91:d1:99:57:04:e0:07:09:1d:
93:b6:e0:a7:3a:ae:22:6d:9b:8a:65:5f:a8:7d:f1:
1a:be:ba:c1:0e:74:7d:2e:20:c0:3f:ec:af:c1:80:
58:80:72:32:9f:fd:36:96:e6:f4:aa:54:00:c9:10:
35:f7:f9:7d:a6:a8:ac:18:86:e9:f3:85:45:1b:6b:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:E4:1C:E3:F9:A8:76:5A:76:AB:81:AF:0D:F2:3F:C9:F5:BB:E7
X509v3 Authority Key Identifier:
keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:40:ef:34:53:dc:89:4e:36:72:a4:4d:90:2f:91:e2:3a:
2d:63:1e:19:42:99:1e:b2:e6:38:2e:ab:43:1a:3f:de:1d:7d:
79:f1:7e:22:a1:a7:e1:c0:e0:c2:0a:85:99:4f:72:b2:bb:bb:
a3:17:09:bb:33:cd:39:68:48:ea:73:02:e4:d4:7e:06:f6:0d:
b1:91:1d:c2:2c:55:c8:75:f5:80:e7:0e:88:02:f4:a3:ea:72:
2f:2d:25:c6:74:29:9b:95:ce:a9:70:07:37:dd:16:d7:b3:a0:
aa:46:95:2d:aa:8b:6f:5f:18:1c:36:56:21:e8:47:b1:39:06:
20:22:b2:db:10:6b:ed:4b:5d:42:e6:f2:34:b2:b3:c8:6a:3e:
e8:eb:ed:78:11:ca:f0:7a:61:1d:77:7c:09:aa:34:ad:69:8f:
78:c1:50:6f:78:55:d0:c9:47:54:18:78:e8:76:f6:30:a7:02:
6a:77:86:f5:30:87:fd:29:21:02:12:15:eb:5e:33:4e:da:f4:
e7:25:33:49:11:53:18:dc:c2:85:31:b5:34:c3:6e:25:83:03:
d3:6d:5a:0c:6f:24:52:c5:a8:8d:f6:af:b5:34:0f:47:4f:dd:
96:f8:ab:d6:ea:1d:e3:47:f4:28:f1:3d:cf:12:42:1f:d7:c3:
af:4b:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:54 2026 by rpki-client