
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: FzhkJW9ss5/bi2mwe7Rg7uQxzI03Z1Tlyfu2/Yol6wQ=
Subject key identifier: D3:D8:B6:29:95:DD:2A:DA:5D:D1:54:17:19:EB:67:00:3E:0F:D3:41
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0C48
Signing time: Sun 20 Sep 2026 18:42:19 +0000
Manifest this update: Sun 20 Sep 2026 18:42:18 +0000
Manifest next update: Sun 27 Sep 2026 18:42:18 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: nW3bV2cYmVvZO+ZyAro4fwHESJpO6sQuVkr2kIKp8Dw=)
2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: LDiFdNaZoZIrEKZ4J2tu1FR/lQxHX7nyvF7xLwKiOpI=)
3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: ay4GIuiEnpuYZETBZhn2rjkhmfn883sJShryuS/KCcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3170 (0xc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Sep 20 18:42:18 2026 GMT
Not After : Sep 27 18:42:18 2026 GMT
Subject: CN=6ab0290a-9a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:cd:52:5b:e7:86:34:74:ff:de:e7:ab:e5:
7b:af:42:1e:51:13:41:09:28:7f:9c:63:71:25:19:
04:72:9f:2c:d4:55:97:27:16:a7:a0:56:17:95:f3:
fd:a5:3e:c3:61:ff:8f:99:32:12:19:de:c5:e9:17:
33:34:8b:08:f3:7c:1e:d2:44:ef:dc:95:1b:0c:3a:
e1:60:45:87:ee:0d:62:fe:7e:80:c7:f1:7b:c2:ce:
b6:ac:18:f3:fb:ff:c0:51:5e:01:26:fe:51:24:56:
df:f5:93:7a:d4:6c:c2:2e:ee:e8:ef:d2:d0:5f:26:
66:23:d4:10:eb:ee:98:ab:6e:c5:93:5c:a3:6b:69:
b6:3a:d9:35:27:e0:02:ec:eb:2e:23:c5:39:10:e5:
2a:6f:43:71:fb:e0:df:f3:fc:24:e8:c6:5f:51:02:
bd:97:28:07:d8:98:d2:1f:0b:f0:09:58:f4:63:0a:
13:e7:64:37:ef:48:4a:fa:0e:c9:de:92:6a:e2:ea:
e9:ae:d5:6c:4f:b2:de:5c:bc:20:d4:7a:0c:c4:00:
ec:19:9c:16:28:c0:e6:be:28:5f:62:26:76:ae:9a:
19:41:70:b3:63:f0:d9:ff:00:20:64:22:0a:67:d7:
47:74:3f:b6:b7:79:52:41:93:5f:67:ba:55:2a:18:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D8:B6:29:95:DD:2A:DA:5D:D1:54:17:19:EB:67:00:3E:0F:D3:41
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:09:d0:87:97:30:5b:8a:1c:6d:16:25:c2:c7:df:66:a5:1e:
f6:e3:5e:93:08:1a:5f:47:b6:9b:2c:19:01:0d:5d:54:fa:f7:
d4:9b:2b:d3:8e:9c:ad:c9:c7:d1:0a:9c:0f:f2:40:b3:26:17:
23:03:1f:2c:d5:ee:78:a5:4a:c6:11:f6:54:6b:f3:a6:b3:ac:
cc:c2:f0:7a:25:df:3d:cd:3a:93:4d:e3:5c:b5:45:ab:08:5e:
5e:a6:1c:13:45:b9:98:0d:f4:d6:dd:2c:65:ee:27:e0:b2:17:
a0:0f:89:b4:23:43:17:c8:36:c0:c0:73:9d:79:c0:58:52:e3:
48:6d:74:e7:74:6b:e9:26:38:8f:a2:3c:a3:e9:36:39:a6:a6:
57:0b:76:55:5b:5a:ff:41:5e:5d:40:35:70:22:bb:35:71:45:
40:b0:0b:ed:99:f0:dd:07:00:8e:5e:7d:45:05:93:60:86:8a:
8c:fa:51:ed:7e:3e:05:b0:17:86:ee:eb:3b:87:cb:df:81:f5:
ee:54:75:c8:d0:89:0c:c6:6d:ff:9b:05:4c:98:1e:8c:ae:7f:
a7:cd:a8:03:89:7b:ef:e3:27:8a:ec:80:3f:74:1a:68:28:d4:
57:12:9e:c6:e7:cd:a1:e1:31:46:1c:3d:b0:ba:48:f4:31:67:
4c:4c:80:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1
MTIxRDI0MUMwHhcNMjYwOTIwMTg0MjE4WhcNMjYwOTI3MTg0MjE4WjAYMRYwFAYD
VQQDEw02YWIwMjkwYS05YTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlPnNUlvnhjR0/97nq+V7r0IeURNBCSh/nGNxJRkEcp8s1FWXJxanoFYXlfP9
pT7DYf+PmTISGd7F6RczNIsI83we0kTv3JUbDDrhYEWH7g1i/n6Ax/F7ws62rBjz
+//AUV4BJv5RJFbf9ZN61GzCLu7o79LQXyZmI9QQ6+6Yq27Fk1yja2m2Otk1J+AC
7OsuI8U5EOUqb0Nx++Df8/wk6MZfUQK9lygH2JjSHwvwCVj0YwoT52Q370hK+g7J
3pJq4urprtVsT7LeXLwg1HoMxADsGZwWKMDmvihfYiZ2rpoZQXCzY/DZ/wAgZCIK
Z9dHdD+2t3lSQZNfZ7pVKhieEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPYtimV
3SraXdFUFxnrZwA+D9NBMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2
OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK
QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAagnQh5cwW4ocbRYlwsffZqUe9uNekwgaX0e2mywZAQ1dVPr31Jsr046crcnH
0QqcD/JAsyYXIwMfLNXueKVKxhH2VGvzprOszMLweiXfPc06k03jXLVFqwheXqYc
E0W5mA301t0sZe4n4LIXoA+JtCNDF8g2wMBznXnAWFLjSG1053Rr6SY4j6I8o+k2
OaamVwt2VVta/0FeXUA1cCK7NXFFQLAL7Znw3QcAjl59RQWTYIaKjPpR7X4+BbAX
hu7rO4fL34H17lR1yNCJDMZt/5sFTJgejK5/p82oA4l77+MniuyAP3QaaCjUVxKe
xufNoeExRhw9sLpI9DFnTEyARQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:25:59 2026 by rpki-client