
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: o5fU6pd0C2uLkNoxsygrvwqpypLMuFrHnlKjuPCxGbY=
Subject key identifier: 05:1D:C7:B4:1B:C5:40:AB:66:4A:16:C7:B9:30:46:38:A7:75:05:A7
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0C28
Signing time: Tue 28 Jul 2026 19:00:19 +0000
Manifest this update: Tue 28 Jul 2026 19:00:18 +0000
Manifest next update: Tue 04 Aug 2026 19:00:18 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: TQDH0Wc3qb76LhCC9xZYmSKnZYoG2qH+/kAYLOynr3Y=)
2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=)
3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134 (0xc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Jul 28 19:00:18 2026 GMT
Not After : Aug 4 19:00:18 2026 GMT
Subject: CN=6a68fc42-339d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:ba:e4:df:57:fd:a9:18:90:42:da:c3:47:
d6:b3:a5:48:28:34:50:c2:ee:9f:ef:77:a3:57:33:
7c:41:00:2c:ac:5f:b4:07:75:10:31:56:53:d6:08:
95:6c:bc:9f:14:9b:29:78:73:b9:94:28:03:e0:95:
03:39:f2:0d:3b:9d:ff:2f:c9:ae:90:e4:ea:3e:b1:
48:a9:f7:89:b0:33:b7:82:0e:10:04:85:16:9a:51:
fd:99:b3:f2:ea:95:50:b7:77:20:50:41:59:8c:ea:
45:ae:c6:10:d9:dc:02:6f:0f:53:21:35:c8:9f:96:
0b:3b:61:a2:36:a3:72:c0:cd:27:3f:ab:1b:32:09:
99:eb:80:94:23:00:cd:ba:b5:d4:70:de:69:80:9a:
2f:05:1c:77:0b:05:57:cc:bd:20:65:9c:3b:09:82:
1a:90:1c:f5:d8:9e:57:44:f1:fa:ef:22:d5:4a:19:
65:58:19:d7:74:37:77:bc:d0:1b:e4:ed:51:c9:5b:
e7:02:a3:aa:37:4a:da:cf:fa:0a:60:bb:b5:f7:ee:
74:05:31:c4:83:8d:58:12:6d:07:e7:f2:cb:19:d9:
10:87:ac:55:a9:83:41:71:73:5f:d1:07:43:e5:21:
af:75:2b:4b:0e:d7:39:05:c5:77:2c:34:df:bb:98:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1D:C7:B4:1B:C5:40:AB:66:4A:16:C7:B9:30:46:38:A7:75:05:A7
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:4c:3d:5e:2c:89:bc:d7:46:53:da:41:06:71:39:6c:53:
e6:5d:91:65:c8:a2:82:70:6e:56:15:e8:6b:dd:cf:d5:db:b4:
e1:37:8f:ee:8c:87:8e:76:23:16:a4:a5:47:4a:82:9e:a2:f1:
98:08:49:15:b7:78:75:5d:5d:aa:ae:2b:75:d0:0f:25:03:35:
89:13:a3:27:c8:33:50:c8:df:79:24:2f:bd:1a:44:6b:b9:fd:
fa:1e:3c:54:3a:ab:ac:8f:f2:3d:57:ad:26:25:d5:3c:fa:db:
bd:27:d4:a1:69:0c:d7:4d:0e:c2:81:3c:86:93:68:47:6e:f5:
9e:86:e9:1b:3e:cf:e9:2d:71:a0:21:76:f3:82:55:42:2d:4b:
51:5d:e7:18:9b:b5:95:70:2e:c5:85:45:f1:6d:3b:27:53:10:
62:d3:c9:61:0a:fc:f2:45:68:cf:04:5b:cc:fe:9e:a1:46:33:
da:1f:66:bb:80:5d:1e:87:46:a1:ba:0c:bc:72:18:6c:80:43:
65:31:e8:47:11:6f:ba:d6:80:6d:e1:4b:e6:a9:09:7f:19:a6:
60:b8:53:78:de:13:2a:17:db:4c:ba:20:a8:bb:98:75:27:75:
cb:14:2f:6c:14:30:00:5a:cc:99:07:9d:a4:7f:7e:67:3b:e4:
ec:25:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:09 2026 by rpki-client