
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json)
Hash identifier: AMIn/rkzZ71KH94PEJ7cv/E7IcK48pnR3l7RbH99AhU=
Subject key identifier: C3:65:BB:3C:4B:4B:F2:95:77:DC:53:9D:43:C4:53:51:EC:DD:51:40
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
Manifest number: 79
Signing time: Fri 02 Oct 2026 02:31:44 +0000
Manifest this update: Fri 02 Oct 2026 02:31:44 +0000
Manifest next update: Fri 09 Oct 2026 02:31:44 +0000
Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: 2eFcbIuq5ijj0EGBe4uWr2RcdFZzEGk5Kh6MuwQJ9A0=)
2: 65E54028BE0911F1B07D70305411F970.roa (hash: qsVWxHxDV1XO+u2dkDtoW+PXZvBZ2AgdkW90LlAc/bo=)
3: CE93738EBE0811F19E65C7285411F970.roa (hash: eTePzZthCLCfAO4M8nOmebFDRGb48Mw6WRdsRQl/fUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 02:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Validity
Not Before: Oct 2 02:31:44 2026 GMT
Not After : Oct 9 02:31:44 2026 GMT
Subject: CN=6abf1790-dda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:5c:97:62:57:70:51:9e:71:fd:f9:ee:86:
57:09:2c:4e:16:c0:ee:46:73:61:9a:33:cb:19:0b:
a6:ef:82:b6:c6:c4:a8:0f:d7:70:e5:f6:77:d4:06:
4a:55:2c:fb:80:7c:2e:eb:ef:5e:40:8b:53:98:af:
cc:00:74:6c:52:39:e8:85:1a:4b:99:78:22:c2:ed:
48:26:e2:63:7a:e3:48:b3:0b:7c:e7:25:0a:3c:24:
d5:a4:32:b1:b7:3e:1a:5a:32:4b:a2:49:63:48:27:
9e:e0:75:45:fe:50:7c:82:91:bf:00:cd:b3:c9:54:
38:3f:28:68:b3:4e:82:c2:4f:5c:be:12:e5:36:8f:
51:46:1a:ca:ba:25:65:5c:b7:dc:66:31:2b:9c:6f:
36:fd:cd:80:1e:b5:bc:39:3e:b3:42:74:ae:f3:da:
fc:dc:22:5c:e8:26:2e:7d:82:bb:20:d1:8b:0c:2b:
79:71:05:94:af:fb:13:63:ad:4b:dc:69:29:40:cd:
fc:7a:4a:84:e1:6e:d2:76:83:03:60:a1:a8:38:27:
82:b3:4c:7a:2d:92:f8:30:57:34:76:40:a0:cf:b9:
6a:81:62:f3:26:fa:2d:f6:f7:13:8d:90:c2:5c:1a:
06:c1:d2:1a:8b:56:b7:f1:bc:78:9d:49:64:f7:2d:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:65:BB:3C:4B:4B:F2:95:77:DC:53:9D:43:C4:53:51:EC:DD:51:40
X509v3 Authority Key Identifier:
keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:50:cd:d2:d4:ce:f6:d9:64:0d:a1:e4:10:3b:2b:98:8b:e9:
bf:47:ff:b6:d8:85:5b:a0:1e:74:ba:22:58:56:7f:32:8d:e3:
f5:3a:dd:a4:7c:71:30:69:03:f9:14:e5:e7:8a:7f:30:cf:2f:
14:8e:a8:58:6c:c4:67:df:ba:b6:6f:d2:23:7f:65:13:ce:a9:
4f:56:47:86:e0:b3:81:de:84:b6:e0:b4:eb:16:1b:00:54:09:
d6:c1:11:88:a5:34:6d:32:1c:7e:40:25:62:70:41:bf:0e:5d:
f6:28:e6:57:0d:8d:2f:3e:2e:89:83:a6:60:40:f3:f1:5a:65:
c0:51:99:84:43:93:ed:8f:b6:23:b1:09:ca:b1:0f:c5:f1:d2:
0b:a7:09:9a:cb:58:a8:64:48:b0:0f:21:52:d4:73:68:8d:d0:
fe:ef:d0:99:62:da:3c:cf:02:c9:4a:fc:08:ee:9d:59:fd:be:
07:1c:d2:f4:bd:1d:c5:e1:cd:32:53:d2:3e:e4:03:67:ba:74:
15:16:62:d8:e5:95:72:34:94:b8:4c:54:93:8c:bc:b7:b5:ff:
67:b5:a4:55:cd:7a:e6:f0:96:7c:b1:68:55:ef:c2:20:56:8d:
a3:03:45:60:84:ea:5a:58:09:96:c2:54:91:0d:1c:f9:9e:63:
40:d9:3d:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA4QzAxMTAvBgNVBAUTKEQ4MDczODAzRUVDRkY0RjE5RUZGOTk1N0M3MTQ3QUZD
Q0FBMDE5RjUwHhcNMjYxMDAyMDIzMTQ0WhcNMjYxMDA5MDIzMTQ0WjAYMRYwFAYD
VQQDEw02YWJmMTc5MC1kZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCZcl2JXcFGecf357oZXCSxOFsDuRnNhmjPLGQum74K2xsSoD9dw5fZ31AZK
VSz7gHwu6+9eQItTmK/MAHRsUjnohRpLmXgiwu1IJuJjeuNIswt85yUKPCTVpDKx
tz4aWjJLokljSCee4HVF/lB8gpG/AM2zyVQ4Pyhos06Cwk9cvhLlNo9RRhrKuiVl
XLfcZjErnG82/c2AHrW8OT6zQnSu89r83CJc6CYufYK7INGLDCt5cQWUr/sTY61L
3GkpQM38ekqE4W7SdoMDYKGoOCeCs0x6LZL4MFc0dkCgz7lqgWLzJvot9vcTjZDC
XBoGwdIai1a38bx4nUlk9y0kcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNluzxL
S/KVd9xTnUPEU1Hs3VFAMB8GA1UdIwQYMBaAFNgHOAPuz/Txnv+ZV8cUevzKoBn1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhDMC83OTZBQTE0MjIx
NEMxMUYxQTM2Q0ExQTUzNzNEOEM2Ny8yQWM0QS03UDlQR2VfNWxYeHhSNl9NcWdH
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dmVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDhDMC83OTZBQTE0MjIxNEMxMUYxQTM2Q0ExQTUzNzNEOEM2Ny8yQWM0QS03UDlQ
R2VfNWxYeHhSNl9NcWdHZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYlDN0tTO9tlkDaHkEDsrmIvpv0f/ttiFW6AedLoiWFZ/Mo3j9TrdpHxxMGkD
+RTl54p/MM8vFI6oWGzEZ9+6tm/SI39lE86pT1ZHhuCzgd6EtuC06xYbAFQJ1sER
iKU0bTIcfkAlYnBBvw5d9ijmVw2NLz4uiYOmYEDz8VplwFGZhEOT7Y+2I7EJyrEP
xfHSC6cJmstYqGRIsA8hUtRzaI3Q/u/QmWLaPM8CyUr8CO6dWf2+BxzS9L0dxeHN
MlPSPuQDZ7p0FRZi2OWVcjSUuExUk4y8t7X/Z7WkVc165vCWfLFoVe/CIFaNowNF
YITqWlgJlsJUkQ0c+Z5jQNk9Og==
-----END CERTIFICATE-----
Generated at Sat Oct 3 12:54:22 2026 by rpki-client