
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json)
Hash identifier: 7e3cvHh84jnxBGRa0+dYcXd5YqIFirsC7Fc09Zygai4=
Subject key identifier: 29:59:83:04:61:75:AA:09:17:EA:BA:2C:B5:DE:8A:AB:24:F2:AD:CD
Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Certificate serial: 02DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
Manifest number: 02CB
Signing time: Thu 23 Jul 2026 02:20:35 +0000
Manifest this update: Thu 23 Jul 2026 02:20:34 +0000
Manifest next update: Thu 30 Jul 2026 02:20:34 +0000
Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: O3a78n340kOpGszthS/W3P6dWEOEbzkVhqQQwaOg4Wk=)
2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: uF93ugcNEDMZcHQur8dHIYLF7HLhxy7ZY6L/0rj59kk=)
3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: dXxXH3k4HDVIe0Nszw/qyhG1QYul5iP9wevqRM4orcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731 (0x2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Validity
Not Before: Jul 23 02:20:34 2026 GMT
Not After : Jul 30 02:20:34 2026 GMT
Subject: CN=6a617a72-6f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:83:72:62:e5:31:4d:d2:f8:79:d3:1b:a5:
f1:83:7c:f2:15:8c:a1:0e:75:d3:f1:c0:db:80:2c:
01:df:13:d2:a5:ed:1b:b3:e0:a8:2d:d4:d7:44:98:
e0:e2:58:82:96:7e:0f:d4:89:11:9b:ba:50:aa:dc:
a1:3b:0d:c4:f8:d6:1c:c0:f4:c6:93:7b:46:c9:81:
70:22:73:aa:aa:cf:1c:41:7e:73:99:00:5f:c0:fb:
3b:4e:2f:09:e0:96:f2:99:14:9a:e9:9e:6b:90:79:
ba:41:a2:f0:32:40:e2:a0:84:14:d6:d8:2a:bd:6b:
41:d5:f6:5e:e3:ab:41:dd:d8:a7:0b:7a:04:f4:e4:
0a:04:44:f0:88:87:e1:e5:4a:9f:80:a6:88:b6:5c:
29:6c:96:9a:ec:e5:74:fa:21:73:2b:93:52:98:ed:
0a:0c:bc:d2:db:ef:fe:6a:fa:48:7c:4a:ce:1a:3d:
9b:5d:50:4b:d1:e2:a0:51:f9:f6:4c:ae:a2:8a:2c:
16:20:3a:5d:d7:30:70:7b:40:5a:5b:67:cc:6d:bb:
31:37:89:7a:57:4a:b4:37:74:78:4a:61:41:97:d9:
61:55:0d:f9:6d:46:27:99:de:e6:79:65:47:d5:0a:
07:57:a7:85:14:b3:56:9f:3e:fc:21:14:4f:17:48:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:59:83:04:61:75:AA:09:17:EA:BA:2C:B5:DE:8A:AB:24:F2:AD:CD
X509v3 Authority Key Identifier:
keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4b:78:02:12:4e:23:d1:79:96:c5:71:f5:f4:0a:75:cb:d0:
af:f9:3e:a3:23:7c:3c:54:09:f3:d8:5b:68:9b:40:b0:fd:8c:
ed:73:fd:49:43:97:1a:39:9f:de:70:9d:43:84:96:12:47:57:
1f:d3:c6:9d:3d:54:f4:7e:fb:c5:92:a1:4f:50:fb:a1:54:02:
5c:d3:68:76:7e:e7:ae:47:95:13:4d:e5:e1:bb:64:b1:5e:dd:
3f:9c:b2:db:97:43:4f:3f:03:b3:90:c7:00:b2:c9:d5:66:10:
46:80:5a:44:73:c5:15:6c:84:8c:06:83:da:9e:f6:09:f3:d9:
ce:e6:10:f5:7f:d6:42:50:12:96:20:91:51:bc:cd:f5:a6:9f:
7f:e2:0a:fc:d2:91:71:66:7f:dc:b7:cb:bd:4f:0e:d8:f3:35:
5f:fb:19:82:22:4f:0a:30:b4:d3:da:2e:69:ae:6b:ad:51:79:
cb:f1:6d:8e:d4:bb:bd:5c:a8:00:d6:ba:91:f8:20:f0:2f:b6:
aa:d4:18:82:29:ca:0d:41:47:7d:f0:8a:50:48:19:19:a5:8f:
3f:a8:d0:2f:5f:f8:c2:5f:52:dc:a0:65:f8:fd:6a:ec:ac:e8:
fd:1c:9c:18:bc:bd:df:1f:5a:bb:7d:a0:ce:c6:f5:9d:8d:5d:
d5:13:34:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB
RDJGQTgxMEIwHhcNMjYwNzIzMDIyMDM0WhcNMjYwNzMwMDIyMDM0WjAYMRYwFAYD
VQQDEw02YTYxN2E3Mi02ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkxqDcmLlMU3S+HnTG6Xxg3zyFYyhDnXT8cDbgCwB3xPSpe0bs+CoLdTXRJjg
4liCln4P1IkRm7pQqtyhOw3E+NYcwPTGk3tGyYFwInOqqs8cQX5zmQBfwPs7Ti8J
4JbymRSa6Z5rkHm6QaLwMkDioIQU1tgqvWtB1fZe46tB3dinC3oE9OQKBETwiIfh
5UqfgKaItlwpbJaa7OV0+iFzK5NSmO0KDLzS2+/+avpIfErOGj2bXVBL0eKgUfn2
TK6iiiwWIDpd1zBwe0BaW2fMbbsxN4l6V0q0N3R4SmFBl9lhVQ35bUYnmd7meWVH
1QoHV6eFFLNWnz78IRRPF0h2rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClZgwRh
daoJF+q6LLXeiqsk8q3NMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE
RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh
YnVUd0gteHFtT0N0TDZnUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe0t4AhJOI9F5lsVx9fQKdcvQr/k+oyN8PFQJ89hbaJtAsP2M7XP9SUOXGjmf
3nCdQ4SWEkdXH9PGnT1U9H77xZKhT1D7oVQCXNNodn7nrkeVE03l4btksV7dP5yy
25dDTz8Ds5DHALLJ1WYQRoBaRHPFFWyEjAaD2p72CfPZzuYQ9X/WQlASliCRUbzN
9aaff+IK/NKRcWZ/3LfLvU8O2PM1X/sZgiJPCjC009ouaa5rrVF5y/FtjtS7vVyo
ANa6kfgg8C+2qtQYginKDUFHffCKUEgZGaWPP6jQL1/4wl9S3KBl+P1q7Kzo/Ryc
GLy93x9au32gzsb1nY1d1RM0zw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:28 2026 by rpki-client