
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier: QWNWv6uRX8hvLKAnOdXBMEeM9UYiveG286bFX0Ap9QQ=
Subject key identifier: 3F:8D:A4:6D:50:43:F5:1D:F3:C3:A0:5E:43:F5:1A:18:F5:CD:6E:C3
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number: D6
Signing time: Fri 25 Sep 2026 06:49:35 +0000
Manifest this update: Fri 25 Sep 2026 06:49:35 +0000
Manifest next update: Fri 02 Oct 2026 06:49:35 +0000
Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: 514A0yehcSbVq4duTqCx7/bLwD8nwjecNfzFR1mQy6g=)
2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: lvMTiY/rJNBKMXIOq2j50bfuE4IjNSp5H2Ku0pIODV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Validity
Not Before: Sep 25 06:49:35 2026 GMT
Not After : Oct 2 06:49:35 2026 GMT
Subject: CN=6ab6197f-69a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d1:82:2f:ed:dd:75:6e:69:fc:2c:69:79:5c:
bc:95:a2:48:8f:90:1e:ab:42:82:06:26:97:26:9a:
01:1c:05:af:22:f6:39:a8:32:a1:34:70:88:17:fb:
4b:6e:42:b6:45:5b:48:3c:0b:3d:6b:49:86:98:3c:
66:43:a1:97:e8:58:ec:e6:f1:25:26:32:06:28:e3:
aa:85:f3:2c:6c:28:9c:2e:ae:8d:78:9a:1c:48:ce:
e2:8f:34:94:05:b2:c0:ba:fc:1e:83:d7:dc:c2:fb:
58:03:30:f4:db:dc:fa:db:e0:6b:ad:2a:1b:c1:01:
6e:71:35:35:1d:05:2a:11:02:e4:5d:ff:91:dc:f1:
b3:36:e4:4f:e7:57:19:b6:9f:27:52:b7:a4:05:98:
b1:2e:ef:91:6e:64:81:3d:62:66:40:ba:13:36:e8:
af:40:f5:88:ee:0e:e6:a0:2e:c2:74:8b:38:39:77:
d6:f8:e0:c3:78:42:95:a7:65:ad:28:a5:2e:bf:99:
fc:40:f1:5a:7b:9a:60:0f:42:84:b3:69:0c:a7:8c:
95:f1:50:f9:5a:77:3b:70:5d:ca:f9:4e:fe:60:a6:
e5:d0:1a:14:04:ab:ed:eb:43:f4:41:57:8a:a6:ed:
04:2a:74:fb:24:04:dc:b5:45:d4:51:3d:27:72:d8:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:A4:6D:50:43:F5:1D:F3:C3:A0:5E:43:F5:1A:18:F5:CD:6E:C3
X509v3 Authority Key Identifier:
keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:fe:0d:3a:9a:ff:92:75:a0:75:99:ac:4f:70:08:52:87:
42:78:2e:55:8f:86:bd:5b:f5:05:fa:50:88:42:89:c4:85:c7:
ea:28:f1:6a:6c:7d:44:5f:32:d3:f0:c1:84:bd:fc:bd:e9:98:
83:93:d5:a1:4a:1f:a0:99:ad:93:ab:ab:45:76:57:f0:ea:36:
06:2e:18:b6:95:4e:c7:de:6d:13:1d:ef:a4:72:8b:d6:eb:3f:
32:a9:2b:5b:76:77:6b:ef:64:5b:e9:84:09:fb:c1:54:3f:c4:
df:db:d5:9d:fd:9d:db:73:59:81:e8:cb:54:14:0a:6e:d1:08:
2c:d4:04:30:a9:66:67:b8:81:09:0f:68:49:88:28:08:89:ed:
05:01:8e:94:b5:98:15:94:68:0f:41:5c:66:61:62:fa:92:29:
d4:3b:e1:3d:ea:2e:de:32:b3:fd:fa:4f:f6:10:2c:b2:24:a2:
09:1d:02:c3:bb:f4:60:89:8a:9a:39:2d:4a:9c:bd:90:32:4b:
2a:0f:ed:22:b8:25:9d:37:39:87:4a:58:c9:ee:d1:e1:a8:1b:
89:cd:22:79:40:a2:bb:9f:04:75:ba:39:3b:30:7b:d6:a2:40:
46:e2:48:bd:62:62:b8:f7:e2:17:eb:c8:73:41:df:a9:a3:eb:
51:fb:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:29:34 2026 by rpki-client