
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: lAsnkfIH8yXFzq4j0fYPl/LHVMz53lRr6LXB6BsR6IA=
Subject key identifier: 34:F6:A6:E3:5D:C5:CD:E3:2E:98:0C:EA:E8:35:5A:E6:54:6E:F1:61
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0C26
Signing time: Fri 24 Jul 2026 19:09:15 +0000
Manifest this update: Fri 24 Jul 2026 19:09:14 +0000
Manifest next update: Fri 31 Jul 2026 19:09:14 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: MIuI7oV0R7OmSLkhszeDgELkMHnLZjDSxENsqGJ41Nc=)
2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=)
3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Jul 24 19:09:14 2026 GMT
Not After : Jul 31 19:09:14 2026 GMT
Subject: CN=6a63b85a-6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:80:7c:74:9f:3e:8a:b0:7b:95:8f:4b:26:
71:2c:8f:3d:61:f2:ef:be:c7:24:15:ac:ac:49:05:
0c:2a:c9:c5:4a:fe:ea:6f:44:a4:f0:8b:fe:5a:36:
e7:80:56:54:e8:d7:b4:9d:51:9e:e6:20:98:a6:4e:
df:a3:0d:7f:9b:89:a9:a7:59:30:d0:e9:8d:08:f2:
91:17:de:37:a6:24:46:da:b9:cb:aa:7e:d5:17:0a:
77:0e:e8:69:68:15:7c:3b:51:23:6b:29:cc:10:dd:
d3:f1:1b:74:fb:82:bb:51:3e:d6:c8:ca:8e:1f:ef:
c1:3d:db:73:35:35:fe:c4:c8:d5:3e:52:f2:70:d6:
60:2c:bf:60:64:b6:c9:df:69:11:4e:66:16:1d:6c:
c1:a7:a6:6a:7d:39:92:a6:e2:0f:e5:52:63:22:82:
cb:75:fd:3d:32:6f:38:7c:01:be:ce:f9:ff:c3:34:
5d:c5:74:32:f6:43:2d:9e:e8:d3:6a:d1:b2:a3:65:
d6:d3:6b:c2:c4:d8:cc:83:a0:ce:bd:41:c5:57:8e:
e3:3a:fe:47:dd:c8:a8:35:3c:bf:fe:aa:dd:c2:88:
c6:ee:90:c4:58:ff:a2:15:88:46:56:2e:b1:d0:92:
06:71:5c:b9:27:48:cb:5b:93:7f:a5:33:82:fc:97:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:A6:E3:5D:C5:CD:E3:2E:98:0C:EA:E8:35:5A:E6:54:6E:F1:61
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:3d:d6:7f:0a:d5:11:21:f5:e1:98:07:2a:82:c6:7d:65:
4d:30:79:c5:e6:2f:95:94:f4:20:00:6d:ac:7d:ce:33:2e:9d:
6e:63:f5:0c:71:50:dc:66:fe:88:97:6b:58:80:8b:17:a5:8e:
ea:73:7c:21:4f:f2:ca:21:52:19:33:96:0c:52:99:e8:10:68:
c8:da:7f:49:25:bf:5c:24:7b:d8:6a:87:10:03:ac:6e:9f:5f:
df:94:de:5e:00:93:a8:16:0a:5d:3e:77:fc:78:b6:3a:fa:3e:
0e:24:a5:a0:77:e6:2d:63:fc:af:4a:37:ca:cd:5b:e7:99:ca:
87:2f:5b:9b:71:fc:36:68:81:b7:b2:1b:c4:9c:a7:70:ed:65:
17:0a:c0:33:89:2c:31:a4:80:55:3e:b9:9b:89:b5:ea:ab:f1:
0a:45:62:23:69:61:09:2b:f7:4e:88:18:35:2d:61:0c:78:89:
88:41:97:b7:e9:45:94:34:8b:e2:31:53:f3:f6:2b:ed:d9:f1:
94:9b:9c:fa:32:2c:6e:94:28:bc:f1:ec:22:57:a5:36:12:ba:
09:aa:03:27:af:8d:e2:e1:83:8f:0a:f5:da:d1:a3:54:4f:26:
30:9b:39:94:78:f2:c2:76:99:16:7b:f0:9c:d7:e0:00:6b:eb:
b1:a4:ac:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1
MTIxRDI0MUMwHhcNMjYwNzI0MTkwOTE0WhcNMjYwNzMxMTkwOTE0WjAYMRYwFAYD
VQQDEw02YTYzYjg1YS02ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6NWAfHSfPoqwe5WPSyZxLI89YfLvvsckFaysSQUMKsnFSv7qb0Sk8Iv+Wjbn
gFZU6Ne0nVGe5iCYpk7fow1/m4mpp1kw0OmNCPKRF943piRG2rnLqn7VFwp3Duhp
aBV8O1EjaynMEN3T8Rt0+4K7UT7WyMqOH+/BPdtzNTX+xMjVPlLycNZgLL9gZLbJ
32kRTmYWHWzBp6ZqfTmSpuIP5VJjIoLLdf09Mm84fAG+zvn/wzRdxXQy9kMtnujT
atGyo2XW02vCxNjMg6DOvUHFV47jOv5H3cioNTy//qrdwojG7pDEWP+iFYhGVi6x
0JIGcVy5J0jLW5N/pTOC/JerEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDT2puNd
xc3jLpgM6ug1WuZUbvFhMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2
OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK
QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHNc91n8K1REh9eGYByqCxn1lTTB5xeYvlZT0IABtrH3OMy6dbmP1DHFQ3Gb+
iJdrWICLF6WO6nN8IU/yyiFSGTOWDFKZ6BBoyNp/SSW/XCR72GqHEAOsbp9f35Te
XgCTqBYKXT53/Hi2Ovo+DiSloHfmLWP8r0o3ys1b55nKhy9bm3H8NmiBt7IbxJyn
cO1lFwrAM4ksMaSAVT65m4m16qvxCkViI2lhCSv3TogYNS1hDHiJiEGXt+lFlDSL
4jFT8/Yr7dnxlJuc+jIsbpQovPHsIlelNhK6CaoDJ6+N4uGDjwr12tGjVE8mMJs5
lHjywnaZFnvwnNfgAGvrsaSsaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:42 2026 by rpki-client