
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: K31qMZyiNxHNm1dR0hiugLh06YNVVMySoIVtNRkWwp4=
Subject key identifier: C2:C2:22:08:C5:D3:2A:42:35:90:99:96:BE:A7:95:21:48:91:93:C4
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0C01
Signing time: Tue 12 May 2026 18:53:46 +0000
Manifest this update: Tue 12 May 2026 18:53:46 +0000
Manifest next update: Tue 19 May 2026 18:53:46 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: kkvfqrJpc9mFgUNHi9KetsyJp55WmIywl6aPeYVPHns=)
2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=)
3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3095 (0xc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: May 12 18:53:46 2026 GMT
Not After : May 19 18:53:46 2026 GMT
Subject: CN=6a03773a-68a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:f1:f5:96:86:69:69:27:e6:8d:e7:ad:18:
db:a9:2d:6f:0e:c8:92:19:2f:9a:9b:11:25:cb:95:
c8:54:c4:db:6c:3c:1e:ba:3f:6e:a0:4a:74:da:e7:
db:c6:e5:1d:f2:6b:9b:e6:53:20:e4:ce:f3:1e:41:
43:a6:8c:ce:1d:85:02:81:1a:a5:88:2a:29:98:70:
74:ad:0b:72:7e:74:91:8b:ba:e3:81:46:4f:51:6f:
df:d6:5f:84:48:8f:f4:de:c2:66:82:57:45:e0:d7:
e3:1c:17:a4:39:77:da:96:8f:0c:e4:ae:43:b2:81:
1a:d3:94:fd:30:cb:f1:80:e3:c6:88:50:ed:de:03:
6e:39:76:dc:ee:06:94:b2:55:f5:0e:f1:f9:59:e0:
d6:b4:9f:0f:db:aa:be:68:c7:15:0b:50:ce:ae:b1:
44:52:b9:16:66:72:c2:af:14:4f:a0:f2:a2:ed:a0:
91:7a:6b:be:af:86:f0:c2:05:2c:f5:e3:98:ac:ad:
1e:ed:46:a8:b6:a6:13:05:87:82:68:75:3a:f3:a8:
ca:d8:d1:80:22:83:90:f1:78:b7:92:70:2f:d0:bd:
6c:bf:8c:4f:69:8a:b0:42:4c:f1:ce:2c:6d:fd:81:
e3:40:41:e2:f7:7f:75:d9:76:50:fa:18:fd:63:09:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:22:08:C5:D3:2A:42:35:90:99:96:BE:A7:95:21:48:91:93:C4
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e0:17:84:76:3d:96:0d:ee:f2:f1:db:ea:0b:0a:25:52:c1:
41:86:2e:83:bb:42:3e:54:a4:52:0f:62:54:d6:bc:6a:82:da:
b4:52:ef:3d:c9:b9:77:03:40:36:98:ed:1a:e7:ee:82:72:38:
bc:ac:fd:f7:1d:86:f6:f3:02:45:15:f1:d9:a9:af:01:a9:14:
83:03:ef:3e:f1:25:a6:0e:07:fc:27:63:f0:5b:dc:9f:06:6e:
0e:11:98:9f:87:71:91:9f:0b:29:97:41:e6:c1:5a:c6:9b:dd:
c8:07:c1:d7:64:83:5b:0a:ed:bc:44:ce:9e:6a:2c:e1:95:56:
8f:41:ed:05:21:27:e5:83:9e:7f:3c:49:0b:d7:95:ef:f6:ad:
d8:f4:05:02:bd:74:d0:8f:bc:76:f6:ca:ae:4c:43:71:a6:24:
28:b9:b2:94:4c:b8:50:94:09:8a:8a:5a:ac:04:a5:38:7d:cb:
61:a5:41:8a:f6:ee:c2:5b:37:63:50:f5:d2:cd:02:19:31:d5:
c1:87:0c:bf:7f:bf:d9:43:35:ca:f9:83:1e:5f:c3:48:8e:c3:
92:c2:fa:66:6a:92:47:02:5e:1c:b2:4d:2c:ba:c3:5d:63:00:
86:03:83:50:b4:3b:1f:36:61:16:48:32:e1:45:7b:83:2b:0b:
81:e8:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:08 2026 by rpki-client