
$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json)
Hash identifier: JyWLhi802OWqzDjdPU/TgutV6uiGAhZcTz5e6GjH0p0=
Subject key identifier: C9:9C:C0:D0:72:B8:00:0A:AE:4C:08:1E:49:1C:7D:D8:D8:01:96:DF
Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Certificate serial: 2305
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
Manifest number: 22D2
Signing time: Thu 26 Mar 2026 15:50:39 +0000
Manifest this update: Thu 26 Mar 2026 15:50:39 +0000
Manifest next update: Thu 02 Apr 2026 15:50:39 +0000
Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: 2JLrkhAc9EtY0E7ITWOtykung/YOjIyvgbh7WSy7wnk=)
2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: +zCdPTASsee5aGIIMi1W1D9P9AT40nhCRgcd1OQAqvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8965 (0x2305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Validity
Not Before: Mar 26 15:50:39 2026 GMT
Not After : Apr 2 15:50:39 2026 GMT
Subject: CN=69c555cf-27f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:12:4f:c4:84:cd:59:fb:4f:5c:a6:bb:92:
c3:d9:94:a8:af:53:6f:7f:24:c7:6f:ac:cd:c7:29:
6f:54:62:84:1b:27:49:e4:ae:f9:8d:8a:01:c3:58:
42:a5:b7:ab:50:05:87:87:86:eb:86:a7:a8:c9:8a:
c2:8c:00:a8:d3:1f:3f:21:d7:6c:e4:7c:de:db:20:
08:5d:a4:98:94:63:f0:be:e1:a4:f2:d6:29:7d:82:
6e:4a:dc:c5:ec:a9:dc:f8:08:b1:34:74:cb:04:12:
aa:a7:1a:04:f9:dd:c8:a3:26:e3:48:91:06:c2:78:
08:ab:5c:75:c0:89:46:08:83:3e:9a:4d:88:06:6b:
ec:21:51:3b:52:a4:c7:4c:eb:96:87:b3:ec:82:e2:
ba:91:2a:d1:c8:8b:90:d9:ee:b0:98:a8:0d:6f:d3:
8f:a0:22:08:d6:bc:0c:bb:01:b8:5b:0c:c3:3a:4f:
b3:c3:7d:5a:bb:32:fc:0d:4a:33:83:b7:e8:32:44:
99:22:cc:ca:3f:cf:56:1b:b9:72:91:da:44:32:24:
c8:a5:47:52:8d:11:90:b6:65:8a:8d:72:34:6f:0b:
3d:30:a3:9c:a3:c9:7b:6f:5a:31:4e:11:cd:3f:d0:
70:78:c0:c5:28:1c:d7:2b:72:a5:ce:36:c5:a5:4a:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:C0:D0:72:B8:00:0A:AE:4C:08:1E:49:1C:7D:D8:D8:01:96:DF
X509v3 Authority Key Identifier:
keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c9:cf:cd:29:db:b0:24:2a:50:0d:2d:9e:80:38:ac:2b:8a:
49:81:49:73:64:43:93:4a:f5:d6:b3:e3:68:5a:0c:42:86:7d:
62:51:c7:5c:e6:9a:ed:a7:1a:3a:ed:69:6c:f8:7b:d4:4a:90:
93:4c:db:12:c3:c2:77:c2:71:82:0b:cb:3b:fc:eb:0e:9f:27:
ee:26:25:49:41:b2:42:16:ca:52:20:4f:9d:50:97:72:2f:b6:
60:b3:1f:47:2d:6e:dc:13:a0:9b:3e:3c:fc:44:2f:20:05:1f:
a6:cd:8c:1f:6e:99:da:27:4f:11:82:f5:04:43:7f:f5:83:ae:
ac:e0:1c:46:90:de:63:6f:20:a7:1d:ab:d7:2d:57:98:c3:24:
e1:de:b0:1c:0e:ae:ac:6c:87:fe:f6:21:dd:93:ef:19:ee:9d:
11:63:3c:4e:b3:af:4c:6b:37:e9:ad:40:a9:38:48:15:43:8e:
8b:21:6b:37:14:d8:65:16:dc:d5:e5:a9:49:4b:99:dd:b0:07:
7b:b4:0e:e6:06:a3:b1:77:ed:d9:6d:78:c8:de:8b:14:88:4e:
6c:1e:21:b8:83:81:f7:9f:0c:5e:d3:93:37:53:fa:26:9f:e2:
a2:2f:7a:fe:4e:d8:7d:d1:09:0d:bc:1e:cc:98:30:ec:47:e8:
93:f4:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:50 2026 by rpki-client