
$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json)
Hash identifier: uzd3klYQ4mdh8WTZRJp/GebNLKti4auOI+ApbYVKnfw=
Subject key identifier: 4E:98:C8:A1:41:CE:70:D2:C8:E0:DD:1E:95:05:D3:1E:61:76:3D:C7
Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Certificate serial: 2304
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
Manifest number: 22D1
Signing time: Tue 24 Mar 2026 15:46:59 +0000
Manifest this update: Tue 24 Mar 2026 15:46:58 +0000
Manifest next update: Tue 31 Mar 2026 15:46:58 +0000
Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: umiRbIb0hajUtI3DOvKG3dznjW+9Tx4qfXqi2Pknm7I=)
2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: +zCdPTASsee5aGIIMi1W1D9P9AT40nhCRgcd1OQAqvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8964 (0x2304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Validity
Not Before: Mar 24 15:46:58 2026 GMT
Not After : Mar 31 15:46:58 2026 GMT
Subject: CN=69c2b1f3-1331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:ec:aa:fa:dc:de:09:5b:f5:5a:7d:06:5d:
9f:48:2c:a2:74:2c:b7:10:9c:f6:53:a5:fd:2d:bc:
e6:9f:da:98:85:d3:51:32:b9:3b:11:01:72:77:1b:
7c:a5:1e:8b:2b:05:a7:eb:41:68:50:0c:08:83:d2:
81:16:9a:a9:44:dd:05:4b:36:24:4f:16:60:fc:7a:
1d:95:48:41:be:64:1b:5d:d5:e3:8b:7e:be:c3:97:
e2:d5:57:7b:dc:4f:ee:31:f1:d5:d9:ba:32:84:89:
4a:d4:54:37:f3:5a:5d:52:8b:0e:72:59:b8:e6:1a:
e6:30:9b:05:98:9f:24:51:78:ea:f6:e6:8a:9a:27:
1d:47:a4:13:50:0f:3c:0c:46:8d:57:82:72:a8:99:
7f:d2:d2:cf:c2:29:8d:58:4d:40:f2:ed:1c:a3:a4:
51:89:59:76:37:f9:26:73:17:ca:c0:93:96:b7:5f:
15:ca:c6:c6:02:ef:f4:59:a2:f4:bf:2f:a9:0c:cb:
16:6b:f4:a9:4e:f1:fd:a0:0a:93:e6:23:29:15:c2:
5c:4a:09:33:34:4c:d4:ce:72:f8:c8:cf:2e:72:12:
9c:a9:78:ba:a9:c5:52:a9:42:9d:62:04:fb:e4:83:
e3:56:c2:ae:9f:55:d0:84:b1:04:12:18:ee:2a:3a:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:C8:A1:41:CE:70:D2:C8:E0:DD:1E:95:05:D3:1E:61:76:3D:C7
X509v3 Authority Key Identifier:
keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f7:ac:88:88:94:3e:18:cc:6d:70:98:08:60:5d:05:a1:77:
9f:34:60:41:d9:a0:47:a1:f3:98:7f:df:2e:07:3b:db:c8:ab:
32:6a:70:56:ce:7e:34:ef:1e:69:04:e0:20:fd:65:e5:5f:4b:
5a:14:7b:cc:e8:9c:cd:fa:d2:5e:50:64:5d:80:5e:cf:79:aa:
44:e6:0e:e3:a2:1e:a5:45:02:3a:d6:5a:bb:ba:d0:b1:84:ac:
b1:56:72:af:2c:38:f7:da:2b:09:7e:8c:ee:63:ba:40:7a:61:
a9:8c:ec:31:d9:a4:2e:24:46:08:89:4b:32:87:ff:2e:2b:fe:
43:f3:3e:b7:91:b5:43:f6:71:07:2a:c3:b6:8f:0e:6b:b7:4b:
b2:ca:d4:7b:74:4b:7d:27:64:aa:3d:38:3c:1d:c2:82:dd:1e:
f7:e0:c8:bc:1d:bb:f7:21:85:eb:a5:32:e3:14:03:91:6a:d3:
2e:36:03:c6:be:f9:5f:5d:f4:4a:55:02:51:96:9a:25:73:d6:
91:67:dd:3e:c0:d9:64:2c:f2:8c:ca:3b:8d:d2:a0:53:7c:e2:
27:fd:50:e9:2a:d2:27:98:e9:bf:66:98:79:c1:ce:6d:fc:3c:
8c:ac:c8:f3:6f:33:30:7a:ab:04:0e:30:59:8d:53:24:3a:c3:
c2:59:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:15 2026 by rpki-client