
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier: Y6jyOX/qK8XL+BM8DuMner/epMeoBx8U9YSPPEuIzJw=
Subject key identifier: 52:84:9A:3A:B2:FB:DA:21:6D:23:22:84:53:5C:90:6A:46:0A:BC:42
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 07B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number: 078B
Signing time: Tue 12 May 2026 21:42:53 +0000
Manifest this update: Tue 12 May 2026 21:42:52 +0000
Manifest next update: Tue 19 May 2026 21:42:52 +0000
Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: x20GrH7jpDnzUsrol3+FbyccZuuDEHoBi0UphQSiBQE=)
2: F6AFB162F66B11F08367D08E6F6F56BC.roa (hash: rB+Tmv1oKzF3mo1fo+ketSQWRb1QMSjxzFBO+4UsFGI=)
3: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0=)
4: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: KirEUGjAdAYwlJ1vX/xexGJU4YLpCT+izGcMYNz9uNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: May 12 21:42:52 2026 GMT
Not After : May 19 21:42:52 2026 GMT
Subject: CN=6a039edd-4a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:41:f9:85:9d:6c:ac:92:9a:53:e7:7e:54:
fe:e0:7d:21:e9:61:b7:cb:22:77:a1:45:ac:d8:bb:
72:00:b1:08:79:62:85:6d:45:0e:2c:54:fb:e5:79:
19:9b:0b:99:11:2c:74:1b:0e:46:29:95:46:54:f2:
10:0d:8c:9d:f0:ab:9e:20:b0:3e:bb:79:9c:04:a7:
d0:48:a5:5d:32:ec:fc:6f:89:70:52:0f:e4:2b:98:
d3:df:71:e7:a0:8f:f3:f9:f6:67:f3:2b:f9:a9:55:
9f:f4:f7:10:cd:76:c0:45:44:32:95:68:8c:d4:7f:
08:43:6e:ec:f4:96:8a:e6:e0:b5:19:b8:03:27:64:
ec:87:f4:16:30:a9:2f:f8:ea:01:0d:45:48:77:3a:
73:f9:6d:ca:10:0e:29:13:03:3f:16:29:29:c9:2f:
25:4d:e1:6c:dc:65:98:b9:bc:1d:c7:42:4e:6e:fd:
c3:d7:c0:af:24:06:65:84:76:8c:ac:ce:5e:7e:17:
3d:92:67:07:26:9c:00:ec:16:b8:92:30:12:52:59:
f6:5d:94:e4:72:54:56:58:33:e0:1e:80:9c:cc:1d:
a9:02:98:dc:16:02:57:49:37:77:8e:94:02:d8:dc:
8b:e6:16:77:dd:1a:dd:9c:47:20:46:a7:ac:61:67:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:84:9A:3A:B2:FB:DA:21:6D:23:22:84:53:5C:90:6A:46:0A:BC:42
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cf:9d:4a:4c:26:61:15:47:85:75:52:30:3e:ab:e6:01:22:
f1:d3:4e:df:ce:dd:7b:a3:fe:39:ef:6b:c6:d5:66:fd:ea:a2:
59:86:7b:c6:6a:8f:99:2a:c4:c7:0e:bc:11:e1:6f:ad:80:b0:
09:7a:2a:a8:a8:94:ea:90:14:97:c9:9b:0a:b5:3c:9d:96:f1:
c4:4f:71:ec:e8:37:12:ed:38:51:e8:41:8a:c8:fe:96:94:75:
69:79:15:56:f2:fd:01:8a:11:a0:08:2d:9b:af:fb:21:d7:7f:
da:bb:74:a0:fb:18:d5:76:33:b8:7f:03:fa:61:5a:e1:90:86:
78:22:67:b9:3d:c5:5b:35:6e:a0:a9:e2:9f:d4:57:70:fe:7e:
01:96:90:2e:56:58:d4:e7:73:e4:55:7e:81:90:6e:af:78:9c:
b6:ee:51:c4:76:76:ff:11:a7:d9:5a:ca:5e:08:46:8b:ac:5a:
5c:38:65:39:a0:70:13:a8:12:85:8c:5a:ea:f4:65:92:16:7e:
bd:e2:97:f5:38:f9:be:e1:dd:08:3d:28:5a:44:e6:e1:0d:15:
63:27:62:78:bf:dd:2b:83:96:f0:62:11:47:47:c2:29:e6:aa:
f8:d5:96:b3:54:a2:90:62:bc:9b:3e:bc:5f:b1:77:54:3f:a9:
6e:3e:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:40:05 2026 by rpki-client