
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json)
Hash identifier: vs66+KT3BrSHnvElPPBD3dV+acZWwoSb9VMkH50F/xU=
Subject key identifier: AC:FA:7E:93:46:1A:C6:91:09:34:BB:3E:DC:EE:6A:FB:3D:7C:59:2C
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
Manifest number: 021B
Signing time: Wed 13 May 2026 02:52:53 +0000
Manifest this update: Wed 13 May 2026 02:52:52 +0000
Manifest next update: Wed 20 May 2026 02:52:52 +0000
Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: 4XlG2dSXgSiwSLBvAcgLpNGIDXhs112gegiR5M+hc7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Validity
Not Before: May 13 02:52:52 2026 GMT
Not After : May 20 02:52:52 2026 GMT
Subject: CN=6a03e784-e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:89:db:4b:54:c5:49:4b:66:ba:8a:3e:13:
7d:58:70:da:35:70:75:fb:41:7b:32:d9:a2:fb:1f:
77:38:51:05:f4:03:9d:4f:63:a6:30:ec:17:c5:65:
d4:c7:32:06:73:d3:a3:b0:b9:39:b2:e9:77:2a:f5:
e5:1e:26:5f:9e:23:b3:92:4f:58:ea:d5:a4:b8:39:
e5:1a:d1:10:76:61:75:c6:85:1b:7e:b6:97:45:d1:
3e:bb:7c:a0:b0:b3:6a:d5:df:d2:ca:18:8d:43:bf:
88:9f:65:27:bb:7b:02:c4:c0:50:cc:86:8e:f1:0e:
a7:63:cf:d5:72:7d:1b:4d:ec:0c:dd:7c:74:3f:24:
1d:86:fe:13:0e:34:8b:9d:e3:de:59:50:aa:2d:d8:
47:52:b4:8b:69:63:16:47:f4:e6:dd:b4:68:15:d2:
f8:0b:49:1c:58:7a:f0:31:22:f2:c9:f1:75:21:a0:
6f:74:84:db:a4:2e:2c:ce:25:2f:0b:e4:68:ae:60:
b2:72:be:50:87:b0:1f:57:74:17:e2:88:55:b1:f4:
6d:b1:b9:90:6a:a7:34:f4:57:a3:8f:d7:89:96:9c:
0a:10:b9:43:23:a8:31:b4:b5:1f:3b:d0:bd:1b:75:
b6:b1:5b:1a:39:8a:22:29:43:c6:4f:d1:66:9a:75:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:7E:93:46:1A:C6:91:09:34:BB:3E:DC:EE:6A:FB:3D:7C:59:2C
X509v3 Authority Key Identifier:
keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:74:9e:50:02:97:88:43:7d:ca:61:4e:39:02:8d:70:c4:84:
d6:56:ff:cb:a5:9c:a1:08:30:8c:42:cb:6e:dc:c9:81:fc:4e:
6e:5b:79:5b:0c:14:07:5d:78:3e:a2:fe:4e:cd:e7:cc:3d:0c:
b3:9b:b8:c6:15:ae:da:f0:48:66:3c:18:48:1d:d3:53:5d:26:
59:f4:77:29:2e:34:42:dc:fe:04:a0:b7:5a:c3:2c:47:53:53:
c9:2d:9b:b0:9f:70:0e:97:f0:ba:26:0d:88:9e:6c:60:2d:54:
0c:07:3f:ce:64:e7:62:3f:34:ff:dc:85:43:db:ae:c9:da:0b:
3e:1e:99:b9:e5:0f:21:46:08:c0:d7:69:f1:57:f7:28:c6:d7:
5e:0c:cd:43:aa:93:a3:49:f2:94:a9:e4:a2:d9:60:a5:97:34:
9d:e1:be:6e:f9:fc:e6:c3:21:f3:19:5a:b4:2c:46:df:52:ef:
64:2f:8a:10:e0:19:1f:cd:57:05:72:67:5e:2d:eb:c1:fa:1e:
03:75:61:7a:e4:d3:3a:95:c7:75:7d:be:de:dd:36:8a:0c:a0:
d4:32:3f:1f:7d:7d:c4:16:94:6a:56:d6:69:f3:14:86:68:51:
64:ab:02:c3:96:f2:5a:be:e0:f0:a2:b6:ed:9d:05:e8:cc:08:
16:02:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:16 2026 by rpki-client