
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json)
Hash identifier: LyHAO6Qwlw+bffRNi3XdIkctkst/M3Mg+P6dmcp92kA=
Subject key identifier: DC:EF:07:DB:E1:1E:BC:09:C9:B5:E5:A7:CC:AB:2D:DD:79:25:9E:04
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
Manifest number: 0202
Signing time: Wed 25 Mar 2026 02:24:42 +0000
Manifest this update: Wed 25 Mar 2026 02:24:41 +0000
Manifest next update: Wed 01 Apr 2026 02:24:41 +0000
Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: nhcgqX5YcNlK1G/6ofEKpaj1fETqRVHuC3KGoVZ1fwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Validity
Not Before: Mar 25 02:24:41 2026 GMT
Not After : Apr 1 02:24:41 2026 GMT
Subject: CN=69c3476a-5e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:f4:3f:cc:0e:d0:33:dc:b3:65:7b:ff:9a:
da:c8:df:d5:73:a9:25:d4:1e:42:de:2e:f2:10:9e:
b3:c2:49:41:f2:ab:6a:46:b2:2b:6d:65:44:4a:12:
99:c3:9b:6d:fe:a8:96:2f:27:57:f9:52:9f:7b:55:
3d:99:25:1c:75:9d:b8:b1:79:08:d0:ca:48:a0:d3:
6a:58:c9:aa:c0:b3:08:f7:2c:63:64:e9:8b:34:6f:
83:c8:0a:c0:f0:34:d8:4e:9d:f3:c4:c4:f8:af:26:
67:22:4a:9d:c3:bc:ea:50:89:4f:3f:c6:f4:67:87:
4f:16:2e:0e:44:b5:0d:5c:74:c8:98:2a:7f:67:01:
44:9c:14:75:ff:7e:ed:f3:97:5c:08:c2:77:24:08:
11:9f:2b:7c:bf:0c:b5:28:3d:54:d1:54:86:c5:2a:
4b:5b:4a:e1:6f:16:8f:ce:6f:73:42:3f:9c:bf:d8:
66:12:1c:fd:30:67:55:13:82:9f:68:a3:62:a7:a9:
79:27:ac:18:c5:72:66:14:2d:c1:03:21:3c:aa:12:
3e:2e:a1:77:7a:d1:4a:be:a7:6d:2b:1f:a3:07:93:
d5:f2:a9:a6:cf:43:98:63:10:38:5c:75:0a:c4:75:
b0:50:3d:86:18:fb:90:96:41:ef:89:ea:3a:de:33:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EF:07:DB:E1:1E:BC:09:C9:B5:E5:A7:CC:AB:2D:DD:79:25:9E:04
X509v3 Authority Key Identifier:
keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:d2:19:82:5a:4d:2f:1b:0a:84:ca:8b:38:7a:58:00:cf:
90:1b:f0:1f:c7:0c:46:2b:9f:c0:25:b7:d2:3b:cc:ed:a9:af:
1d:25:60:32:30:26:de:61:eb:f2:54:29:a5:7a:b5:4e:88:75:
74:34:7b:ce:66:1d:a0:bd:40:a9:57:1e:14:0b:90:b5:ed:a9:
af:1d:8a:7f:16:d9:89:45:21:37:e2:0f:f0:60:3f:04:d1:2b:
eb:c1:fb:cc:94:f6:f4:02:88:db:d9:a7:7c:b2:88:e4:3d:38:
0f:17:14:a8:0b:c8:c3:99:78:4c:57:72:02:5f:e7:08:fc:fa:
91:60:2b:5f:57:b4:d1:b5:1d:0b:eb:84:3b:09:4e:6b:70:94:
b3:82:11:e9:99:80:af:2e:63:c5:a5:fa:58:e4:3c:38:3a:4b:
b5:40:47:8f:71:9f:95:d2:18:a7:bb:c7:90:d3:d1:e5:15:d8:
a5:fe:cc:ee:c2:83:a5:0f:cb:25:13:2a:97:4e:a5:14:87:37:
74:40:21:04:28:72:b0:18:0c:d9:a0:45:d8:ab:cb:21:71:6f:
e7:ef:c8:3b:2c:71:c6:45:5b:cb:73:d6:41:63:10:b6:8b:f6:
b9:f0:11:cd:58:87:43:86:85:ab:8c:eb:e6:62:39:41:d9:41:
69:7e:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:57 2026 by rpki-client