
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
File: CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json)
Hash identifier: S+TfFrJ4FmrT2QbYsSE6nAWQIeULkGFrE6q8026wHRg=
Subject key identifier: 27:43:B7:1C:FB:82:51:5C:68:D7:9D:42:0A:DD:CD:5D:5A:B1:6E:05
Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
Manifest number: 0225
Signing time: Wed 25 Mar 2026 02:06:17 +0000
Manifest this update: Wed 25 Mar 2026 02:06:16 +0000
Manifest next update: Wed 01 Apr 2026 02:06:16 +0000
Files and hashes: 1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: E5VwUrhRKelb/JQp1QecGJsozAF2j6CrB3j+m187WVU=)
2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: uBvCvr/fH3fM04LrLo8yLQnVCBWXatqmkz7SGocGSOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl
rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Validity
Not Before: Mar 25 02:06:16 2026 GMT
Not After : Apr 1 02:06:16 2026 GMT
Subject: CN=69c34319-c020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:fd:1d:ee:a7:bc:2d:85:a5:6e:8a:30:5a:
21:30:18:ef:07:e7:b1:ab:10:7c:b6:1c:3e:a1:0b:
fd:56:a6:da:67:a1:7f:a7:4a:fa:8e:2b:75:dd:a6:
e3:c8:a0:55:57:6d:ae:8e:3e:43:8a:61:95:64:75:
5c:95:90:1c:ca:ce:7f:54:7b:de:8f:85:25:7c:50:
6c:72:c1:6e:16:7c:c8:ac:2b:d4:8e:94:0b:4e:50:
9e:a4:bc:9a:90:60:79:8d:cc:3f:ce:ae:93:9b:b9:
81:14:81:cc:84:14:c3:fb:d5:58:eb:74:76:06:fb:
54:e5:40:4c:57:af:2e:8b:1f:d6:6f:4e:12:7f:2f:
b4:2c:c3:0b:af:22:d3:64:ed:6c:8c:2d:7f:24:c6:
5c:4b:7a:bf:60:19:04:71:4f:f2:70:2e:0e:69:ff:
e4:cd:6f:e6:09:79:f4:9f:b4:0e:d8:96:93:01:07:
72:bf:e6:b5:bf:90:d5:88:f5:5e:d4:e9:b4:d5:87:
79:0b:80:e7:63:1a:5c:43:04:3c:da:87:f2:3f:90:
65:9d:9b:e4:6c:77:d6:98:63:0f:f8:7e:db:92:84:
c8:7c:52:d8:80:c7:c9:e6:3b:d5:18:a4:85:ab:d9:
80:22:b7:70:dd:88:60:47:a0:3b:6c:a0:9c:ed:51:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:B7:1C:FB:82:51:5C:68:D7:9D:42:0A:DD:CD:5D:5A:B1:6E:05
X509v3 Authority Key Identifier:
keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:a0:53:e6:92:66:1b:70:0b:fa:07:f2:b7:af:40:87:d5:c2:
af:bb:61:23:8a:10:e6:4e:34:70:41:2a:7a:71:87:5d:26:39:
19:46:37:52:53:56:c4:03:0b:94:2f:b7:83:c5:50:ca:32:48:
a2:b1:c5:e8:47:fe:67:f5:1c:10:28:52:bb:33:14:f5:c3:dc:
db:13:d3:e6:f9:ab:31:4e:d2:78:fb:8a:be:03:e2:9c:08:b8:
0b:f0:ea:86:d8:94:7d:f7:c1:e1:5b:e1:7f:cc:2d:08:80:25:
fc:b5:4b:03:80:00:9f:f4:e2:1e:65:2c:d1:f8:95:38:4a:21:
b1:34:ac:38:01:d3:81:95:a8:39:58:78:76:4a:2f:1e:3a:3f:
58:50:63:0c:3a:61:ce:f2:30:91:f5:f8:8d:09:2f:24:e0:79:
4c:83:f0:d4:1f:75:0b:13:9f:e8:fa:d2:bc:80:a4:f8:87:7e:
9d:f8:be:8a:09:2f:96:8a:ff:f4:63:2d:5d:65:08:09:b5:94:
62:61:20:f7:be:2e:57:92:90:02:fa:a3:c9:27:d1:7b:b6:ba:
97:32:2a:da:06:f1:f3:84:f8:26:b7:d8:84:a1:dc:c7:fd:79:
dc:c8:fa:df:28:92:b7:cb:a8:04:bc:21:a8:24:e0:e0:cc:e1:
5b:2f:79:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5
NzIwNTUwRDEwHhcNMjYwMzI1MDIwNjE2WhcNMjYwNDAxMDIwNjE2WjAYMRYwFAYD
VQQDEw02OWMzNDMxOS1jMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/n9He6nvC2FpW6KMFohMBjvB+exqxB8thw+oQv9VqbaZ6F/p0r6jit13abj
yKBVV22ujj5DimGVZHVclZAcys5/VHvej4UlfFBscsFuFnzIrCvUjpQLTlCepLya
kGB5jcw/zq6Tm7mBFIHMhBTD+9VY63R2BvtU5UBMV68uix/Wb04Sfy+0LMMLryLT
ZO1sjC1/JMZcS3q/YBkEcU/ycC4Oaf/kzW/mCXn0n7QO2JaTAQdyv+a1v5DViPVe
1Om01Yd5C4DnYxpcQwQ82ofyP5BlnZvkbHfWmGMP+H7bkoTIfFLYgMfJ5jvVGKSF
q9mAIrdw3YhgR6A7bKCc7VEqBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdDtxz7
glFcaNedQgrdzV1asW4FMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF
QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzkzRi82MEE4Rjg4Q0RFQUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJi
OTFjXzk2YnVDbnFYSUZVTkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFaBT5pJmG3AL+gfyt69Ah9XCr7thI4oQ5k40cEEqenGHXSY5GUY3UlNWxAML
lC+3g8VQyjJIorHF6Ef+Z/UcEChSuzMU9cPc2xPT5vmrMU7SePuKvgPinAi4C/Dq
htiUfffB4Vvhf8wtCIAl/LVLA4AAn/TiHmUs0fiVOEohsTSsOAHTgZWoOVh4dkov
Hjo/WFBjDDphzvIwkfX4jQkvJOB5TIPw1B91CxOf6PrSvICk+Id+nfi+igkvlor/
9GMtXWUICbWUYmEg974uV5KQAvqjySfRe7a6lzIq2gbx84T4JrfYhKHcx/153Mj6
3yiSt8uoBLwhqCTg4MzhWy95BA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:49:09 2026 by rpki-client