
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: mLblQd5Z8jNjwKAt5LT2v55q6Rs62FMIE6KhUaGzr3o=
Subject key identifier: CD:CC:C0:0F:E9:3E:FB:20:A1:3A:2D:E0:22:92:3C:31:6C:F5:D9:D1
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 0268
Signing time: Thu 23 Jul 2026 04:08:18 +0000
Manifest this update: Thu 23 Jul 2026 04:08:18 +0000
Manifest next update: Thu 30 Jul 2026 04:08:18 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: NHe6a2uDDOlhoO5PJa/u2VuPTJDfevylE0RjDQrvWwc=)
2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
3: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
4: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
5: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
6: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
7: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
8: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
9: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
10: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Jul 23 04:08:18 2026 GMT
Not After : Jul 30 04:08:18 2026 GMT
Subject: CN=6a6193b2-09fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:6e:8d:40:ad:76:3d:d1:f5:f7:0d:34:e6:
ab:aa:cd:bf:27:2b:c6:b8:b0:e8:04:d6:6e:05:c1:
c4:c0:0d:2a:d1:e3:8f:93:65:32:db:48:7e:80:2e:
f0:b5:01:8e:6d:0c:d2:49:51:05:50:29:ba:d4:79:
28:11:31:76:cb:5d:22:54:07:a9:57:3c:0f:d9:9d:
9e:fb:57:ec:68:ff:dd:bb:4e:f2:d0:55:73:ca:44:
17:50:59:f6:cd:2d:16:4c:4c:22:d7:8f:a8:6b:bb:
62:d8:4e:d7:90:2e:aa:e8:ec:33:c3:26:83:a0:aa:
9c:20:48:60:1a:89:44:79:49:7d:3f:ba:33:89:30:
0c:07:7a:69:12:c6:f7:bf:44:eb:8d:75:15:e2:de:
64:66:39:bd:8e:9d:9a:6e:ce:3d:ee:b1:4a:21:25:
47:ff:5d:11:79:6e:fc:fa:f9:a5:02:4d:d4:18:33:
15:87:a7:57:29:f1:ae:68:ba:69:c8:83:84:a2:d1:
83:3d:04:5a:e3:dd:71:e2:4e:33:75:a1:0e:05:c5:
4f:a8:a8:89:1a:9e:1c:0e:35:36:2c:51:00:8d:50:
db:9d:ee:f6:44:05:d3:d0:6f:36:af:8d:93:1f:2f:
9a:4b:6f:46:28:1d:50:f9:22:2e:c7:69:84:75:f1:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:C0:0F:E9:3E:FB:20:A1:3A:2D:E0:22:92:3C:31:6C:F5:D9:D1
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6f:34:9a:7f:2b:68:2e:e5:74:1c:70:8f:6b:f8:01:1a:84:
72:c1:1b:76:51:de:1f:78:92:bd:6f:d9:28:50:fe:01:ab:75:
3a:f2:e5:11:bd:73:51:89:94:b0:71:1e:02:76:a5:cb:8b:66:
43:31:4d:e0:29:12:c5:86:4d:06:f8:6b:80:2a:7c:94:e3:f9:
ad:06:9e:da:06:74:b3:2b:ee:bc:22:ac:ae:4a:75:d3:a4:a0:
b9:eb:c0:af:a7:b4:fd:45:09:7a:a5:dc:22:2c:6a:6c:57:31:
dc:53:67:e8:c5:8f:44:29:fc:18:95:2d:a0:56:9c:8c:66:9c:
dc:a4:0f:0c:f0:1e:a6:4d:fc:ef:80:d4:44:2a:de:8a:b3:c4:
14:cd:41:12:3e:11:8d:c7:af:4b:49:ae:ae:a4:eb:4f:7a:db:
fb:ed:84:15:c6:02:61:36:1c:96:7b:5c:88:00:4d:18:8b:0a:
6a:9b:43:45:2f:30:5c:d3:ba:61:99:a5:44:0b:c3:ef:68:e1:
94:4c:53:f6:9c:f0:4c:19:10:9e:4f:f1:2c:bc:df:35:49:dd:
c8:c6:3e:58:90:77:10:27:29:40:15:6b:8a:0e:8f:bc:0b:c1:
f7:c3:87:4b:84:b6:29:2f:3c:9d:75:1f:9b:e6:92:cd:db:45:
41:3f:ac:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjYwNzIzMDQwODE4WhcNMjYwNzMwMDQwODE4WjAYMRYwFAYD
VQQDEw02YTYxOTNiMi0wOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApPZujUCtdj3R9fcNNOarqs2/JyvGuLDoBNZuBcHEwA0q0eOPk2Uy20h+gC7w
tQGObQzSSVEFUCm61HkoETF2y10iVAepVzwP2Z2e+1fsaP/du07y0FVzykQXUFn2
zS0WTEwi14+oa7ti2E7XkC6q6OwzwyaDoKqcIEhgGolEeUl9P7oziTAMB3ppEsb3
v0TrjXUV4t5kZjm9jp2abs497rFKISVH/10ReW78+vmlAk3UGDMVh6dXKfGuaLpp
yIOEotGDPQRa491x4k4zdaEOBcVPqKiJGp4cDjU2LFEAjVDbne72RAXT0G82r42T
Hy+aS29GKB1Q+SIux2mEdfFymwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3MwA/p
PvsgoTot4CKSPDFs9dnRMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw
SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbm80mn8raC7ldBxwj2v4ARqEcsEbdlHeH3iSvW/ZKFD+Aat1OvLlEb1zUYmU
sHEeAnaly4tmQzFN4CkSxYZNBvhrgCp8lOP5rQae2gZ0syvuvCKsrkp106SguevA
r6e0/UUJeqXcIixqbFcx3FNn6MWPRCn8GJUtoFacjGac3KQPDPAepk3874DURCre
irPEFM1BEj4RjcevS0murqTrT3rb++2EFcYCYTYclntciABNGIsKaptDRS8wXNO6
YZmlRAvD72jhlExT9pzwTBkQnk/xLLzfNUndyMY+WJB3ECcpQBVrig6PvAvB98OH
S4S2KS88nXUfm+aSzdtFQT+sBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:58:20 2026 by rpki-client