
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: JRJ8TMxBV/QehvIacI8EdRObL0ntwv27oTft2OErTpA=
Subject key identifier: 57:47:51:BA:9C:23:6C:BD:8C:00:69:70:D9:53:9B:7D:18:53:A7:CA
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 0288
Signing time: Wed 23 Sep 2026 02:25:39 +0000
Manifest this update: Wed 23 Sep 2026 02:25:39 +0000
Manifest next update: Wed 30 Sep 2026 02:25:39 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: hxCOukIqcUUHbFjeRP9aPwyG0dI+PWpsIhotek159tw=)
2: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
3: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
4: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
5: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
6: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
7: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
8: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
9: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
10: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Sep 23 02:25:39 2026 GMT
Not After : Sep 30 02:25:39 2026 GMT
Subject: CN=6ab338a3-6b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d6:d8:6c:8c:f5:d5:06:59:f3:bf:7f:c3:0b:
aa:72:42:85:45:88:03:b3:8f:4a:a2:39:40:7d:c9:
2e:dd:a3:c9:d4:7f:cc:6a:78:52:19:51:4d:f4:fa:
c9:a7:7d:1a:c0:59:c8:c6:40:4b:55:9c:47:2d:b2:
1a:8a:1f:2c:bd:23:8b:31:56:62:02:9c:39:d7:29:
d9:0e:e3:86:61:e5:8b:4a:25:45:e4:5c:82:52:15:
bd:f7:9c:69:9e:c0:86:56:48:33:0c:ea:74:20:6f:
d3:2c:f3:d2:ea:08:92:04:b6:21:91:43:5a:62:21:
2e:0d:60:af:49:2e:a3:d6:27:1c:83:7e:6f:1f:72:
d5:e9:aa:d9:47:f7:c3:6d:56:9e:77:24:66:45:7e:
d8:83:43:b9:6c:85:1e:a2:d3:3e:f5:d1:39:52:7e:
17:01:5e:66:3f:75:cd:cc:d8:78:fe:8f:a3:8c:b7:
95:ca:10:73:39:58:52:cb:d4:bc:bf:73:1f:c9:b9:
82:eb:28:4c:34:4d:5b:76:73:8d:3c:74:ff:e6:df:
76:b3:24:b5:7e:05:32:c2:6a:31:34:d2:72:fb:ad:
78:21:82:3b:f1:9b:8a:5e:b0:52:c6:77:b6:1a:78:
62:c7:dd:fa:23:c6:63:af:cc:de:98:8b:7e:6b:01:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:47:51:BA:9C:23:6C:BD:8C:00:69:70:D9:53:9B:7D:18:53:A7:CA
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:a9:79:3a:f4:3c:c5:2c:bc:ff:ce:e9:fc:cd:51:7c:a0:
37:2d:7d:1e:73:23:b7:75:e4:af:79:ce:c1:d7:d5:2f:e2:00:
24:ee:6f:d4:f1:c4:db:7f:9e:11:f4:a2:a4:d6:ad:6c:ef:70:
04:ce:e8:1a:0f:6c:29:64:66:aa:d5:eb:c4:8c:93:f5:27:9c:
84:f2:d2:62:30:92:75:93:89:e2:0a:e3:6e:1a:7c:de:f5:ab:
cd:3f:b4:38:4d:33:e3:f5:ba:4e:31:d9:95:12:7b:cf:42:cc:
00:d6:03:f3:16:04:f1:6c:08:1f:d3:03:8e:f9:9f:d8:d1:df:
9b:b4:02:13:17:a1:20:08:a4:8c:1b:09:13:2b:05:08:10:c5:
1d:06:5b:d0:b7:16:12:ca:a1:83:3f:18:1e:e0:2e:63:d6:74:
a7:66:e2:35:c7:d8:5f:2b:8e:63:5e:9e:2d:36:15:f7:c5:47:
8f:42:49:29:98:2a:47:5e:06:3a:25:72:14:5e:f4:a4:b1:75:
2d:78:62:79:e3:05:75:b3:5e:65:69:fa:b1:61:a5:be:56:5c:
17:a1:5d:7a:ac:27:6e:2d:14:9a:a4:47:58:39:98:47:95:27:
9f:80:e0:c1:3b:17:8a:54:c9:3f:b8:e5:8f:ec:21:87:bc:27:
e7:6c:d5:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjYwOTIzMDIyNTM5WhcNMjYwOTMwMDIyNTM5WjAYMRYwFAYD
VQQDEw02YWIzMzhhMy02YjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6dbYbIz11QZZ879/wwuqckKFRYgDs49KojlAfcku3aPJ1H/ManhSGVFN9PrJ
p30awFnIxkBLVZxHLbIaih8svSOLMVZiApw51ynZDuOGYeWLSiVF5FyCUhW995xp
nsCGVkgzDOp0IG/TLPPS6giSBLYhkUNaYiEuDWCvSS6j1iccg35vH3LV6arZR/fD
bVaedyRmRX7Yg0O5bIUeotM+9dE5Un4XAV5mP3XNzNh4/o+jjLeVyhBzOVhSy9S8
v3MfybmC6yhMNE1bdnONPHT/5t92syS1fgUywmoxNNJy+614IYI78ZuKXrBSxne2
Gnhix936I8Zjr8zemIt+awHSoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdHUbqc
I2y9jABpcNlTm30YU6fKMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw
SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHSipeTr0PMUsvP/O6fzNUXygNy19HnMjt3Xkr3nOwdfVL+IAJO5v1PHE23+e
EfSipNatbO9wBM7oGg9sKWRmqtXrxIyT9SechPLSYjCSdZOJ4grjbhp83vWrzT+0
OE0z4/W6TjHZlRJ7z0LMANYD8xYE8WwIH9MDjvmf2NHfm7QCExehIAikjBsJEysF
CBDFHQZb0LcWEsqhgz8YHuAuY9Z0p2biNcfYXyuOY16eLTYV98VHj0JJKZgqR14G
OiVyFF70pLF1LXhieeMFdbNeZWn6sWGlvlZcF6Fdeqwnbi0UmqRHWDmYR5Unn4Dg
wTsXilTJP7jlj+whh7wn52zVKw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:16 2026 by rpki-client