
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
File: KUHHFh7UouCbuRyrxEPIzLwDLtg.mft (raw, json)
Hash identifier: PJXXr9tW2j2R4DzOM7k+uyKlU54cFH2rdlxILkXpEsU=
Subject key identifier: 82:0F:CF:38:C2:EC:B5:B1:9D:3A:DB:3C:9E:13:74:8C:0B:CF:9A:62
Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Certificate serial: 357A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
Manifest number: 356B
Signing time: Wed 22 Jul 2026 14:54:17 +0000
Manifest this update: Wed 22 Jul 2026 14:54:16 +0000
Manifest next update: Wed 29 Jul 2026 14:54:16 +0000
Files and hashes: 1: KUHHFh7UouCbuRyrxEPIzLwDLtg.crl (hash: fW4ZTdv27U1yNAI2vgPyok0xEnQKBqWbgrAfurQSAEE=)
2: 62D956E4706B11F1BCF9211474A30FBC.roa (hash: qIR0Cnf/Tw3jmEWlP5g5lhVl5hdbItrkQSAnuy1RWvs=)
3: F5223048791711F195779BF068A30FBC.roa (hash: Ip9KlCOMbvhc6/B4kC7ZdY9+c9TB/U/rlC7Je99Icbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13690 (0x357a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Validity
Not Before: Jul 22 14:54:16 2026 GMT
Not After : Jul 29 14:54:16 2026 GMT
Subject: CN=6a60d998-3025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:ef:5d:be:39:d2:fa:9a:51:f5:b5:6e:65:
d5:45:45:4d:dd:d7:ec:45:5f:5c:0a:17:53:4b:da:
f6:5e:00:89:b9:c9:a8:00:9e:0a:a9:0f:62:27:7e:
41:11:ce:ed:bf:1c:30:5c:f8:47:ca:55:02:24:ff:
cd:89:0d:d5:bd:b1:f4:15:9c:8a:40:5f:af:82:26:
88:5c:44:e7:75:72:fc:e6:99:de:55:06:24:b0:4e:
b8:dd:ff:ac:b1:19:66:d0:a5:60:41:c2:49:3d:c7:
37:27:c8:f2:d0:2a:24:7b:2e:dd:32:a2:75:47:aa:
00:28:10:bd:49:20:df:0b:cc:84:6f:3e:ee:8c:c8:
6b:9e:c5:f3:76:7c:f6:8a:2a:ad:e4:09:90:46:02:
77:61:af:c9:71:96:a4:b4:a4:50:50:61:49:eb:1a:
f3:08:89:b8:c0:3f:c4:94:07:20:a3:5a:3c:f3:4b:
8e:62:bb:70:82:d9:68:02:da:52:c1:bf:de:a8:cb:
bb:d0:54:91:1d:6e:93:38:2a:23:96:b1:4c:78:69:
55:42:ea:33:3a:e4:63:3c:44:22:b1:e6:a4:c6:ee:
34:7b:ed:e6:ad:4e:e1:2c:0b:c7:c3:e3:10:91:87:
03:e6:36:be:d9:4b:6e:c2:29:c3:9e:14:73:f4:53:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:CF:38:C2:EC:B5:B1:9D:3A:DB:3C:9E:13:74:8C:0B:CF:9A:62
X509v3 Authority Key Identifier:
keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fb:77:4a:a1:74:bc:a5:4a:bb:96:ae:df:ac:69:2c:a8:99:
d9:b4:c3:7a:50:49:7f:c0:22:23:16:e6:e7:7f:da:18:90:3b:
4c:ae:b1:65:80:a2:92:e8:96:5c:08:54:4a:cc:79:96:4b:83:
8f:48:ad:58:b6:b7:5b:9d:da:e3:de:b6:1b:fe:34:2b:37:b3:
f0:fc:62:63:a8:25:ae:56:9f:b0:24:64:ec:69:0b:9a:fc:9d:
f3:41:4f:09:78:ff:db:6b:6c:0a:bb:04:58:6b:67:54:c4:14:
05:85:bb:54:8c:2e:a7:92:e8:32:f2:04:ab:65:23:42:8e:e4:
52:05:63:5f:d3:d7:d1:d4:56:4b:b5:f5:9f:27:c8:fa:e7:65:
3d:12:70:99:df:06:19:df:d7:e3:09:03:17:bf:c5:2b:0e:bc:
96:ee:3c:58:e5:d1:a7:32:4e:27:b2:22:09:36:96:7d:f5:11:
71:90:51:7f:fe:ef:bb:68:66:37:cf:af:04:e2:5e:86:48:33:
5c:ab:2f:fe:ad:86:34:dd:70:7f:da:ee:92:a5:e0:d5:81:3c:
ce:14:2d:f7:3c:ac:92:64:fa:c2:36:d3:c6:a0:ae:9d:1e:53:
c3:4c:45:e0:5f:b0:4f:f7:9f:2b:6d:99:12:13:96:1c:ba:49:
db:a2:ec:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:25 2026 by rpki-client