
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json)
Hash identifier: 2CljQTOkO9wzhLx176XXkVEa/AQbHt226CK4SIP4HYc=
Subject key identifier: E3:7F:A7:A6:44:D1:D9:19:45:06:1C:96:67:1C:60:E4:5D:6C:96:E3
Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
Manifest number: 06C7
Signing time: Thu 26 Mar 2026 22:07:35 +0000
Manifest this update: Thu 26 Mar 2026 22:07:35 +0000
Manifest next update: Thu 02 Apr 2026 22:07:35 +0000
Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: Xst4wufj+QejL3mpyTqpOwAAf4gsq5pTmHselN2sZcg=)
2: 2F320256981611EB904AF150C4F9AE02.roa (hash: kVGS0pERj+ehgp3eCMO0bHsXxIKn5tT9aw6XzPuGGIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl
rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F
Validity
Not Before: Mar 26 22:07:35 2026 GMT
Not After : Apr 2 22:07:35 2026 GMT
Subject: CN=69c5ae27-0570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:17:28:43:67:5f:ca:c7:0f:16:3c:8f:d6:
02:d5:28:c2:96:ba:07:ff:aa:d8:f2:fe:5e:f5:16:
21:e7:fa:25:52:46:06:17:aa:ef:06:6e:5f:3e:e1:
f7:66:f0:b6:b7:c3:76:4a:d2:c1:9f:f6:49:0b:88:
09:22:3e:4c:ad:60:b3:77:ea:62:56:2b:57:c9:28:
33:3a:52:41:6e:71:a5:f1:d8:61:b1:fb:43:46:ab:
74:3c:d6:9e:99:03:22:27:33:ed:4e:ee:fa:a1:b1:
29:3e:1d:01:85:87:06:d8:f1:e3:27:43:bf:50:6a:
7b:ae:23:54:68:f5:c2:c7:ee:7d:d1:f1:4d:7e:82:
34:bb:73:6e:65:c8:21:e0:c1:89:63:41:54:4a:53:
4e:6d:c0:61:4a:fa:42:88:0a:3d:e8:8e:d2:1b:f7:
0f:7d:9b:d8:da:6a:43:fc:30:20:05:b2:b9:9d:c5:
69:6d:e9:93:7c:4f:b3:bc:75:b0:6f:36:4e:64:a0:
90:d2:7d:77:be:ba:99:c7:fe:87:89:c1:de:c8:61:
10:34:d6:5c:f6:85:ba:67:8d:cc:c6:51:36:cc:55:
e8:b1:69:7a:a1:1b:50:11:6f:9d:c7:6c:bd:8d:e0:
6b:05:95:3b:53:46:94:6a:74:28:d2:8d:ee:bf:5a:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:A7:A6:44:D1:D9:19:45:06:1C:96:67:1C:60:E4:5D:6C:96:E3
X509v3 Authority Key Identifier:
keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d6:d2:2a:59:3a:79:4d:70:0a:3b:17:25:00:e1:eb:79:28:
00:54:58:c8:d6:ee:33:8f:93:b0:e6:82:5e:29:a1:c4:d1:41:
5d:a9:5e:9f:fa:d9:65:d2:c7:e3:71:07:8e:62:5c:1e:a6:bf:
6f:69:f9:45:c5:95:39:b3:4d:2a:d6:25:a9:bf:51:b9:6b:ef:
d9:78:da:dd:36:a8:9d:4a:89:a5:21:81:9b:b1:eb:c8:d4:e0:
75:be:f1:09:84:b8:b2:6e:d9:c1:29:d6:8a:81:4a:a6:f5:58:
55:34:67:1d:b2:ae:0a:57:48:a6:d9:e4:82:19:86:74:98:5a:
e5:87:08:88:19:4c:43:72:5d:1f:f9:bd:09:80:9e:5c:88:e1:
94:23:07:46:24:c5:aa:ee:0d:42:b5:ee:1b:5a:e5:5c:c4:3b:
a1:95:e4:67:24:e7:ba:5c:41:a7:c6:03:cf:4c:2c:5d:9f:aa:
01:7f:98:1b:76:cc:1f:9b:f7:ea:47:30:08:2f:63:a0:2d:61:
76:f1:60:15:75:00:9c:87:f4:8e:8c:30:ab:0f:67:9d:6e:17:
f1:3f:a4:b7:f3:48:e5:9f:e0:61:f4:71:32:49:08:5f:b3:3a:
2a:78:04:55:1a:92:3b:bf:cb:70:b3:b9:6f:42:a7:6e:5f:33:
7a:ce:13:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1
Rjk1RDMwOUYwHhcNMjYwMzI2MjIwNzM1WhcNMjYwNDAyMjIwNzM1WjAYMRYwFAYD
VQQDEw02OWM1YWUyNy0wNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn+UXKENnX8rHDxY8j9YC1SjClroH/6rY8v5e9RYh5/olUkYGF6rvBm5fPuH3
ZvC2t8N2StLBn/ZJC4gJIj5MrWCzd+piVitXySgzOlJBbnGl8dhhsftDRqt0PNae
mQMiJzPtTu76obEpPh0BhYcG2PHjJ0O/UGp7riNUaPXCx+590fFNfoI0u3NuZcgh
4MGJY0FUSlNObcBhSvpCiAo96I7SG/cPfZvY2mpD/DAgBbK5ncVpbemTfE+zvHWw
bzZOZKCQ0n13vrqZx/6HicHeyGEQNNZc9oW6Z43MxlE2zFXosWl6oRtQEW+dx2y9
jeBrBZU7U0aUanQo0o3uv1phWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFON/p6ZE
0dkZRQYclmccYORdbJbjMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4
MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Rjg0Ri9ERDQ4N0E1Qzk4MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3
emVNNEt6dTJrU1pmbGRNSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ9bSKlk6eU1wCjsXJQDh63koAFRYyNbuM4+TsOaCXimhxNFBXalen/rZZdLH
43EHjmJcHqa/b2n5RcWVObNNKtYlqb9RuWvv2Xja3TaonUqJpSGBm7HryNTgdb7x
CYS4sm7ZwSnWioFKpvVYVTRnHbKuCldIptnkghmGdJha5YcIiBlMQ3JdH/m9CYCe
XIjhlCMHRiTFqu4NQrXuG1rlXMQ7oZXkZyTnulxBp8YDz0wsXZ+qAX+YG3bMH5v3
6kcwCC9joC1hdvFgFXUAnIf0jowwqw9nnW4X8T+kt/NI5Z/gYfRxMkkIX7M6KngE
VRqSO7/LcLO5b0Knbl8zes4Twg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:18 2026 by rpki-client