
$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json)
Hash identifier: QAtq5L0wnvHghFhSC6/m4qHdGh3HzAsRcBct5lcUY54=
Subject key identifier: C9:61:26:8C:13:71:BE:7A:6A:77:1D:86:DF:70:94:E7:B6:F5:1C:0A
Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Certificate serial: 2343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
Manifest number: 230F
Signing time: Mon 20 Jul 2026 15:54:56 +0000
Manifest this update: Mon 20 Jul 2026 15:54:56 +0000
Manifest next update: Mon 27 Jul 2026 15:54:56 +0000
Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: 1S9L1dihu2zwhCtq0Y5SpaBgh3UKfA8C99+lVgtEDZY=)
2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: vG/5CBup8bwvo9IJijCwtmm7X5EaDb/8G9msczvTawM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9027 (0x2343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Validity
Not Before: Jul 20 15:54:56 2026 GMT
Not After : Jul 27 15:54:56 2026 GMT
Subject: CN=6a5e44d0-59e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:9a:85:aa:14:23:14:2e:15:e3:df:ad:32:
e5:99:98:f6:37:20:31:de:c1:15:6d:90:f5:a0:c5:
65:95:65:67:3e:c0:6c:68:30:22:94:fd:15:c8:eb:
e3:ab:f9:43:6d:db:4d:b2:bf:f0:72:cd:ec:35:ee:
25:32:43:71:d8:4b:86:00:7d:c5:d1:f9:ea:ec:c0:
9f:19:17:43:b1:6c:5f:eb:9c:84:28:af:5e:be:33:
69:9e:98:bd:bb:c1:4b:83:f4:a1:28:dd:c7:a6:20:
e5:70:dd:95:df:52:99:d1:d5:66:c9:ba:41:2f:65:
57:da:59:d4:0e:ad:7a:67:c1:96:4d:52:e7:ef:f5:
2b:9b:b4:c6:c6:45:61:dd:2d:a8:99:df:f3:91:c1:
1d:ed:7f:51:ab:88:c7:0a:f1:06:7a:9f:9c:2d:4d:
e7:d0:6d:4d:c8:65:50:a9:87:a9:f7:ee:6b:c0:ae:
f4:2a:3e:56:be:a4:37:c8:45:5a:f6:37:94:c8:77:
4d:f9:9d:ae:22:06:cc:71:93:97:7d:d3:3c:14:57:
21:f0:9e:2d:d4:0f:79:31:21:6e:37:ae:80:f2:d7:
0f:47:60:6b:6e:d8:44:ee:9f:90:f7:89:f8:6b:99:
36:c3:9c:41:63:68:7c:13:27:8c:f1:ed:6a:98:e1:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:26:8C:13:71:BE:7A:6A:77:1D:86:DF:70:94:E7:B6:F5:1C:0A
X509v3 Authority Key Identifier:
keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e5:a4:84:50:1c:4b:68:da:c4:0a:c4:84:95:3e:e2:88:38:
72:1a:21:e4:90:18:de:c1:fe:ba:5a:00:27:82:e5:4a:27:80:
39:5a:97:8c:97:e0:90:bd:55:87:25:e2:80:30:82:a2:84:ab:
92:86:ee:61:2e:2f:bb:73:5b:30:24:76:84:43:d7:fc:44:46:
e5:1a:2e:7a:ce:1a:59:21:55:4c:62:83:34:49:68:99:f8:30:
e5:20:a6:a5:bb:78:93:f2:b5:92:06:b0:1d:be:66:62:cd:66:
33:3a:fa:4b:32:8e:f8:f0:ae:a1:61:da:c2:11:af:97:ef:cc:
3d:70:6a:86:ad:d1:75:f6:83:60:c6:eb:a6:f4:43:25:05:ad:
02:d2:e9:42:74:15:0d:c5:40:96:0a:a0:5f:be:5d:40:41:d2:
1a:68:9a:43:1c:87:7a:b7:d5:99:71:1a:5e:b1:82:39:ed:58:
a8:25:bc:d7:64:db:8a:1f:9e:58:ea:1a:94:e2:75:40:4f:a8:
73:24:2e:73:ec:b8:29:9d:c5:de:bf:42:7a:83:0f:0d:ce:f1:
3b:63:a1:71:28:8e:2d:29:74:43:21:ad:32:a5:55:af:f4:9c:
12:4f:a6:bc:d1:ba:e4:7e:fc:e1:97:47:55:8e:27:d9:41:90:
a8:1d:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:10:50 2026 by rpki-client