
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier: /b9WAYcsLgHaIGMd1l1AT1PY0UhwqMI2oc8VEm5diPA=
Subject key identifier: 61:63:BE:63:ED:1F:35:3C:9E:57:C6:DA:22:B4:F0:8F:4C:8B:6F:8B
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 07F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number: 07C5
Signing time: Tue 18 Aug 2026 21:50:57 +0000
Manifest this update: Tue 18 Aug 2026 21:50:56 +0000
Manifest next update: Tue 25 Aug 2026 21:50:56 +0000
Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: /fEnNvjgLVzV4LLR3Bhouae5eeYi5W995lJ+bKktSmw=)
2: C707808A7C0211F1B99BE3648FA30FBC.roa (hash: 9ssE+0/Wd9/Zy6emzy+4Q/4vapOHX+2nKdVogJqzems=)
3: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0=)
4: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: 0sgsytXNSBVA8tI+B+np2QJiF5EYk7ItL5UWLy6dAWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Aug 18 21:50:56 2026 GMT
Not After : Aug 25 21:50:56 2026 GMT
Subject: CN=6a84d3c0-18f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:63:2e:52:ec:46:6d:10:dc:1c:52:1d:cf:
da:71:d2:09:01:cb:9b:54:98:8d:ad:13:51:df:67:
e2:b8:b4:c7:d1:25:75:23:cf:d1:bc:22:72:ab:48:
e1:54:1b:68:eb:6c:8a:ec:b4:a9:6f:cb:4c:7d:b5:
08:c4:17:34:79:3c:8f:d2:b7:3a:65:21:89:84:d6:
4a:48:cb:d9:54:af:37:9c:3c:69:a2:29:19:71:d2:
0e:39:4a:72:c6:5a:84:f2:8b:8c:48:69:31:5f:72:
8a:a7:de:ac:e5:8b:d9:a9:63:f2:f1:fc:7a:17:c4:
5b:df:72:42:73:ae:4c:0a:bd:49:62:f3:f9:85:67:
d6:82:63:a5:08:b4:30:0d:e7:bd:75:1d:78:ae:74:
ec:51:fe:7a:b5:20:3f:d1:9c:02:16:11:f3:39:5a:
62:ec:15:2a:00:7f:e7:0c:de:ec:98:c1:46:e6:b5:
9d:0a:66:40:6e:b6:3d:09:e3:e7:3b:ce:a9:60:39:
e5:91:47:37:b3:ff:9f:b3:81:91:d1:95:44:a5:4e:
7d:ab:ae:44:ef:a0:94:78:5d:af:2a:ba:f1:a9:19:
1e:b7:ec:dc:a3:3e:15:24:05:1f:30:cb:a3:e2:6e:
0f:d9:18:14:a2:3f:22:1e:b3:7f:f9:7d:fd:ff:f3:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:BE:63:ED:1F:35:3C:9E:57:C6:DA:22:B4:F0:8F:4C:8B:6F:8B
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:be:9e:5a:35:9f:a4:92:5e:e4:ee:d7:be:d9:f6:97:5c:58:
d2:41:98:00:cd:e0:20:22:a4:ae:e5:5f:be:15:75:1b:4b:ef:
a8:84:b0:cd:d6:88:c8:bd:04:12:76:07:c1:87:3e:2f:91:0d:
f2:7f:de:90:eb:71:fa:b7:f6:64:75:24:a6:ed:64:9d:79:20:
3d:8b:56:29:73:4d:d4:36:0f:13:6d:a9:54:97:2a:7d:9a:ee:
57:b3:3b:5b:b8:f8:11:5f:58:e7:03:54:4c:b1:15:d9:28:8d:
0b:ad:39:9a:ae:df:92:5e:4b:65:14:75:47:9e:01:d9:21:1e:
78:d6:0e:eb:a7:b8:40:7a:59:5c:e9:ca:bb:e2:ef:df:a1:9b:
ce:9f:42:e5:0d:3b:5b:5b:2d:16:f6:d1:6b:b4:c6:8b:0e:e4:
b7:00:78:d8:36:80:0c:7a:9d:a3:e2:98:31:6d:ea:3f:fc:3e:
b1:70:68:3c:44:70:61:fe:30:bc:b4:f6:f9:67:a5:27:bf:c2:
85:89:23:fb:00:f4:c4:46:5b:78:18:87:32:4a:06:44:d1:60:
c0:55:14:ee:80:84:cc:3e:e2:27:f9:60:84:83:15:ce:60:da:
97:02:71:41:99:db:6e:56:0f:46:37:ad:af:ea:33:b2:fa:1d:
db:8c:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:56 2026 by rpki-client