
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json)
Hash identifier: ydM0PCW1HFy64xwT9hPdz9QAprb9LWNLJAr6Xdl04DE=
Subject key identifier: 1C:DA:FA:92:46:5D:85:D2:BC:15:A1:4F:28:2F:09:BD:DF:A7:E2:B1
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
Manifest number: 0256
Signing time: Thu 03 Sep 2026 02:25:01 +0000
Manifest this update: Thu 03 Sep 2026 02:25:00 +0000
Manifest next update: Thu 10 Sep 2026 02:25:00 +0000
Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: 6Gh+LTabKgSkOEEtlC54Rz15qKR9Qsr6j20Ft+thF8Y=)
2: B0673A76A03F11F1B2499D913A11F970.roa (hash: QbAiCgDaIA+i20x48YtNqs+AcxSkyOGToaGMFSA1seE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Validity
Not Before: Sep 3 02:25:00 2026 GMT
Not After : Sep 10 02:25:00 2026 GMT
Subject: CN=6a98da7d-a577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:f0:1e:70:a8:c0:2a:c3:66:7b:7f:78:01:
c6:cd:32:3e:01:b4:b5:23:03:35:69:57:bf:38:43:
a8:81:0a:87:e3:02:90:30:a8:76:ff:ba:5a:84:27:
29:2a:0e:ae:57:69:fe:cf:58:b2:d0:3b:ad:c6:fc:
4a:ad:ca:8f:ea:86:ff:cf:c0:f0:f2:e2:84:81:85:
60:95:67:8c:63:37:90:67:bd:92:17:c4:75:10:fd:
4f:e8:c0:3a:6d:d8:02:ef:2c:22:82:02:1b:b7:d0:
21:33:2c:d8:0c:b4:7e:ac:0b:76:be:0e:16:cc:55:
e8:a1:de:10:21:ed:8a:76:77:26:3f:60:0f:d8:91:
dd:72:20:9f:25:72:a9:8b:ac:97:3e:8f:07:60:f0:
79:d1:56:69:57:8d:a0:f8:70:fe:b1:18:76:1d:ca:
4f:2a:5c:cf:b3:5f:77:97:1b:ac:30:ac:37:0f:09:
d2:ab:3e:b2:fa:43:2e:3c:32:87:3a:05:4f:5e:7d:
fc:d0:dc:8b:fa:4d:bc:f1:bb:3f:b0:6c:45:93:77:
ee:15:50:b4:32:45:bf:c3:50:32:ce:08:f7:a6:30:
a6:87:e2:1c:d3:aa:3d:88:6f:f0:98:bf:d0:e9:3b:
8f:bb:59:fa:52:39:f0:ce:60:a2:05:67:1a:34:e2:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DA:FA:92:46:5D:85:D2:BC:15:A1:4F:28:2F:09:BD:DF:A7:E2:B1
X509v3 Authority Key Identifier:
keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:96:ea:19:1f:d0:b3:98:22:bc:ef:ce:1e:39:a7:83:be:
75:48:31:4d:ae:6c:69:1d:6f:45:18:ba:6a:8d:bc:79:87:b0:
11:f9:10:43:8b:dd:13:7a:8c:f5:bc:64:86:23:e9:4d:cc:b7:
98:34:31:74:27:40:e3:76:fc:3d:e1:21:74:dc:b4:6d:81:66:
8c:80:fb:5a:ec:08:5c:e6:9b:d0:b9:d5:e5:8b:79:b9:30:4c:
07:86:05:6f:8d:d7:7f:2b:e4:41:3b:63:f0:0b:e8:65:61:ed:
e8:55:74:67:65:24:7a:0d:9b:db:6c:96:91:23:b0:28:5d:54:
66:b4:8e:fc:8c:00:e1:f0:ac:f0:6d:1a:bf:c8:d8:9a:78:b5:
af:ef:da:06:3a:c5:21:1f:4f:28:09:e7:0c:e3:c0:f7:fd:12:
db:0f:3d:54:8b:e4:67:f5:0a:bf:58:41:69:f5:ed:1d:c6:f4:
3c:15:ee:5a:a3:1c:b4:3a:0d:a4:f5:96:a4:3a:f6:6c:86:04:
5f:d0:4d:e9:b3:bb:f7:98:73:72:3c:a5:1e:e4:c9:59:02:fe:
66:e8:1c:67:ed:4d:6e:ad:d8:1e:c8:30:34:55:6b:47:89:a8:
ac:d2:e1:a4:a2:15:21:e3:c4:2d:88:65:a1:6d:14:12:b1:1f:
41:9c:ac:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF
ODhBRjNDNkMwHhcNMjYwOTAzMDIyNTAwWhcNMjYwOTEwMDIyNTAwWjAYMRYwFAYD
VQQDEw02YTk4ZGE3ZC1hNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpnwHnCowCrDZnt/eAHGzTI+AbS1IwM1aVe/OEOogQqH4wKQMKh2/7pahCcp
Kg6uV2n+z1iy0DutxvxKrcqP6ob/z8Dw8uKEgYVglWeMYzeQZ72SF8R1EP1P6MA6
bdgC7ywiggIbt9AhMyzYDLR+rAt2vg4WzFXood4QIe2KdncmP2AP2JHdciCfJXKp
i6yXPo8HYPB50VZpV42g+HD+sRh2HcpPKlzPs193lxusMKw3DwnSqz6y+kMuPDKH
OgVPXn380NyL+k288bs/sGxFk3fuFVC0MkW/w1Ayzgj3pjCmh+Ic06o9iG/wmL/Q
6TuPu1n6UjnwzmCiBWcaNOLGLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBza+pJG
XYXSvBWhTygvCb3fp+KxMB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz
RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm
WklZdENXeUV5VGpvaXZQR3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIc2W6hkf0LOYIrzvzh45p4O+dUgxTa5saR1vRRi6ao28eYewEfkQQ4vdE3qM
9bxkhiPpTcy3mDQxdCdA43b8PeEhdNy0bYFmjID7WuwIXOab0LnV5Yt5uTBMB4YF
b43XfyvkQTtj8AvoZWHt6FV0Z2Ukeg2b22yWkSOwKF1UZrSO/IwA4fCs8G0av8jY
mni1r+/aBjrFIR9PKAnnDOPA9/0S2w89VIvkZ/UKv1hBafXtHcb0PBXuWqMctDoN
pPWWpDr2bIYEX9BN6bO795hzcjylHuTJWQL+ZugcZ+1Nbq3YHsgwNFVrR4morNLh
pKIVIePELYhloW0UErEfQZyspQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:30 2026 by rpki-client