
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: tqYMF5+2/HbVCmeGN2OWNwkHU+p35ZOjEFew4SSx+YU=
Subject key identifier: C8:16:83:DF:B0:4D:C4:D8:85:F5:75:2C:71:C2:93:FD:4F:36:AB:83
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 0270
Signing time: Fri 07 Aug 2026 02:34:15 +0000
Manifest this update: Fri 07 Aug 2026 02:34:15 +0000
Manifest next update: Fri 14 Aug 2026 02:34:15 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: S4vk3A764jxosiXXxlX2fifT8scY4qI7aCzogQB5px0=)
2: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
3: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
4: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
5: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
6: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
7: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
8: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
9: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
10: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 14 Aug 2026 02:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Aug 7 02:34:15 2026 GMT
Not After : Aug 14 02:34:15 2026 GMT
Subject: CN=6a754427-a1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:bd:06:04:7d:89:0b:78:11:43:2f:49:00:
48:d4:b9:18:c2:9f:91:3a:2e:d9:a5:2e:74:61:4b:
65:97:0b:b6:a3:98:7e:0f:ea:0a:44:aa:03:cc:2b:
f4:ad:59:a1:65:fc:7e:5c:67:30:6f:40:ac:17:80:
30:00:90:47:1c:ac:31:28:f1:d5:8a:0e:9e:68:c3:
4f:15:93:7d:52:7f:e4:22:ad:12:70:8f:4f:13:f2:
ed:88:21:4b:b5:ee:10:24:1f:e1:dc:a0:86:55:b0:
2f:5a:fc:a4:3e:f1:ed:8f:67:a5:1e:f1:b2:c9:c6:
e7:72:ca:db:1e:f0:0c:9c:df:78:b0:d7:f0:b6:de:
1e:77:9e:2a:7f:4f:c7:0f:85:57:f6:8a:eb:d8:c2:
db:1b:92:06:5f:14:72:68:df:fa:63:72:4a:92:43:
b7:64:f0:d9:4a:00:29:9a:12:24:08:e5:a3:3a:7c:
4a:52:db:fd:67:70:64:eb:0e:ac:37:a9:be:09:28:
9b:5b:71:80:bc:22:ef:9d:31:2f:2a:66:93:ed:e5:
83:40:35:56:73:a5:2c:97:6c:ba:23:52:3c:d8:d3:
7b:90:08:99:0c:22:69:a5:ba:ad:ce:82:7f:ce:4f:
68:64:93:f6:8e:81:29:46:da:77:8b:b5:22:15:d2:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:83:DF:B0:4D:C4:D8:85:F5:75:2C:71:C2:93:FD:4F:36:AB:83
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:0e:9a:2a:ed:f4:f4:f0:91:13:db:62:cb:74:76:cf:ed:bb:
ff:61:4d:9f:ee:2c:7d:b0:fc:8d:c6:44:f1:46:45:28:77:ff:
e9:f0:47:16:8e:d9:7a:ed:ab:4e:91:12:bc:f5:5f:e4:38:42:
52:25:f0:53:79:0e:41:e4:e4:69:a8:6a:2f:9d:a9:16:3e:6b:
7d:54:0c:e9:6a:f3:13:3c:c6:36:12:36:b7:68:86:d4:a9:20:
ca:da:bc:26:d8:b4:77:7e:d8:5b:5a:bc:ce:b1:e7:76:4b:54:
a7:76:46:e1:ab:7b:ca:a9:ce:ae:3c:78:5e:b7:30:e3:00:56:
38:97:8b:ff:3c:b4:26:3d:29:99:d4:1b:0d:91:be:71:84:10:
95:c7:93:f0:4c:ca:72:02:20:39:fd:6f:a7:40:97:78:0a:a6:
b3:69:51:68:0a:b8:e8:ac:ce:bf:ae:c6:43:b9:c0:f3:aa:82:
0c:39:46:8f:90:f8:9b:2c:ae:41:2d:1b:5a:b3:86:f9:af:26:
e7:2a:ac:88:36:3b:0c:b1:5e:da:81:3f:b9:15:11:5d:63:ba:
41:2e:e5:c9:cb:64:00:67:01:a7:cd:29:58:90:1a:5b:ca:a5:
9f:17:a3:e3:70:50:f4:7f:a0:c3:91:7d:2e:21:b9:ec:be:35:
b9:60:34:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjYwODA3MDIzNDE1WhcNMjYwODE0MDIzNDE1WjAYMRYwFAYD
VQQDEw02YTc1NDQyNy1hMWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjzy9BgR9iQt4EUMvSQBI1LkYwp+ROi7ZpS50YUtllwu2o5h+D+oKRKoDzCv0
rVmhZfx+XGcwb0CsF4AwAJBHHKwxKPHVig6eaMNPFZN9Un/kIq0ScI9PE/LtiCFL
te4QJB/h3KCGVbAvWvykPvHtj2elHvGyycbncsrbHvAMnN94sNfwtt4ed54qf0/H
D4VX9orr2MLbG5IGXxRyaN/6Y3JKkkO3ZPDZSgApmhIkCOWjOnxKUtv9Z3Bk6w6s
N6m+CSibW3GAvCLvnTEvKmaT7eWDQDVWc6Usl2y6I1I82NN7kAiZDCJppbqtzoJ/
zk9oZJP2joEpRtp3i7UiFdJjeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgWg9+w
TcTYhfV1LHHCk/1PNquDMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw
SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARQ6aKu309PCRE9tiy3R2z+27/2FNn+4sfbD8jcZE8UZFKHf/6fBHFo7Zeu2r
TpESvPVf5DhCUiXwU3kOQeTkaahqL52pFj5rfVQM6WrzEzzGNhI2t2iG1Kkgytq8
Jti0d37YW1q8zrHndktUp3ZG4at7yqnOrjx4Xrcw4wBWOJeL/zy0Jj0pmdQbDZG+
cYQQlceT8EzKcgIgOf1vp0CXeAqms2lRaAq46KzOv67GQ7nA86qCDDlGj5D4myyu
QS0bWrOG+a8m5yqsiDY7DLFe2oE/uRURXWO6QS7lyctkAGcBp80pWJAaW8qlnxej
43BQ9H+gw5F9LiG57L41uWA0VA==
-----END CERTIFICATE-----
Generated at Sat Aug 8 06:56:09 2026 by rpki-client