
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: Z9+RWCocd2FRYSOt+AvjhbZyc8Ul2MTMr36RG5ecKfs=
Subject key identifier: 1F:D3:CF:34:31:D7:92:72:B5:B5:9A:FE:98:F4:9C:EA:0F:7C:A1:7C
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 0259
Signing time: Tue 23 Jun 2026 03:11:40 +0000
Manifest this update: Tue 23 Jun 2026 03:11:40 +0000
Manifest next update: Tue 30 Jun 2026 03:11:40 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: GcZN1f0Z6XPmosk1vslOyNTItbZvhOSapSoxOWHQORQ=)
2: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
3: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
4: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
5: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
6: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
7: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
8: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
9: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
10: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Jun 23 03:11:40 2026 GMT
Not After : Jun 30 03:11:40 2026 GMT
Subject: CN=6a39f96c-5b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:70:15:49:a5:18:f4:59:66:be:bc:60:7e:
d1:6c:0c:81:41:75:b9:9b:fd:7a:70:5b:b8:3c:31:
6f:92:78:11:0a:93:26:d3:ca:c4:08:e9:ed:31:63:
f1:ff:ee:38:e0:65:e9:ac:e3:77:1c:97:3f:a5:71:
df:25:7e:dd:5c:4b:65:3e:30:b0:91:43:59:99:fa:
0e:1f:10:d2:ba:13:71:c3:f7:32:b3:80:9c:fc:e1:
18:21:c8:9d:51:ef:76:17:20:fe:4b:e2:c6:cf:04:
c0:ff:21:80:2d:5f:ed:63:55:bc:79:52:65:2c:b8:
99:4a:91:26:0b:c7:cf:72:3a:23:1f:50:50:03:72:
5b:af:67:3f:ae:ed:ee:73:b6:c1:07:57:e4:76:6e:
be:67:d8:1d:35:ca:22:55:88:7d:64:03:0b:0e:80:
f1:62:3e:01:28:52:61:5a:4a:fd:8e:2e:10:bf:83:
36:e2:49:fc:e2:19:b7:b0:61:85:e0:da:5d:e9:1b:
e4:5c:d4:d2:8b:86:4d:68:c4:f6:b6:66:08:dd:53:
02:c4:4c:14:2a:31:f1:94:b6:4c:4d:62:90:b1:d7:
22:17:81:7d:e3:07:3f:34:35:ab:23:22:6c:b0:7f:
69:f4:b6:00:1b:68:3d:bc:c9:af:e0:f3:d3:b5:1f:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:CF:34:31:D7:92:72:B5:B5:9A:FE:98:F4:9C:EA:0F:7C:A1:7C
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:f8:66:1e:06:f7:e9:52:80:5e:c1:a1:2d:2f:1e:47:a2:83:
48:20:ec:ec:74:24:8f:d3:e2:8c:33:fb:56:bc:76:b1:95:b3:
47:27:7d:d1:ac:06:19:ab:4e:d6:a9:21:a9:a7:81:b6:58:19:
d5:b5:23:de:9d:a5:53:d2:7b:b4:e0:63:54:a6:c9:3f:81:a9:
e3:50:03:37:ff:ad:3f:dc:d1:c0:a6:70:09:2e:a3:db:ff:29:
7f:88:a4:f4:3d:8e:02:b3:86:2f:88:f3:97:78:02:0f:d1:5f:
ac:11:ae:8c:cb:99:0e:41:c3:f3:c4:91:e6:78:53:5d:9a:69:
e3:01:62:7b:8a:81:de:10:16:00:bd:46:19:90:6f:ec:ec:f3:
d8:ff:d4:7a:ec:0b:ea:9a:e6:7e:2f:ee:49:7c:50:81:49:57:
09:26:8a:31:4e:40:38:2e:99:e9:ea:1a:1b:8a:93:78:bf:67:
f0:e1:db:e2:d0:d2:bc:63:dc:4e:00:33:33:18:a6:82:60:aa:
1f:08:4d:1d:0a:23:28:3a:f1:be:82:95:7e:fc:ac:cb:27:59:
5e:d0:ee:75:2a:c6:ee:4a:d1:cc:f5:c2:c3:50:60:d5:73:cc:
55:e0:a7:4d:98:74:05:c0:a6:41:a2:3b:3e:4a:9d:92:fc:e9:
2f:30:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 19:20:49 2026 by rpki-client