
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: 0LnHTIhb4rY67ZXGqeuQK3TYxAaKPbfsTsHjUjbcGV0=
Subject key identifier: 2E:10:9B:1A:57:77:DD:33:50:C9:69:0C:21:19:5C:12:EC:90:5C:F6
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 0240
Signing time: Sun 03 May 2026 03:30:15 +0000
Manifest this update: Sun 03 May 2026 03:30:14 +0000
Manifest next update: Sun 10 May 2026 03:30:14 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: ST9ijl9fgXRW4sBNHRY3NQnPf4zlGD4WujvumoSKLKI=)
2: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
3: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
4: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
5: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
6: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
7: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
8: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
9: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
10: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: May 3 03:30:14 2026 GMT
Not After : May 10 03:30:14 2026 GMT
Subject: CN=69f6c147-80fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:fe:0d:3e:71:4d:7d:88:a4:f6:72:a4:12:
5b:9d:be:e8:c1:d6:e6:7f:be:00:48:fb:47:2c:44:
18:8b:bc:81:b9:ad:0c:d2:cc:36:69:15:6a:1c:7e:
f5:85:2a:3b:9d:5e:41:c2:37:cd:43:5d:be:4a:98:
0a:dd:82:f4:d2:34:ca:3e:09:49:53:01:82:bf:0d:
ba:7f:34:be:a4:e2:ff:03:6f:16:c7:22:79:9c:90:
2f:92:43:64:09:51:a0:a5:ac:8c:5f:79:73:e6:8a:
0a:82:f0:c8:3d:e8:bc:4f:38:5e:ed:43:71:ee:d6:
97:6e:18:62:ed:d6:2d:ca:21:51:b3:85:18:40:ee:
b1:4b:26:4c:a8:d7:0b:2a:0c:ba:97:02:0d:2d:28:
77:d7:db:7c:e4:37:af:0f:38:73:fc:a7:b1:0e:d5:
e1:53:60:16:9a:12:fa:33:58:52:84:d0:5c:c3:f6:
51:ef:26:dc:34:de:da:7e:9d:22:b6:24:71:0c:fc:
d2:00:c0:6d:51:b2:ac:11:b0:50:12:35:10:bb:46:
dc:f3:64:51:9e:ac:e8:9c:de:6d:d3:bd:c2:ee:27:
a6:64:f0:ab:1f:ab:4e:d9:e2:ab:c8:fd:aa:1e:4b:
53:62:f7:4d:70:54:05:86:09:35:e6:0c:53:21:0f:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:9B:1A:57:77:DD:33:50:C9:69:0C:21:19:5C:12:EC:90:5C:F6
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:21:9b:28:fa:ac:38:b0:29:92:7c:39:40:eb:c3:50:eb:62:
23:e0:f8:4a:5e:28:3e:3a:af:f7:7e:be:44:ff:53:60:3c:59:
5a:d4:b8:b8:03:96:b1:0c:56:f2:2b:13:57:70:a7:c3:16:2b:
b6:a1:93:5f:4a:8f:e2:a8:3f:9a:41:9d:5a:04:49:74:55:69:
16:e8:62:00:47:da:3b:5f:e3:65:dd:2f:a2:2f:a3:c8:db:01:
ee:f4:a9:19:6d:6c:66:73:18:b6:1e:ef:62:1f:0c:0a:45:22:
14:86:58:e5:c1:ff:ec:7b:7c:86:74:50:0f:e1:01:37:fb:4e:
32:5b:0f:ad:ed:f1:29:c3:80:5b:47:e4:99:68:fd:52:3c:e6:
d4:52:bd:cb:34:a4:31:1e:d5:aa:3f:44:09:b4:4e:c7:8a:d4:
22:83:91:22:02:36:c3:cc:50:e8:76:cc:36:f3:f4:98:05:5f:
a7:cc:b5:e0:b6:54:66:f7:bd:17:47:9d:9e:96:aa:bc:70:f3:
1c:b0:94:4c:74:2f:50:28:bb:c1:7d:f8:10:60:0f:be:fc:df:
fa:b5:90:3d:56:94:d6:84:54:c5:9e:9d:7d:16:dc:bf:7f:57:
19:10:77:13:98:2a:d1:88:26:31:79:00:23:f2:e8:0d:de:c3:
df:2a:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 19:23:10 2026 by rpki-client