
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json)
Hash identifier: w7H/GsiBXGIWFfHKE66eE+fpoU0bCshkfce4rxXOGe0=
Subject key identifier: 7F:CF:41:02:FC:B8:84:74:E4:8C:58:CC:DF:BD:E3:4A:FB:45:26:1D
Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F
Certificate serial: 06EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
Manifest number: 06E3
Signing time: Wed 20 May 2026 22:14:25 +0000
Manifest this update: Wed 20 May 2026 22:14:25 +0000
Manifest next update: Wed 27 May 2026 22:14:25 +0000
Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: s1H5PMyBmYrXGe0fuW/21tYH3nWG7m/jo1w34wELfyw=)
2: 2F320256981611EB904AF150C4F9AE02.roa (hash: kVGS0pERj+ehgp3eCMO0bHsXxIKn5tT9aw6XzPuGGIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl
rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1772 (0x6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F
Validity
Not Before: May 20 22:14:25 2026 GMT
Not After : May 27 22:14:25 2026 GMT
Subject: CN=6a0e3241-e916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:b2:53:eb:b0:48:ed:21:af:89:95:e8:fd:
90:df:42:7a:53:a1:e9:8e:f9:84:78:c5:7c:74:c2:
73:8a:1b:94:48:2a:46:46:de:11:bb:ed:b9:e9:57:
38:58:b5:84:f8:4d:a7:a2:52:cd:85:89:2c:75:bc:
54:86:f8:1f:33:89:9a:f8:82:72:65:10:61:c3:26:
0a:f4:a1:17:c2:79:cf:2b:33:ef:ea:12:75:b7:0d:
28:2f:55:62:9b:f3:e0:33:69:61:f9:7b:6c:99:6e:
9f:ef:9b:09:d4:1f:c8:c7:17:75:7a:64:63:f9:b2:
83:6d:78:02:26:77:2a:c9:cd:5b:2a:5a:2c:60:2b:
c2:93:4e:2d:41:4e:20:11:59:00:55:d1:98:7f:92:
39:f9:2a:06:95:d5:de:42:53:af:76:7e:1e:ed:97:
47:56:73:a5:8c:cd:62:99:55:4d:b3:c0:8e:27:11:
19:bb:8b:b1:8c:51:4c:2f:db:af:6e:46:c6:f6:19:
ec:a3:c1:f8:90:a1:2f:f5:3d:26:05:85:c8:d5:e4:
45:29:8d:5d:a2:75:a6:50:91:ba:8d:e4:3a:d5:b4:
a5:75:1e:20:28:5a:0a:0e:f4:5a:66:dc:f8:3c:e9:
9e:c4:e2:63:b9:85:bc:33:31:49:19:5b:b9:b4:fe:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:41:02:FC:B8:84:74:E4:8C:58:CC:DF:BD:E3:4A:FB:45:26:1D
X509v3 Authority Key Identifier:
keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:aa:4b:48:30:1e:0c:c2:f3:03:ff:18:9b:00:b5:0a:2a:2b:
62:b6:bc:85:39:fb:b2:c8:00:1e:b6:f5:89:88:7c:b4:15:51:
e8:eb:f4:c3:73:4c:29:05:d8:0c:fb:01:9b:02:4e:79:3d:00:
05:60:04:97:81:24:fe:b7:09:8f:5e:77:ab:d7:b4:99:92:60:
84:ee:08:33:78:89:b7:71:69:7f:64:a2:90:bb:7e:8a:b2:c7:
7b:b8:25:d0:a9:5b:52:b1:47:c6:a7:ec:24:ec:1a:5d:75:45:
37:ed:1d:fc:5f:83:8c:7d:16:62:5d:dc:9d:3b:39:38:b4:2d:
62:8e:ab:f8:81:19:23:74:76:5e:e7:61:f8:9c:9a:da:e6:77:
66:eb:be:e9:ca:76:f7:ef:21:90:81:51:21:6a:1f:da:5b:d6:
33:ed:02:69:97:95:5d:a4:1d:d6:9e:e6:34:9c:9f:9b:46:ca:
84:1a:d7:21:98:d4:4c:92:86:be:7d:fa:37:3b:ab:32:60:a2:
d9:98:bf:fc:dc:b1:48:44:c3:fc:4c:64:1c:8b:09:74:cc:7c:
32:bb:66:89:d1:2f:37:6f:6d:d4:87:07:6d:05:d4:dd:e8:07:
0d:7a:05:14:c8:ae:3f:f3:89:83:74:27:cb:32:20:20:b7:fd:
50:fe:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:53 2026 by rpki-client