
$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json)
Hash identifier: wa/y6FOJP4byogR3DVOlsXNfbgX2A6fe3C7W+PR1hLg=
Subject key identifier: A2:27:0A:F9:33:46:E2:51:E5:F7:BB:1B:02:86:AE:C7:50:B2:78:18
Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Certificate serial: 2313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
Manifest number: 22DF
Signing time: Thu 16 Apr 2026 15:48:30 +0000
Manifest this update: Thu 16 Apr 2026 15:48:30 +0000
Manifest next update: Thu 23 Apr 2026 15:48:30 +0000
Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: JkOjaPEZIhj7joLL385ZDt1UdbyZiGjwaU1P1+rLy+o=)
2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: vG/5CBup8bwvo9IJijCwtmm7X5EaDb/8G9msczvTawM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8979 (0x2313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Validity
Not Before: Apr 16 15:48:30 2026 GMT
Not After : Apr 23 15:48:30 2026 GMT
Subject: CN=69e104ce-8b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:fc:b5:60:0b:0f:ca:b8:10:82:91:90:cb:
a9:2e:2e:b1:07:97:6b:f5:29:7b:b2:02:16:74:e8:
51:14:2f:11:9b:0d:03:54:27:f8:72:b2:a1:84:ca:
42:52:ee:35:69:6b:d3:d7:6b:c5:3a:3e:e4:f5:fa:
44:b6:f8:ac:b3:c4:6d:5c:14:0b:d7:1d:fa:c0:b1:
ab:a4:1e:9c:78:c9:22:33:54:f9:b2:7b:5d:d5:7a:
dd:13:99:a0:03:3f:00:b5:d7:8d:e8:af:2f:f6:63:
9a:fb:01:65:5c:e3:e6:80:92:a5:15:65:72:bc:32:
6f:a5:da:0f:90:ba:b0:3c:32:f6:c3:89:1c:7a:59:
65:9d:6f:5d:25:b0:40:33:7d:34:32:a2:73:43:de:
46:60:a9:f1:f1:34:2d:d9:32:c4:a4:87:7e:06:c9:
a6:a9:3c:01:b4:55:af:cc:00:3c:53:a2:ec:fc:1b:
1a:35:22:d5:06:88:4e:21:d6:15:f2:62:47:35:79:
87:86:b3:f2:87:2b:27:a8:9d:84:39:47:3f:3d:ba:
7a:6b:52:3c:e0:a1:a3:5b:bb:01:b2:36:27:8d:8f:
fa:2a:ea:01:03:8c:7c:0e:64:6d:40:86:6d:7b:24:
bb:51:51:54:60:25:d1:a0:52:4f:4b:8f:a3:55:d9:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:0A:F9:33:46:E2:51:E5:F7:BB:1B:02:86:AE:C7:50:B2:78:18
X509v3 Authority Key Identifier:
keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:2d:59:28:2f:d3:1c:10:f1:50:66:6a:53:0c:ea:5c:ae:
45:08:7f:c2:99:c6:d3:03:ef:1d:40:e8:db:66:b4:f3:f5:38:
df:f9:32:16:6e:aa:8b:3d:e0:1e:c0:b0:ec:10:99:e8:0f:5b:
ed:1b:ef:13:b6:97:8f:f8:94:c5:fc:d4:29:38:c6:ea:e6:05:
9f:ed:65:81:a9:cd:fe:78:5f:b1:4b:48:ad:20:b8:ce:30:1f:
34:49:4a:40:15:1e:3c:99:5f:b1:2b:5b:c0:12:31:66:6e:c9:
40:53:4c:51:65:a6:54:d2:98:c3:4e:4d:8a:09:5a:5c:d1:e2:
80:6f:80:dc:c9:63:9c:15:e8:fc:8b:83:4b:e6:d9:af:a1:8f:
e3:85:22:f4:49:a3:a2:b0:95:85:8e:b8:ee:b1:f8:b0:1b:06:
0f:55:51:b0:a6:bb:6a:13:c0:f0:41:c3:7b:3c:01:71:de:3e:
70:a9:90:f2:c7:77:5e:1c:e6:ca:90:60:38:0b:67:e7:29:05:
73:e9:53:c1:27:66:ae:65:b7:bb:47:03:15:4c:e4:96:08:1f:
49:69:6a:bf:b6:42:ff:86:8d:49:8a:a5:84:52:6a:66:55:07:
52:bc:2e:04:a2:e1:54:51:a7:30:6a:e0:54:e8:2c:5b:17:89:
eb:4b:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:31 2026 by rpki-client