
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json)
Hash identifier: 9esAhMUTx/pFVZJdwz/bIkdQelRMKB14z47XH3F3CPE=
Subject key identifier: 1E:28:D8:96:E5:CC:3A:0D:8A:7A:57:36:65:F9:28:C5:35:92:59:E6
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 07BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
Manifest number: 07B6
Signing time: Sat 28 Feb 2026 21:50:45 +0000
Manifest this update: Sat 28 Feb 2026 21:50:44 +0000
Manifest next update: Sat 07 Mar 2026 21:50:44 +0000
Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: /gQZwEA/CZnFXXABlywcIlYKEnXIgYDXs5eFPpCSrOs=)
2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: 1oTkQQCTVWfVOHdZtNZH2BhFNuE/kcLMf9xIB/q3J40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Feb 28 21:50:44 2026 GMT
Not After : Mar 7 21:50:44 2026 GMT
Subject: CN=69a36335-884d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:79:23:0d:91:df:86:28:3c:0b:47:1c:e5:
b8:61:c9:c4:16:03:55:ff:c8:c0:58:ee:d4:5b:a7:
ae:5e:33:e7:44:ff:9d:f8:fc:19:0b:56:41:ca:2f:
97:ae:9d:02:85:de:83:99:9d:6f:03:77:eb:92:19:
44:65:c0:86:5d:cb:ee:ea:02:78:cd:31:c8:66:06:
39:ca:17:51:2c:75:91:cb:5a:dc:14:79:2e:08:e7:
5b:88:ef:c3:00:05:20:74:10:e3:78:5d:5f:54:ab:
2f:a4:75:66:fb:64:43:25:69:ce:d5:55:8c:ac:d0:
c3:4e:b1:7b:5c:a9:11:a3:c9:68:36:d2:4b:7d:39:
cd:33:d5:c7:6d:0e:cf:6e:9a:1d:2d:c0:35:85:d7:
ba:99:ac:14:e6:10:dd:e4:e9:32:89:99:4d:52:c3:
a2:82:59:12:90:9d:5f:d3:e9:30:33:46:d1:90:dc:
13:ed:43:1a:0f:61:dd:4a:77:b2:20:70:28:a1:8d:
cb:74:15:a6:a9:c5:64:60:c5:b3:76:1e:0a:4a:b2:
23:ae:8a:1f:f1:b3:c1:b4:57:da:42:a4:62:e2:7a:
71:c9:34:25:d7:5a:6f:b8:ea:ce:83:32:5c:bc:4e:
21:9d:cc:05:33:32:97:48:a4:64:62:3e:d0:a1:b3:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:28:D8:96:E5:CC:3A:0D:8A:7A:57:36:65:F9:28:C5:35:92:59:E6
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ca:7c:16:b7:ac:6d:09:3f:9c:0e:d2:58:fa:80:de:78:48:
be:77:3c:c0:b0:2b:4f:d6:ea:5f:13:7f:38:6a:66:9a:41:a6:
c4:3b:84:58:77:9e:5f:2b:a0:e9:ac:70:a1:5e:ff:e1:d2:27:
95:85:67:99:1e:0a:10:6a:a4:9c:6e:d0:67:6e:15:bf:b9:cc:
d4:61:2a:39:be:2a:db:d2:f8:61:cb:d9:a1:ff:eb:30:0b:ca:
ff:18:a3:ed:5b:03:60:04:b7:26:13:e5:64:7f:08:fd:63:3d:
89:05:1e:da:df:8c:4a:35:22:85:fc:aa:49:dd:1f:d2:67:9c:
34:ff:e4:e7:79:05:71:9d:c5:0f:6c:d0:33:89:27:30:d2:30:
16:c3:05:02:22:bb:41:53:4b:7c:4a:f0:1f:88:f6:91:c9:8d:
76:d1:2f:df:d0:22:0f:ba:63:6c:9e:80:2d:8c:ab:d9:53:13:
0a:e5:24:6d:de:8a:56:9b:2a:e9:bc:01:28:b1:59:8a:e8:f1:
69:d2:ad:b0:74:e8:cf:a6:8f:50:90:0b:9f:1d:dd:e0:d4:0a:
9a:7e:9d:49:3b:e1:9a:ab:b7:d5:32:6f:46:58:a1:8f:a9:79:
ea:8e:1c:1f:e0:dd:96:8a:dc:f9:ee:a8:e6:c7:79:d1:e3:1e:
d8:ac:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:32 2026 by rpki-client