
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json)
Hash identifier: 14EVjVNWohnkwFlN/bzatNw/KU7pkG1XkxEcw/01xqE=
Subject key identifier: 33:24:98:B2:D6:04:2E:EC:29:5C:E7:5E:9E:64:7C:98:87:41:62:D8
Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
Manifest number: 026D
Signing time: Mon 27 Jul 2026 03:32:41 +0000
Manifest this update: Mon 27 Jul 2026 03:32:40 +0000
Manifest next update: Mon 03 Aug 2026 03:32:40 +0000
Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: 0lbs0/VfAF2tgEjgA0EFuKWEUhoqrEusWPL6pzX0pUo=)
2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: ZHpMs5xnHyrmGG6brYvpkf6EbiaHiV+pUJ+wJWuD338=)
3: C9D1E34E3E6511F18329E1A9CD833773.roa (hash: YlAauxy525S9XOXs7fFMSeSVZDB92cfvJ9ujaExNVJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Validity
Not Before: Jul 27 03:32:40 2026 GMT
Not After : Aug 3 03:32:40 2026 GMT
Subject: CN=6a66d159-7d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:a5:fb:8e:7c:13:fc:eb:c4:53:7c:18:3d:
52:cf:4c:04:57:51:df:cc:94:63:f0:5c:34:ed:5a:
23:32:f6:b5:6e:e6:3b:55:9c:a5:e2:51:23:cf:18:
04:5d:a4:2b:6a:cc:3e:aa:34:fb:f9:e9:f4:d0:f0:
90:6a:71:5a:74:cf:b8:35:60:bb:8f:88:dc:5b:ab:
cf:b3:40:68:20:41:cb:bc:41:cd:bc:c6:e1:44:31:
08:c8:26:00:6d:db:33:7a:3a:ca:c0:0b:95:46:8b:
87:ec:69:04:1e:bc:40:e7:98:1e:d0:f8:c8:29:3f:
7b:51:d9:c1:49:e0:7d:af:36:cb:b1:8a:fc:47:20:
1a:8c:2d:1a:95:70:84:cd:d6:18:d5:db:25:9a:5f:
cf:32:f7:b7:8a:7f:83:fa:ae:ce:de:1d:49:be:a9:
1a:b0:6f:78:07:91:0c:a5:52:0f:da:6d:ac:af:3a:
03:cd:37:ad:85:7a:a3:dc:55:2c:25:ac:60:0e:09:
23:3c:4b:6e:df:04:17:21:8e:b4:09:44:8a:88:0d:
6b:de:79:24:1b:d6:6e:8a:77:1f:38:f5:32:3c:c4:
fc:41:9f:0f:0c:d1:a5:0f:17:2e:a5:02:c1:99:c9:
2c:ad:90:0d:5c:1a:8f:d9:53:6d:1d:01:d2:23:d0:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:98:B2:D6:04:2E:EC:29:5C:E7:5E:9E:64:7C:98:87:41:62:D8
X509v3 Authority Key Identifier:
keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:32:a1:14:e5:ef:2f:9a:ef:18:7b:30:60:e4:f6:9a:7f:f0:
54:05:9e:7e:0b:7e:a9:a6:82:77:c0:8a:d7:30:db:07:13:b2:
9f:2b:0c:81:79:8a:40:05:19:37:29:48:93:e5:c0:a1:80:41:
1c:13:7a:78:09:52:87:95:3b:be:55:39:6b:39:69:eb:fb:a0:
fb:7c:0c:0d:55:da:1b:ac:69:fa:b2:f0:f2:d4:20:ef:20:36:
05:32:57:45:d4:80:5c:37:9c:1e:70:2c:34:a4:31:89:eb:36:
f7:58:04:1f:8e:6a:cd:fd:6a:b4:c1:fd:3d:96:d3:06:69:25:
5b:21:9d:94:d8:a1:df:b5:cb:86:de:ab:e8:f2:42:9a:16:cb:
5b:ce:25:6c:9b:a2:38:96:2b:d4:44:27:b3:e5:50:1a:21:ba:
de:80:0c:e2:75:c6:e0:1b:0a:f4:03:8e:24:b8:10:79:4c:55:
3d:99:e1:6a:45:fb:ae:e3:3d:e2:2d:57:83:aa:1b:5b:1e:3a:
6c:42:87:ae:07:7b:32:59:07:f8:5e:0a:8c:15:75:d5:96:37:
7d:d7:5d:b1:c3:9b:ca:ad:3c:a6:f7:8b:f6:e2:69:6e:e8:18:
1d:a3:c9:c8:f1:59:a0:aa:7d:8b:cb:00:62:14:51:69:2e:47:
9b:39:14:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF
QUYyQTlCQ0YwHhcNMjYwNzI3MDMzMjQwWhcNMjYwODAzMDMzMjQwWjAYMRYwFAYD
VQQDEw02YTY2ZDE1OS03ZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj9ql+458E/zrxFN8GD1Sz0wEV1HfzJRj8Fw07VojMva1buY7VZyl4lEjzxgE
XaQrasw+qjT7+en00PCQanFadM+4NWC7j4jcW6vPs0BoIEHLvEHNvMbhRDEIyCYA
bdszejrKwAuVRouH7GkEHrxA55ge0PjIKT97UdnBSeB9rzbLsYr8RyAajC0alXCE
zdYY1dslml/PMve3in+D+q7O3h1JvqkasG94B5EMpVIP2m2srzoDzTethXqj3FUs
JaxgDgkjPEtu3wQXIY60CUSKiA1r3nkkG9ZuincfOPUyPMT8QZ8PDNGlDxcupQLB
mcksrZANXBqP2VNtHQHSI9AO/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMkmLLW
BC7sKVznXp5kfJiHQWLYMB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4
MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12
NHgxMURSTnBibHpxOHFtODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMjKhFOXvL5rvGHswYOT2mn/wVAWefgt+qaaCd8CK1zDbBxOynysMgXmKQAUZ
NylIk+XAoYBBHBN6eAlSh5U7vlU5azlp6/ug+3wMDVXaG6xp+rLw8tQg7yA2BTJX
RdSAXDecHnAsNKQxies291gEH45qzf1qtMH9PZbTBmklWyGdlNih37XLht6r6PJC
mhbLW84lbJuiOJYr1EQns+VQGiG63oAM4nXG4BsK9AOOJLgQeUxVPZnhakX7ruM9
4i1Xg6obWx46bEKHrgd7MlkH+F4KjBV11ZY3fdddscObyq08pveL9uJpbugYHaPJ
yPFZoKp9i8sAYhRRaS5HmzkUoQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:00 2026 by rpki-client