
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier: 5kagy1OvxzGLdrymZeLqyl77MWlp9Dnf1gj98VDglq4=
Subject key identifier: 28:C3:A3:5B:F5:A5:14:BF:94:BA:06:33:30:CB:0A:B9:85:6B:47:57
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 0782
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number: 0763
Signing time: Sat 28 Feb 2026 22:12:51 +0000
Manifest this update: Sat 28 Feb 2026 22:12:50 +0000
Manifest next update: Sat 07 Mar 2026 22:12:50 +0000
Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: 1nEVDw8tPBQ2nm/i2onh0U5r0LFcXe+4f3cXdAdWB7E=)
2: F6AFB162F66B11F08367D08E6F6F56BC.roa (hash: 8IwfdEW0gmmGKirqwDRNXzlEC+Tm1Fkp0zM1X2OOvAg=)
3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: CBAyva7dqI+RQTwKgqBd2Ik2cx8Z7eAggotY6PPN4YM=)
4: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: KFUQZMe5qLV6EEHqsboBmZ+XKCmzmQL5IdQuKz2/1pM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Feb 28 22:12:50 2026 GMT
Not After : Mar 7 22:12:50 2026 GMT
Subject: CN=69a36863-5b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:76:9b:0f:49:51:0a:57:d6:b3:7f:ee:ad:
58:6b:28:bd:5a:43:78:51:54:83:e3:76:7a:b8:98:
e7:11:13:de:8e:5c:09:6e:ea:ab:d2:ca:fd:81:54:
1d:ab:5f:a8:14:b5:2c:d2:7b:96:47:c7:29:53:3b:
d7:07:75:01:15:c0:bb:6b:71:5d:fe:46:4c:bc:20:
17:a8:bf:bf:89:b6:b9:f6:d3:21:75:8a:6f:40:46:
8a:72:bf:f9:9f:54:d6:0d:88:59:6e:ad:27:cd:11:
9b:37:bf:6a:c0:42:4c:60:a8:57:b9:00:67:f5:40:
c4:13:b5:e7:ba:29:7f:ef:41:6f:7a:92:7e:50:59:
bd:08:92:d3:c1:3c:65:b8:21:51:61:75:61:5d:db:
a1:1f:2e:e5:93:a7:67:49:b2:bc:71:b4:a3:3a:86:
79:5d:52:e0:3a:6d:68:ab:ef:48:7f:18:d7:7b:0f:
fe:9a:b4:70:d2:69:3f:58:e4:1c:af:71:1e:f9:5d:
17:bb:5b:70:5b:fb:37:ef:05:7a:06:fb:e3:06:09:
1d:1f:0b:65:f2:76:20:76:48:d6:6a:b0:ae:a9:a5:
13:c8:38:7c:88:df:3e:08:2b:26:b4:a9:da:8a:1c:
7d:d6:8f:00:c6:2f:d0:37:72:83:84:7f:ff:b8:d1:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C3:A3:5B:F5:A5:14:BF:94:BA:06:33:30:CB:0A:B9:85:6B:47:57
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:2a:48:aa:b7:de:b9:a9:1e:bb:90:b0:dc:68:22:84:9d:c8:
d6:8e:7e:cc:7a:08:b8:4a:9a:c7:7a:55:8a:72:c1:83:ab:a5:
bd:82:59:5e:7d:66:ea:29:06:80:4e:1f:bc:68:5c:73:1f:f8:
d0:98:d2:44:5e:5a:c6:18:26:dd:46:c4:cd:b1:35:85:c4:0e:
38:a2:14:b4:5b:e5:9d:33:3c:fb:2f:63:69:6c:18:d2:95:52:
88:c7:70:78:84:de:63:8a:12:0b:9f:86:0c:ee:3c:71:ca:ef:
24:2c:31:5d:85:f9:90:ea:26:0d:60:86:d8:0f:bc:6a:bc:06:
60:dd:11:c4:a3:8d:d0:a0:e6:52:d5:c7:f8:b8:74:87:09:51:
31:85:e3:65:d7:f3:70:a2:70:76:1d:73:dc:12:37:d0:f4:4b:
48:5b:7d:7d:1e:3f:fd:5c:9a:70:01:1b:f6:c1:63:37:49:09:
a1:c3:3e:17:60:27:4f:57:0f:6d:90:af:55:aa:e1:3d:fc:27:
2d:6d:7a:f0:10:c4:8b:fa:b2:09:be:4a:9d:24:6a:69:9e:14:
d3:a1:00:4b:61:e3:a9:7c:4f:a8:cf:d4:a7:48:d1:f0:ea:d8:
f2:b5:0d:9d:50:40:64:35:3f:9c:b2:84:e5:5e:83:c1:30:f8:
29:ba:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:23 2026 by rpki-client