
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier: dCtaYcRjVGwDCsfFe52nc3bqwo2gUnorxsH43PqCX3g=
Subject key identifier: 50:23:4E:E5:48:13:A2:AB:C1:8B:00:51:3E:63:93:17:37:BD:CD:5F
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 07AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number: 077E
Signing time: Thu 16 Apr 2026 21:34:55 +0000
Manifest this update: Thu 16 Apr 2026 21:34:55 +0000
Manifest next update: Thu 23 Apr 2026 21:34:55 +0000
Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: Fhv9oqdF0kmVu2RZtyv1LSIYhrXY2vo2iwjtLai5oN0=)
2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0=)
3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: KirEUGjAdAYwlJ1vX/xexGJU4YLpCT+izGcMYNz9uNQ=)
4: F6AFB162F66B11F08367D08E6F6F56BC.roa (hash: rB+Tmv1oKzF3mo1fo+ketSQWRb1QMSjxzFBO+4UsFGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964 (0x7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Apr 16 21:34:55 2026 GMT
Not After : Apr 23 21:34:55 2026 GMT
Subject: CN=69e155ff-a1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:d2:aa:94:fb:38:6e:d6:20:ab:0f:fa:9d:
49:60:8f:15:3d:56:14:22:80:c8:c3:55:36:94:96:
c7:2e:68:a3:23:a0:e9:33:42:44:59:a9:b8:87:8e:
21:05:85:6c:89:d8:09:a9:bf:9e:61:39:49:c7:e0:
95:5e:5d:88:ec:40:fa:48:db:2d:7d:30:ff:d1:6f:
42:62:e6:33:53:6e:54:38:c6:bf:07:d5:7f:9d:d9:
a0:de:05:d6:e7:f3:30:7d:87:92:f3:ff:70:c8:82:
af:e8:47:5b:88:4a:6c:e9:ae:c8:b4:85:b0:40:79:
33:4c:af:6b:2e:74:43:83:69:f4:23:b4:cd:d5:0c:
e7:de:c6:aa:a7:59:33:1f:a3:50:f8:97:5d:c5:64:
f0:65:06:82:63:44:65:82:12:2d:ee:17:a3:04:4c:
7f:8a:67:2e:fb:57:8f:f4:82:ee:a4:98:41:b1:9b:
d3:b1:72:09:90:86:c3:e3:98:a2:37:38:1e:6a:3b:
16:34:72:14:f2:3a:df:57:02:24:95:a8:0f:29:eb:
29:10:9e:70:5b:82:bc:c2:60:98:03:13:ad:af:30:
62:20:2b:a5:63:83:4b:fc:2c:1e:fe:a9:cc:95:ff:
67:dc:4b:77:28:db:00:7c:67:2f:60:bb:f9:bf:73:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:4E:E5:48:13:A2:AB:C1:8B:00:51:3E:63:93:17:37:BD:CD:5F
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:af:c7:83:13:3e:43:c8:79:4b:11:6d:3c:d1:08:67:08:d8:
39:89:d0:14:3e:4c:e5:5f:b2:ff:43:29:ab:60:4f:04:b1:e9:
32:84:f7:8d:95:0d:9c:16:58:0f:a9:5a:10:19:09:32:9d:56:
00:f3:df:65:a1:4b:c0:66:7b:36:15:00:5b:b7:d3:58:ff:46:
c1:24:6f:39:59:86:58:08:b8:8a:78:41:6c:ee:a6:5e:5a:6e:
ce:d9:fc:ee:28:d8:95:d6:f3:1f:e4:a3:f9:30:60:d7:da:3e:
9c:7b:b3:1e:4a:33:71:b2:d0:17:c7:8a:4f:bf:c5:4a:4c:90:
23:28:92:bf:df:95:81:5a:81:af:c3:b5:ed:06:fc:02:93:86:
e4:d3:c8:9b:d7:23:85:f7:95:aa:72:47:80:e4:44:54:e2:8f:
6e:c0:5a:e3:3d:2c:33:ff:e0:e1:1e:cc:d2:90:b6:eb:c6:6a:
4c:01:e3:c2:75:1b:71:88:b9:6f:1d:bb:a2:ac:f2:06:c6:d2:
a2:96:39:43:5b:19:71:97:d2:6e:70:07:ee:de:f1:35:db:b9:
b4:b3:0e:4d:7d:e3:ae:8d:f9:bc:f0:d6:0b:36:7d:a7:21:a4:
6c:70:8f:be:a9:6b:bd:3a:f5:33:40:0d:bf:4f:cc:3b:f9:23:
53:3a:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:56 2026 by rpki-client