
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: 70+ZvmtGekovjJEviklFnTDGPBEeEoJovlb5EgENf1U=
Subject key identifier: C7:E5:FA:F7:D4:E1:4F:97:FC:7B:FE:00:68:79:27:E3:0A:CC:EA:F2
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 026A
Signing time: Mon 27 Jul 2026 04:24:32 +0000
Manifest this update: Mon 27 Jul 2026 04:24:31 +0000
Manifest next update: Mon 03 Aug 2026 04:24:31 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: Q0YpZgyiFIGby6gBw2JXv2vnbcfm3wgKNLMBIvXC3ws=)
2: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
3: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
4: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
5: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
6: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
7: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
8: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
9: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
10: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Jul 27 04:24:31 2026 GMT
Not After : Aug 3 04:24:31 2026 GMT
Subject: CN=6a66dd80-5f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:48:75:38:11:c4:ac:71:07:d1:31:09:8b:
fa:55:8c:ac:0d:80:ad:de:3e:34:3b:c4:68:89:2f:
e9:e9:c1:de:a1:7f:e2:d0:39:a6:76:1a:40:8c:f0:
d4:c6:17:98:41:c2:8f:e8:26:3c:39:4b:42:00:14:
e5:f2:f0:0f:71:c4:37:9e:1e:3d:2a:3a:ba:64:5e:
65:c8:e8:af:38:3d:77:f0:27:e1:c7:39:ed:8e:d6:
3e:0d:07:4a:98:78:fd:98:5f:d8:3d:4c:d2:ac:e6:
34:ab:17:cf:51:36:20:79:37:95:05:3f:0f:92:cc:
fd:e1:69:5d:2b:ef:ff:ce:b5:d5:72:b3:e5:ef:b6:
05:63:b5:df:5f:e5:66:41:06:bf:42:56:83:bb:68:
e2:75:90:1a:f5:3c:32:51:a7:32:12:b0:bc:2d:0a:
cc:bc:57:6b:71:d9:8f:23:4e:d9:2e:01:fc:a9:72:
7d:16:72:8b:36:fe:26:69:4d:4d:da:f6:48:ec:b1:
44:f4:4a:a6:07:69:79:23:f2:42:0a:f4:5b:0f:9b:
f2:15:52:1f:25:f7:a6:5a:cb:01:51:b7:a9:e6:b0:
b2:53:ed:24:6e:1f:25:52:5f:e6:f1:70:22:3e:e0:
de:0f:17:30:0f:fe:f4:6d:26:e2:fa:de:60:c9:48:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:FA:F7:D4:E1:4F:97:FC:7B:FE:00:68:79:27:E3:0A:CC:EA:F2
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e4:bc:f4:11:6a:e5:74:5b:f4:65:1e:eb:eb:73:36:e5:9b:
04:00:89:4b:92:f9:9f:3d:4c:ff:6f:8d:72:63:27:81:2e:3c:
e9:ae:af:9d:03:45:f8:65:34:a7:9f:33:5a:aa:f2:c7:ef:fa:
42:c2:d5:88:c7:bd:10:6f:5f:7e:05:e3:fc:d4:84:29:a0:5e:
c4:29:ac:ca:39:61:bb:3f:30:9b:c9:fa:40:29:f0:11:18:30:
3d:76:bd:7f:80:bb:d5:e9:e1:26:97:4b:76:98:7e:c0:f7:27:
74:70:19:7f:25:11:37:95:8a:75:28:5e:75:cb:9f:e6:50:b4:
43:69:03:1a:ff:82:58:1f:2f:9e:6c:34:69:9d:b3:01:14:a8:
25:75:64:af:7a:7c:8b:23:70:6e:55:c9:4a:bd:e7:a8:56:c0:
5a:70:db:57:b2:7e:02:d3:76:51:b5:78:e6:a2:8c:29:44:75:
13:95:77:e3:9b:4b:8b:c8:25:88:f3:5e:83:b8:40:94:ba:09:
b8:5a:93:69:01:03:15:db:ca:f7:88:4b:d0:74:ad:75:f9:58:
63:7f:65:67:ea:90:36:dc:8b:65:e9:5a:1c:06:0a:82:4d:03:
13:1f:d6:ac:95:40:ec:5b:00:19:36:cc:20:c7:ba:29:65:93:
23:77:1c:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjYwNzI3MDQyNDMxWhcNMjYwODAzMDQyNDMxWjAYMRYwFAYD
VQQDEw02YTY2ZGQ4MC01ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0P9IdTgRxKxxB9ExCYv6VYysDYCt3j40O8RoiS/p6cHeoX/i0DmmdhpAjPDU
xheYQcKP6CY8OUtCABTl8vAPccQ3nh49Kjq6ZF5lyOivOD138CfhxzntjtY+DQdK
mHj9mF/YPUzSrOY0qxfPUTYgeTeVBT8Pksz94WldK+//zrXVcrPl77YFY7XfX+Vm
QQa/QlaDu2jidZAa9TwyUacyErC8LQrMvFdrcdmPI07ZLgH8qXJ9FnKLNv4maU1N
2vZI7LFE9EqmB2l5I/JCCvRbD5vyFVIfJfemWssBUbep5rCyU+0kbh8lUl/m8XAi
PuDeDxcwD/70bSbi+t5gyUhLaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfl+vfU
4U+X/Hv+AGh5J+MKzOryMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw
SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAluS89BFq5XRb9GUe6+tzNuWbBACJS5L5nz1M/2+NcmMngS486a6vnQNF+GU0
p58zWqryx+/6QsLViMe9EG9ffgXj/NSEKaBexCmsyjlhuz8wm8n6QCnwERgwPXa9
f4C71enhJpdLdph+wPcndHAZfyURN5WKdShedcuf5lC0Q2kDGv+CWB8vnmw0aZ2z
ARSoJXVkr3p8iyNwblXJSr3nqFbAWnDbV7J+AtN2UbV45qKMKUR1E5V345tLi8gl
iPNeg7hAlLoJuFqTaQEDFdvK94hL0HStdflYY39lZ+qQNtyLZelaHAYKgk0DEx/W
rJVA7FsAGTbMIMe6KWWTI3cckg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:56 2026 by rpki-client