
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json)
Hash identifier: Acw6gzimaEJsLnXoJgHG4uSsG73SRMBf6zxJEOyedeE=
Subject key identifier: B6:56:2B:B6:FF:F8:20:A8:BA:39:37:D0:16:F5:DD:B6:2F:FE:01:FB
Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
Manifest number: 06B8
Signing time: Sat 28 Feb 2026 22:50:11 +0000
Manifest this update: Sat 28 Feb 2026 22:50:10 +0000
Manifest next update: Sat 07 Mar 2026 22:50:10 +0000
Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: kSymxEwbmlvjR9eJQjS8OXkwioz/iWgVAy0aAumpNWU=)
2: 2F320256981611EB904AF150C4F9AE02.roa (hash: E4TUFKJ6pvq2MnnX/Fp4K5QwjuZ8zkimayyU0Jn+DJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl
rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F
Validity
Not Before: Feb 28 22:50:10 2026 GMT
Not After : Mar 7 22:50:10 2026 GMT
Subject: CN=69a37123-b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:be:67:04:92:57:0d:4a:9a:eb:e0:ec:67:
83:12:6b:98:57:f2:6c:f9:92:f1:f4:f3:df:14:c6:
12:c0:41:e8:bf:e0:3a:66:af:60:8b:fc:16:a7:34:
f3:41:01:05:f3:50:10:6f:2d:13:8e:9f:a6:95:dc:
c1:74:04:8c:32:67:14:cf:25:02:02:64:86:81:7a:
e5:20:02:74:07:b5:4c:6a:d8:57:97:7b:54:7d:d8:
b1:5f:62:d0:b4:a7:1f:80:ee:17:aa:94:69:f7:55:
4e:8d:d1:69:2b:79:43:09:07:6e:80:35:ce:53:02:
81:90:f4:d3:2b:2b:3f:4c:1f:c1:ad:27:5f:4b:76:
7f:44:39:02:bf:d5:6b:81:07:c2:4d:e7:86:70:74:
50:af:43:ec:2d:c7:0e:d8:97:13:24:ee:a3:01:13:
7f:a8:c2:fa:7d:31:35:2f:e9:89:b6:dd:89:c7:3b:
ee:d4:24:9a:33:78:df:61:20:68:a9:31:26:4f:52:
24:5f:b9:fc:dc:16:72:ad:f2:ef:2e:ef:ce:a8:3b:
0e:1f:c3:98:32:d5:e8:a5:b3:ce:0e:c2:04:98:35:
b0:0a:d4:fa:d5:4c:66:63:70:96:49:97:4f:32:5a:
d1:89:15:87:56:b3:2c:a1:b0:82:91:65:46:b5:9e:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:56:2B:B6:FF:F8:20:A8:BA:39:37:D0:16:F5:DD:B6:2F:FE:01:FB
X509v3 Authority Key Identifier:
keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f5:c5:66:8a:ec:7d:2d:e6:6f:d7:ee:50:d5:28:af:6e:72:
f8:e3:15:00:1d:6e:3a:02:c4:39:fc:9a:46:13:f0:88:f0:54:
27:dc:80:1f:85:d0:7f:f6:80:92:7e:b4:33:c8:54:8b:de:a1:
0e:e1:e2:20:0e:74:f7:52:f4:bf:60:64:6c:a4:cf:fe:f4:21:
79:ec:bc:d4:9f:b3:fc:8d:84:5e:47:a9:09:6c:b5:5c:2e:c2:
07:c4:cb:b3:76:1a:04:4f:74:a7:31:b4:94:f6:19:e5:48:86:
18:1a:08:8c:61:17:b2:e0:60:3e:61:62:4b:35:89:d5:8a:d6:
28:8c:96:b2:13:05:8d:44:10:66:8f:0a:65:8a:08:6c:c9:64:
b6:9e:f1:28:b8:f1:1d:71:d1:cf:00:b1:a8:3e:c9:07:cc:eb:
69:a9:72:c2:fa:e1:e1:91:61:68:17:25:f8:db:87:20:15:d5:
ab:5b:d2:6e:08:2a:6a:e0:18:58:5d:69:6a:75:93:b6:f9:2e:
d9:82:1c:65:da:92:7b:f8:32:5d:98:6c:14:e3:79:b9:0e:0e:
21:7a:ee:75:a5:9e:ec:c1:5c:53:f4:4b:b1:74:b7:42:c6:5c:
72:c0:27:8c:5c:ef:44:34:45:59:48:b6:f6:11:a3:bb:61:38:
17:f0:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:50:02 2026 by rpki-client