
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json)
Hash identifier: wY3nowx6KcEp66Tiln+86sdbTF3qldCTHzJvk1d9HHk=
Subject key identifier: 6D:12:C4:C5:A0:18:23:10:B8:74:AF:BF:30:2B:A0:59:63:8F:FF:F2
Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C
Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
Certificate serial: 0AB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
Manifest number: 0AA5
Signing time: Tue 28 Jul 2026 19:50:00 +0000
Manifest this update: Tue 28 Jul 2026 19:50:00 +0000
Manifest next update: Tue 04 Aug 2026 19:50:00 +0000
Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: +gZoC/hbL9/SSJaCpHossVVO2WKZePp2dNMdYiAIU/4=)
2: E35939C2261711EC9990A750C4F9AE02.roa (hash: tTZXDpG6s0I7epPtJd00/Iy7JGi1h8+PbbN85OVIZMI=)
3: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: lMbLeQ9y+VcqNaUu40E6Ont31pNHR+PjOYoL46iU/ug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl
rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
Validity
Not Before: Jul 28 19:50:00 2026 GMT
Not After : Aug 4 19:50:00 2026 GMT
Subject: CN=6a6907e8-078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:f5:bc:0d:45:22:6b:15:84:34:d7:0d:05:
a2:03:5c:ba:76:38:96:4e:90:ea:50:f2:0e:ae:23:
bf:0c:d1:14:09:c6:f4:75:e1:cb:9c:6d:00:1c:e2:
ef:7e:ef:27:84:38:f1:b4:14:d6:d9:c3:3e:1e:87:
2f:a5:50:46:f1:56:2b:ff:a9:c1:3e:42:1d:76:8f:
f8:3e:f6:30:f6:7b:b5:69:ad:b1:2f:52:97:5f:d9:
a9:b5:bb:30:7a:63:af:8c:2a:0b:f8:32:bc:0a:a8:
66:95:58:4b:c6:90:d1:53:73:58:ab:ab:cc:8b:c5:
55:48:e2:96:fd:fd:73:20:b1:0a:32:b7:05:68:04:
c5:78:9f:7a:f3:9b:fb:78:23:c8:c3:a6:77:91:2d:
06:c1:af:e0:dd:2b:a3:af:55:21:43:e2:17:72:3f:
a7:76:7d:a1:26:38:33:1b:c3:86:a0:f4:b0:2a:c5:
21:1c:91:d1:ec:d8:ce:df:a1:2f:12:2c:a6:96:9f:
54:eb:eb:0e:04:23:96:06:de:02:8b:d9:98:f1:49:
3e:f3:7b:17:47:f6:20:d1:13:42:76:33:b4:cb:ad:
02:26:dd:d6:59:e7:62:5f:69:fe:95:ee:ed:87:95:
de:9b:9c:a2:a3:0c:cc:2a:65:f4:6a:21:cd:d3:8e:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:C4:C5:A0:18:23:10:B8:74:AF:BF:30:2B:A0:59:63:8F:FF:F2
X509v3 Authority Key Identifier:
keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4a:0b:f4:c4:f2:39:e4:79:c4:40:a4:5f:d8:0e:c3:ec:0b:
cb:98:48:5e:14:19:b6:70:c4:85:47:55:2f:c1:db:6d:cc:26:
0b:8e:56:10:9a:de:5b:93:68:f4:26:f4:c6:74:0a:35:09:61:
80:2d:a6:bb:90:9c:e0:b2:18:99:38:c5:08:f3:52:75:23:32:
a6:3a:7b:88:cc:fa:a0:78:ff:3e:98:94:a9:04:9a:f2:27:3b:
bb:f4:04:23:65:16:b8:c9:f8:05:92:78:32:04:35:1a:56:77:
6a:20:60:27:db:02:ab:4d:1e:22:68:55:50:be:b4:82:6c:d6:
02:af:ee:5f:9c:00:f8:b6:dd:fb:7f:f6:6c:72:b0:44:31:c4:
d3:78:ad:f5:39:de:0c:dd:7b:f5:95:f3:7e:b2:f4:ea:a4:c0:
1f:b5:44:6a:7a:b5:1e:52:99:90:38:65:de:10:0a:d3:69:ea:
d0:9c:97:2f:df:45:f0:55:07:e5:97:b6:aa:d3:60:ea:60:bf:
f6:26:cf:fc:3d:ff:2d:15:26:cb:b0:df:0e:15:35:b1:2e:a8:
ea:31:73:78:24:e9:b3:b4:2f:c8:4e:3a:22:94:20:6d:17:58:
7b:9d:52:e4:4f:13:d0:18:c5:1b:cc:1e:33:60:ac:30:99:e9:
d8:66:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:42 2026 by rpki-client