
$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
File: cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json)
Hash identifier: 89nVwSZxHLDMvU2NZc+Vk6H+8Lpd2l3Fu0IowqH7apU=
Subject key identifier: 9E:6D:D1:C1:36:C8:7C:39:10:EB:9C:7B:20:D2:8D:A6:22:05:5A:65
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
Manifest number: D8
Signing time: Mon 02 Mar 2026 02:11:22 +0000
Manifest this update: Mon 02 Mar 2026 02:11:20 +0000
Manifest next update: Mon 09 Mar 2026 02:11:20 +0000
Files and hashes: 1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: O5pQO7eRLu/y1fEjgr0uiqkDAwypFJmDUEO3eRlkD6M=)
2: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: 3nJqGrjMdf5D7MugjfLyV3mlrWn6RF9SKC0CMqH5eTc=)
3: BE713C72E06211F0BC8E94E0746F56BC.roa (hash: EFjR0asu4wd/yeWWK7gzSOj/T05MOi3CBtWkuJ6nqxA=)
4: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: XuBY8r+m0nn8vqkTh0uM6kdpQk4Jsat9oInYlsF5zpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Validity
Not Before: Mar 2 02:11:20 2026 GMT
Not After : Mar 9 02:11:20 2026 GMT
Subject: CN=69a4f1ca-5879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:0f:fb:c9:d6:c1:be:4d:65:17:b7:c4:a8:
81:59:c5:47:64:22:59:b6:28:72:11:84:71:8c:8e:
81:a0:49:10:40:a3:a5:90:91:3e:35:3f:70:3a:fb:
8d:67:61:3a:3e:1f:8b:08:79:bd:32:93:34:f0:29:
9a:6e:be:4d:39:d7:f9:ec:db:6c:9b:72:28:3e:61:
a1:81:1f:aa:7e:7c:b5:9c:9e:ea:4b:0c:1f:d3:37:
6c:63:bd:1f:e4:23:2a:d7:cb:25:a5:1b:18:2c:50:
30:00:4d:6a:94:d1:c8:7c:e1:f3:51:4c:d2:50:1c:
33:da:c8:5f:d0:78:40:eb:21:fc:e5:f8:78:c8:a4:
2c:6a:a5:c1:e2:5f:c4:39:be:ca:35:c1:5e:b6:20:
49:d8:a5:fb:bb:3a:22:6c:a6:82:bb:19:59:c0:89:
43:2d:53:4f:13:03:b3:23:49:2b:57:cf:64:2f:07:
3b:d4:9b:56:b3:ee:db:de:0f:4a:f1:9f:f4:ca:fa:
cd:d6:32:14:49:f3:27:fc:02:9d:9f:83:c0:70:9e:
f6:a1:09:1b:db:02:31:67:04:a1:8f:72:66:fe:a5:
30:44:cb:75:fc:35:40:92:25:9b:bf:26:6a:fc:4e:
01:68:e6:99:dc:f0:eb:f3:1d:bf:ec:47:09:40:39:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6D:D1:C1:36:C8:7C:39:10:EB:9C:7B:20:D2:8D:A6:22:05:5A:65
X509v3 Authority Key Identifier:
keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:be:df:a1:15:f4:9c:1a:af:17:ad:75:a4:0d:8d:31:2f:9c:
cf:b9:63:64:60:c8:20:c6:c5:ec:95:4e:37:95:a5:4d:38:1d:
ac:3b:14:32:d0:ef:53:12:8e:90:e5:d8:3a:7d:d7:6d:c3:5f:
d5:09:66:35:67:5f:b7:13:67:e5:8e:0a:47:52:02:d8:0b:cc:
36:1f:f4:18:be:8a:d9:a5:7d:e0:a2:2d:51:d8:90:e3:c7:c0:
4f:69:e6:71:2e:2f:f9:f7:6c:e0:ed:f4:21:d6:96:29:b9:7c:
a6:66:fe:ff:4f:5f:80:6c:fe:09:25:7d:18:22:1e:ba:70:f7:
73:74:56:65:4f:e9:8f:8f:d9:26:d6:ea:7c:96:21:df:ef:fb:
c9:46:01:a2:2c:ed:02:f1:c3:19:92:d7:40:74:3f:55:78:71:
ce:74:37:00:3f:b0:81:d2:5b:9d:b0:83:d3:e7:c3:82:81:40:
ed:c2:60:c7:35:6d:4c:7f:43:2c:ae:6e:05:79:07:e3:4e:8f:
c4:5e:8c:68:ed:26:4c:18:a9:0d:22:04:2c:fb:16:7b:75:c5:
83:9e:df:bb:e1:dd:58:77:aa:a3:3f:58:a8:ae:b6:b6:57:4c:
a0:f7:60:32:44:d8:f1:16:13:4c:c6:e0:ce:cf:cc:e9:c0:10:
37:0b:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:28 2026 by rpki-client