
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json)
Hash identifier: MTm+ciBT7QvO84ep9CuBuFTlshlHY3QwqLuVW4aq8zE=
Subject key identifier: 64:12:16:3B:11:3E:E5:BA:5B:A3:3D:3E:02:8A:E3:7A:D0:22:68:42
Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06
Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
Manifest number: F5
Signing time: Mon 27 Jul 2026 08:24:26 +0000
Manifest this update: Mon 27 Jul 2026 08:24:25 +0000
Manifest next update: Mon 03 Aug 2026 08:24:25 +0000
Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: NXKoL1YmdSnNRUhEjAx/fQs/7IZbm8i/UpAKkUOrjS0=)
2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: qJYle22nAvJ+p2ibV/d5kSSNiEDnFiKaArPFKlzPrbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl
rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06
Validity
Not Before: Jul 27 08:24:25 2026 GMT
Not After : Aug 3 08:24:25 2026 GMT
Subject: CN=6a6715ba-a40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:97:91:32:3a:c0:27:4e:a8:50:b0:37:66:
53:27:da:84:4c:fe:d0:28:4e:fc:23:9d:d2:62:13:
75:35:33:ef:7c:f5:7c:6e:60:41:25:bb:72:ef:c3:
91:59:c3:4a:dc:cd:b7:01:53:bc:f3:a7:68:61:7c:
af:ad:67:0b:58:43:4d:e3:26:dc:0f:be:1b:67:d2:
3e:ec:ad:2f:11:1a:e3:14:4b:fa:f4:cc:06:3c:65:
0d:49:98:e9:95:f3:3a:35:70:3d:84:96:d3:2a:d4:
cc:95:34:a1:41:84:07:6b:dc:d2:bf:fa:7d:39:55:
86:37:11:a7:12:0c:01:1b:72:e3:1e:d1:71:06:a9:
f5:c3:3d:07:d4:63:83:33:29:58:58:2f:bb:05:f9:
6f:c1:92:38:0d:be:7b:1b:67:9e:5c:1f:15:f9:7e:
4a:1e:e0:f1:a1:95:4f:e9:7e:8b:a4:ad:f6:17:6c:
95:12:99:2d:f7:45:2f:8c:ba:1b:77:28:89:ba:8c:
6d:d5:4c:38:ef:f8:8d:c8:55:2a:28:bb:15:ab:c2:
d1:fd:5d:6a:95:ad:db:e2:e7:84:51:ce:a6:4e:83:
10:dc:40:b7:f7:ae:68:81:53:45:f5:5f:ef:bb:bf:
4c:6d:24:dc:7f:24:d6:ac:4d:d4:7a:e4:7f:ec:ea:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:16:3B:11:3E:E5:BA:5B:A3:3D:3E:02:8A:E3:7A:D0:22:68:42
X509v3 Authority Key Identifier:
keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:87:8d:c9:ce:16:e2:2d:0e:3b:ef:c8:ad:39:bd:40:03:ac:
06:04:1b:06:4c:9f:b5:6e:4b:9a:ea:a1:ac:cd:7c:de:e7:54:
80:d8:c8:2d:26:c8:df:cd:6e:1c:cc:2a:86:a9:7c:ec:59:6e:
53:23:ab:2a:c6:50:0a:61:e1:73:06:45:94:57:74:18:c0:ee:
9d:5b:03:26:51:81:97:03:c5:ee:e0:71:54:8d:f0:47:6e:25:
20:8f:49:de:d5:d7:55:6d:46:b3:41:2d:72:c7:5d:31:0e:25:
ee:27:cf:81:e4:7b:07:f7:73:96:3a:ce:4b:c0:00:d3:ae:26:
f4:66:95:b1:1f:cc:f4:ac:54:1e:46:4a:ac:f4:65:c2:0c:26:
21:27:71:98:e8:d7:bb:86:25:97:66:fd:83:3f:1c:19:70:b0:
4a:e4:62:4f:29:11:49:97:c3:e0:a8:30:d6:e2:0b:44:4c:87:
57:19:49:d7:ba:b7:96:df:62:b4:d2:8c:e8:1c:13:c0:89:f8:
92:d8:2d:6e:fb:d4:90:1a:fa:f1:2f:ed:84:ef:40:63:15:05:
41:23:41:bc:f1:ca:b4:97:3c:dc:96:85:f4:39:52:15:a5:50:
a9:fc:eb:61:c1:e0:e1:90:6c:18:87:dc:08:04:45:41:cb:b2:
28:67:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:55 2026 by rpki-client