
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier: 9ChdxYS8AgQPnwPOjAQd9UZd2tZNxfBV1olTuL3FFCQ=
Subject key identifier: 28:42:B5:26:9D:B4:3F:84:EA:8C:B5:D6:9D:C5:3B:46:3A:89:90:A6
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number: 0484
Signing time: Sun 20 Sep 2026 23:53:19 +0000
Manifest this update: Sun 20 Sep 2026 23:53:18 +0000
Manifest next update: Sun 27 Sep 2026 23:53:18 +0000
Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: dw71/cHz/9WwTP2kEXbm2KiBymg8Or4+ievL3GumAcs=)
2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: hABnM/97lZ7YUUne7x9/QuRRaHhaVqPrBbk6si90BL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Validity
Not Before: Sep 20 23:53:18 2026 GMT
Not After : Sep 27 23:53:18 2026 GMT
Subject: CN=6ab071ee-2d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:ba:59:a4:ca:b7:3a:34:5f:39:56:94:11:
7f:0c:75:80:77:c3:7b:9e:ba:6a:33:a2:ab:7a:59:
4a:c0:d9:70:87:2b:04:9f:47:0f:5d:c0:72:1a:f4:
e1:55:e2:b3:35:ef:7e:b6:14:46:b7:23:d5:d9:b3:
f2:df:4c:11:a0:62:48:93:9c:32:c3:18:77:2c:31:
9b:fe:48:c5:6c:25:84:c6:aa:10:26:0d:ef:db:c0:
db:73:2e:9a:ae:c3:82:0b:55:03:55:90:b3:78:67:
56:aa:09:1c:54:34:45:95:fa:65:df:64:44:93:29:
82:9b:8b:02:89:99:d1:f3:f4:66:af:d5:24:0b:88:
90:dc:0c:ab:81:c1:cb:75:92:87:ec:6e:6f:e2:83:
14:87:88:23:32:f4:d6:62:77:84:a0:dd:4d:fc:a0:
a7:97:2d:2d:b0:0b:0b:44:dd:d0:16:c4:2a:55:21:
ce:6d:08:9e:a5:7d:e5:79:eb:74:44:56:22:be:67:
b5:00:90:f9:b9:47:91:ed:97:4d:ae:cd:01:39:f5:
09:df:ee:ee:51:cb:22:a8:07:59:f9:2f:87:f2:98:
51:c0:f2:45:db:74:37:19:af:88:26:9a:45:50:1d:
78:09:6e:78:19:0d:56:6a:3f:b1:11:b0:4f:d2:32:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:B5:26:9D:B4:3F:84:EA:8C:B5:D6:9D:C5:3B:46:3A:89:90:A6
X509v3 Authority Key Identifier:
keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:06:85:0b:7e:9c:10:ed:dc:57:9b:11:3a:61:4a:9e:ed:cf:
19:1f:f5:f4:ef:a3:7e:ea:bb:8c:e4:0f:6f:37:1a:9a:87:f0:
68:18:72:be:26:f3:01:d6:f3:28:13:54:40:77:3f:df:ee:f5:
56:8d:4d:43:73:29:b1:f9:13:27:1c:d6:dc:e6:7b:c3:71:ed:
bd:f4:3f:bb:9e:67:b9:b1:21:61:7d:28:c6:29:65:c9:e5:b5:
ed:9d:eb:6b:a7:f3:70:1f:da:f6:06:18:37:66:83:6e:70:e3:
0e:23:e0:4f:31:34:9d:53:1d:2f:bd:1f:2c:28:ec:a0:a4:9e:
d6:0e:d0:ca:b8:d6:24:a1:7c:67:3c:1a:c5:ff:6a:b2:87:68:
24:54:e6:ac:bf:65:a2:44:d5:28:12:6c:08:af:6a:66:3e:c9:
66:bb:e7:bb:ca:ee:e6:a9:e5:33:ac:ed:5f:0d:c5:5d:8b:79:
8c:66:58:2f:0d:de:2e:a0:59:ab:77:cc:15:2c:52:04:94:18:
10:df:af:24:4a:4f:80:fa:c1:7c:ea:29:8a:5e:a1:61:48:ae:
07:b7:83:de:87:34:36:3c:d4:43:50:40:d0:cc:cf:d6:1a:cb:
8b:78:57:8b:b5:c9:8f:25:81:8e:0b:25:74:4c:6a:f9:da:aa:
4c:e0:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:53:30 2026 by rpki-client