
$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier: C8tVHAfgwLXitKxnwDar24ABSIRCDah1ijIT0jhJxiA=
Subject key identifier: 21:51:F1:24:AD:9E:60:0A:B5:F9:F1:53:58:6A:BD:67:7D:CC:0B:B2
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number: 0415
Signing time: Sun 01 Mar 2026 01:14:57 +0000
Manifest this update: Sun 01 Mar 2026 01:14:57 +0000
Manifest next update: Sun 08 Mar 2026 01:14:57 +0000
Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: VUmuaqHl4X7gdxJXytBEp60ZyH/WG+YQIGeOc14PYDo=)
2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Validity
Not Before: Mar 1 01:14:57 2026 GMT
Not After : Mar 8 01:14:57 2026 GMT
Subject: CN=69a39311-5c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:c5:fb:6d:15:4c:53:98:9a:ae:ce:8b:42:
f0:74:09:52:62:42:6e:07:d1:54:dd:25:84:fa:7d:
4e:10:c3:39:18:c6:42:b7:7b:b1:8e:44:5e:a4:50:
de:3e:7d:5c:51:9d:c7:1c:95:d6:e4:3d:90:0d:76:
49:6c:e7:85:3e:73:13:a1:bb:b2:80:19:42:a1:26:
40:c5:33:47:a3:91:3b:6f:e2:2e:df:be:4e:01:82:
5d:47:8e:16:fa:e8:89:25:60:b2:a8:f9:13:9b:52:
56:1a:21:29:2c:86:86:e9:b4:b1:74:43:af:71:86:
f3:1f:f0:79:4c:d5:46:b7:30:9c:fc:4a:93:0c:b7:
c8:1d:8d:56:25:0f:fe:b0:b2:b2:64:a8:61:d2:30:
5e:0d:a6:c9:90:7d:aa:36:d6:1c:52:06:78:20:a9:
9f:3d:38:7f:67:70:95:8c:ce:f0:ca:5a:d4:ff:38:
81:f9:c2:dc:af:4a:b4:2b:92:29:1c:66:b0:a9:b1:
5d:94:41:25:67:a6:07:03:16:7d:3e:87:24:6b:7b:
9e:05:c0:18:eb:a8:e3:bf:a7:1f:63:a3:a5:b3:89:
6d:1d:f4:29:65:32:a8:07:bd:38:fe:ac:0c:e8:1c:
74:d5:e1:62:70:8b:a9:a0:e1:6c:16:fe:f0:06:4d:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:51:F1:24:AD:9E:60:0A:B5:F9:F1:53:58:6A:BD:67:7D:CC:0B:B2
X509v3 Authority Key Identifier:
keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a4:90:a5:9a:89:4c:08:fb:f4:36:63:2e:6c:85:f8:e7:82:
6c:ca:5c:62:09:93:cf:5d:a1:91:84:b6:6d:3f:d6:d9:3e:89:
25:55:c9:3a:28:ad:79:e5:0f:1e:9f:3a:ce:0c:21:75:af:d5:
f3:64:68:9a:10:24:67:dc:e5:eb:ec:4c:77:c8:b6:e8:af:4a:
ee:6f:78:ac:5d:c5:77:ac:69:6f:95:23:bf:c1:e5:eb:d8:91:
f4:37:08:a3:a8:d7:e4:c8:96:16:aa:18:f8:01:e9:0e:b5:41:
2b:0e:da:59:22:3a:c3:37:f5:ee:45:86:f4:7f:43:98:fb:25:
f2:e5:2b:60:23:30:33:51:66:f7:82:2e:6e:19:9a:11:0f:5d:
80:4e:94:9d:7d:42:b7:09:06:ad:92:c6:53:93:4e:11:a5:68:
a6:41:e4:69:7a:3d:f2:cb:c4:d1:4f:99:c5:f3:a7:8d:d6:d3:
ac:11:14:77:14:22:04:2d:fd:94:ca:6b:86:5c:cd:44:25:ea:
bd:d4:8a:c1:94:54:ad:92:b4:f4:d7:fa:a5:5a:3b:a8:29:b8:
23:5a:c7:ac:a5:e8:93:f2:43:0d:a4:0a:1b:c0:0e:0c:b1:4c:
8e:82:fe:61:f4:99:37:85:4b:37:e1:45:4f:0d:a6:91:82:52:
5e:8d:74:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG
REJCNjJGN0EwHhcNMjYwMzAxMDExNDU3WhcNMjYwMzA4MDExNDU3WjAYMRYwFAYD
VQQDDA02OWEzOTMxMS01YzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoXrF+20VTFOYmq7Oi0LwdAlSYkJuB9FU3SWE+n1OEMM5GMZCt3uxjkRepFDe
Pn1cUZ3HHJXW5D2QDXZJbOeFPnMTobuygBlCoSZAxTNHo5E7b+Iu375OAYJdR44W
+uiJJWCyqPkTm1JWGiEpLIaG6bSxdEOvcYbzH/B5TNVGtzCc/EqTDLfIHY1WJQ/+
sLKyZKhh0jBeDabJkH2qNtYcUgZ4IKmfPTh/Z3CVjM7wylrU/ziB+cLcr0q0K5Ip
HGawqbFdlEElZ6YHAxZ9Pocka3ueBcAY66jjv6cfY6Ols4ltHfQpZTKoB704/qwM
6Bx01eFicIupoOFsFv7wBk1VvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFR8SSt
nmAKtfnxU1hqvWd9zAuyMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0
RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o
MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKqSQpZqJTAj79DZjLmyF+OeCbMpcYgmTz12hkYS2bT/W2T6JJVXJOiiteeUP
Hp86zgwhda/V82RomhAkZ9zl6+xMd8i26K9K7m94rF3Fd6xpb5Ujv8Hl69iR9DcI
o6jX5MiWFqoY+AHpDrVBKw7aWSI6wzf17kWG9H9DmPsl8uUrYCMwM1Fm94Iubhma
EQ9dgE6UnX1CtwkGrZLGU5NOEaVopkHkaXo98svE0U+ZxfOnjdbTrBEUdxQiBC39
lMprhlzNRCXqvdSKwZRUrZK09Nf6pVo7qCm4I1rHrKXok/JDDaQKG8AODLFMjoL+
YfSZN4VLN+FFTw2mkYJSXo10ag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:59 2026 by rpki-client