
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier: WzgZCMO1Ra6j95tQcz5dUV/qQIhOzIxKQpjy/bRiahM=
Subject key identifier: 2C:C4:38:CA:92:C1:C4:28:4E:6F:C6:83:10:1F:CD:74:8C:36:09:05
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial: 30FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number: 30C7
Signing time: Thu 16 Apr 2026 15:25:54 +0000
Manifest this update: Thu 16 Apr 2026 15:25:53 +0000
Manifest next update: Thu 23 Apr 2026 15:25:53 +0000
Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: 2eUTEEmii5qqjpJ0BJQtbdKLo7QqYN7AAbfhISRz0X4=)
2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 5DRF3OBPfXV3lU2bu3oUnMJrvoo8XlLJ7cqTsx4GaH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12538 (0x30fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Validity
Not Before: Apr 16 15:25:53 2026 GMT
Not After : Apr 23 15:25:53 2026 GMT
Subject: CN=69e0ff82-7ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:65:2d:28:ff:0a:b1:12:c2:9f:3f:47:07:f4:
da:df:1c:68:a9:26:47:29:dc:df:06:ba:a3:10:25:
18:28:d3:3f:43:91:68:fd:94:90:cb:27:72:95:d9:
82:b6:ad:12:b8:aa:b8:c9:d9:9b:dd:88:36:c4:e6:
44:78:6c:70:01:0a:17:f2:86:2c:b3:51:b2:1f:ca:
59:57:f4:fd:4a:f4:f5:2a:33:1f:dd:53:1a:79:cb:
41:bb:bb:e8:57:34:73:4e:7d:d1:f2:41:86:26:c3:
02:9f:bb:6f:2d:fe:c1:51:42:29:b2:9a:a9:6d:25:
d5:81:5c:63:f9:0a:9a:cc:38:68:0a:03:af:ce:0e:
3b:65:5e:5f:c3:48:fd:40:1d:fb:24:43:d1:a8:1c:
4d:16:19:f5:bc:48:28:15:01:e7:53:55:ac:c7:2a:
89:43:e5:8c:b4:04:d3:09:26:6a:85:c4:1b:dc:10:
83:1e:c8:6d:e9:a4:0f:63:4d:0e:76:f2:5a:e3:99:
74:9f:47:2e:fb:49:66:38:94:e5:81:d7:51:8a:c0:
e4:66:99:bd:ad:be:45:11:f2:c3:e9:fc:05:dc:d1:
c3:75:d1:b4:a1:34:30:f1:39:ee:0d:3e:61:84:cd:
a4:cb:a2:03:ed:d1:d8:3f:aa:30:a8:df:e1:66:81:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:38:CA:92:C1:C4:28:4E:6F:C6:83:10:1F:CD:74:8C:36:09:05
X509v3 Authority Key Identifier:
keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:98:27:06:ac:3b:94:f9:c1:53:a2:4e:31:3f:ed:e2:95:80:
4b:c4:62:1e:27:84:fc:20:98:64:9d:ef:05:48:1d:b0:e8:57:
07:69:6b:66:c0:d3:b9:ac:31:c9:c7:e6:c2:63:46:e6:1c:4c:
c4:c5:6e:07:51:be:8c:18:ad:c9:ba:9a:f1:10:35:cf:e9:4b:
4e:ae:bd:ea:ad:5b:74:75:55:48:9e:8a:8c:1f:ba:0b:ae:95:
10:15:7d:84:9e:1e:f7:33:6b:46:ef:ff:6c:d4:71:e6:22:e1:
33:c1:9a:90:7e:f4:ee:97:30:f3:2e:74:91:78:1d:da:68:15:
d6:ad:a4:91:12:2f:27:5b:94:42:ba:f7:2c:1b:d6:c3:50:12:
c5:65:84:b0:b8:a9:62:af:43:94:0d:9e:72:3f:d6:8e:73:bb:
d0:a4:c9:b8:8f:7f:3a:76:b6:da:f6:92:5a:7e:b0:7c:d0:31:
61:4a:65:f5:66:54:a4:5e:63:34:df:7b:60:29:55:43:07:22:
57:7b:9a:57:67:c4:ab:cc:4b:9f:49:99:ba:cf:3f:d3:af:11:
4f:39:cc:50:21:b7:cd:d1:16:d8:80:06:99:2e:20:1f:d3:61:
40:9c:aa:57:22:54:dd:87:cb:10:ad:58:b5:68:87:e4:f4:42:
13:d3:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:08 2026 by rpki-client