
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
File: 19cjt6SfGf_8n8cw1A9pUEjMCZk.mft (raw, json)
Hash identifier: GKHUOfyvP5JIY7jsudoLnRz+R2R0lLBKSrRTzoWKJGI=
Subject key identifier: 9D:F0:B3:C2:79:93:49:7B:DC:F9:B3:1C:18:DA:EB:BD:67:16:C5:4F
Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
Certificate issuer: /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
Manifest number: CA
Signing time: Mon 21 Sep 2026 06:48:44 +0000
Manifest this update: Mon 21 Sep 2026 06:48:44 +0000
Manifest next update: Mon 28 Sep 2026 06:48:44 +0000
Files and hashes: 1: 19cjt6SfGf_8n8cw1A9pUEjMCZk.crl (hash: y3gkeQgBwAdWwFlq3w2Z+lRF9zWadRrVMxrju12/oYw=)
2: 751861108E2B11F0BFDA106EC4F9AE02.roa (hash: 8u77FLQY1MIG9qmUYZFhHyhqXirdAlPiL1vlCLzmLb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Validity
Not Before: Sep 21 06:48:44 2026 GMT
Not After : Sep 28 06:48:44 2026 GMT
Subject: CN=6ab0d34c-8507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:89:02:45:e9:2a:08:a8:ab:fe:31:32:41:
4d:32:a4:47:69:5a:5d:9c:d8:93:33:80:ff:5c:da:
df:a0:42:3b:93:46:db:5b:12:fa:c1:e8:ad:9a:77:
c7:33:56:90:8f:f1:93:77:c7:be:0b:f0:1b:2f:24:
26:85:a8:5d:72:71:1d:8b:dc:17:b8:a1:bd:d1:ca:
30:3b:17:87:50:bc:d3:89:81:77:20:1b:c2:ef:9b:
6e:8e:fd:9f:01:f2:f9:60:b0:9c:e3:0e:90:f3:9e:
68:08:b2:4d:d3:d0:03:c7:e1:24:49:d9:e4:be:2f:
4f:1a:7f:03:09:1e:0a:bd:6f:77:a6:d0:3a:1b:b2:
02:cd:a6:7b:c8:01:fa:ea:8e:26:dc:ef:58:8f:ee:
73:90:52:71:14:c9:49:49:62:ed:af:e7:df:89:27:
b3:b4:08:87:ff:92:09:49:c6:bf:c0:65:f8:96:b7:
70:55:17:cb:c1:66:0d:53:83:8c:a2:49:58:1b:c2:
e4:ef:17:ba:36:c7:1f:a8:fc:25:f1:b7:51:e2:b8:
1f:c0:0d:31:94:1b:70:9d:9e:6d:1b:52:fd:36:f9:
bb:ac:0f:b6:35:de:35:ee:15:79:03:01:be:73:fa:
6f:87:02:9c:bf:4f:a8:27:ef:62:3d:b1:85:80:26:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:B3:C2:79:93:49:7B:DC:F9:B3:1C:18:DA:EB:BD:67:16:C5:4F
X509v3 Authority Key Identifier:
keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2c:a9:36:75:76:10:93:6c:83:7f:a0:92:b2:57:bf:18:0e:
a7:db:63:57:1c:4a:46:67:35:81:05:82:70:fd:20:40:f9:0a:
a8:27:0c:93:48:0a:ba:8f:3d:90:ac:4f:15:a1:df:ff:45:d3:
c3:c6:1e:ec:00:8d:ca:29:38:36:fa:99:1f:74:ea:47:87:63:
d5:e2:2f:be:a6:48:3a:ee:43:5a:9e:8e:9d:e9:0d:6c:ed:01:
f3:fe:6f:17:29:af:c9:5f:e8:09:69:c3:38:47:31:33:92:64:
60:4e:49:44:31:4c:b3:73:73:d1:75:99:11:59:18:0d:9d:39:
52:df:7a:07:6a:64:31:74:dc:36:be:fe:a6:dc:f8:01:43:69:
5a:3d:78:36:46:33:72:00:15:67:e6:e6:62:fa:fa:09:4a:07:
3d:75:f2:63:75:db:d6:8c:42:e7:f9:64:b9:f1:47:ec:73:53:
0b:62:d2:eb:48:0d:d1:36:45:cc:72:86:26:60:22:eb:5c:67:
ce:c3:81:d5:89:9e:50:46:ab:1e:e1:38:c1:78:26:52:95:f9:
10:78:e2:a5:68:8d:48:f0:b7:56:ff:71:3a:44:f2:67:98:27:
2b:ac:a8:6f:62:2b:2c:ef:4d:9e:53:d3:bc:6f:d7:20:85:da:
a2:43:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:30:51 2026 by rpki-client