
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json)
Hash identifier: tu0Ih7BojScXtnwhGXr0I0XVaflOfiGWqUyoOz/3d78=
Subject key identifier: D4:A8:46:4C:2D:59:CB:E9:6B:CE:4A:96:1F:69:D1:DE:1C:E8:61:67
Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
Manifest number: 02CB
Signing time: Mon 27 Jul 2026 02:29:40 +0000
Manifest this update: Mon 27 Jul 2026 02:29:39 +0000
Manifest next update: Mon 03 Aug 2026 02:29:39 +0000
Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: lj/iYJbMSETI470m3/2/A4+9kKlBYKZcCsXOm6ifvwk=)
2: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: 4oINYtmMIJAI0qB/zgs7eJ/PHXiHCKVBi4RA5fWevZs=)
3: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: ZQQmEapOEB8hbnYD2748C5/tVDyFBuYad9v0XjI6Mok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Validity
Not Before: Jul 27 02:29:39 2026 GMT
Not After : Aug 3 02:29:39 2026 GMT
Subject: CN=6a66c294-a73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:af:15:26:c0:d5:ec:55:1c:45:1e:68:12:
8e:3c:c3:fc:81:48:9f:d4:03:4b:48:37:bc:99:d0:
70:69:a7:e8:9c:d4:8e:73:4c:02:d7:8c:d5:e8:aa:
f2:3f:c5:46:d8:79:dc:f7:78:78:38:28:e1:83:44:
aa:8d:8f:55:d4:97:ed:df:f9:0d:b2:2c:96:e3:82:
4b:6d:5c:f4:41:c4:e9:90:b1:a1:66:0e:83:17:ec:
4f:b1:e8:be:df:b3:55:70:1c:f1:b9:4d:1b:c9:04:
07:b7:14:8c:3d:0b:49:c0:3e:fc:c7:c8:28:c6:7b:
36:8e:5f:af:fb:4d:aa:45:2e:fd:95:c4:a2:71:66:
d8:0a:2e:7f:9f:26:eb:ff:cb:3c:de:b9:e4:12:25:
ca:51:ee:db:e0:d0:84:87:43:73:c7:fb:19:3a:4c:
2b:b7:e4:38:e2:c5:51:b6:27:15:c0:a4:b2:62:2f:
86:9f:e3:97:c4:b3:ab:87:04:14:a5:e7:d5:00:dc:
3e:47:e2:e9:da:b3:84:1a:5f:1a:39:88:82:a3:2c:
de:a9:f7:89:66:c2:08:41:bb:cc:e6:31:e7:bc:44:
53:fa:85:0c:55:d4:38:57:6b:71:6c:06:f5:66:83:
a7:8d:d6:04:aa:0a:f6:27:4b:73:3b:f9:05:9c:95:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A8:46:4C:2D:59:CB:E9:6B:CE:4A:96:1F:69:D1:DE:1C:E8:61:67
X509v3 Authority Key Identifier:
keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:5a:33:89:a7:1a:ef:b4:84:7c:1f:bf:73:44:d0:93:68:
2f:cb:b8:d8:ca:9d:1f:db:d1:10:34:6f:4c:28:2a:61:42:a2:
95:26:28:df:7b:91:c7:7a:e4:5b:cb:b0:5a:da:4a:56:52:51:
27:c1:a7:a9:e3:c7:65:12:e7:aa:65:8d:52:2c:f5:31:c9:64:
6d:6c:08:e7:4f:6e:a1:84:68:1c:4d:70:b8:15:26:57:64:48:
b5:86:1c:53:0a:fc:24:96:a4:2a:f1:74:6f:25:e4:c3:ac:d0:
08:87:c6:8d:77:42:cf:c9:4f:a6:28:79:61:3e:15:0e:4d:bb:
3b:37:d4:14:e7:38:36:bd:8b:55:e8:8c:95:cd:d0:fc:9e:5a:
be:8c:48:f3:c2:94:d1:fd:aa:ec:7d:cb:74:66:a5:73:c3:e8:
8c:22:7b:ee:97:a5:7f:1d:67:fe:69:d4:19:e4:96:82:8e:f5:
87:3a:74:60:49:d2:a3:9d:76:2d:d1:bc:20:04:cb:6f:dd:61:
8e:34:f9:1a:9c:21:c5:b0:2f:01:8e:d3:fb:96:37:2c:79:21:
68:11:5f:89:16:db:41:15:d8:17:04:6c:9c:94:69:43:e4:30:
63:4e:6a:1c:d0:14:6a:4d:85:7d:a6:33:c5:e0:8e:10:59:c2:
6e:e4:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:10 2026 by rpki-client