
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier: kF1PVpkZPOGebkv7h7z/P6gczxxn5v1WoSGqvg87TCY=
Subject key identifier: 2C:D8:15:5A:7F:76:61:7F:41:41:1A:03:70:0B:6E:89:B6:84:4B:DE
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number: 7F
Signing time: Sun 19 Apr 2026 07:21:39 +0000
Manifest this update: Sun 19 Apr 2026 07:21:39 +0000
Manifest next update: Sun 26 Apr 2026 07:21:39 +0000
Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: sDFKKSNG498sbwpKGmsB52CSPY1acBonO3lAmxt/RaA=)
2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 07:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Validity
Not Before: Apr 19 07:21:39 2026 GMT
Not After : Apr 26 07:21:39 2026 GMT
Subject: CN=69e48283-87ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:ff:6b:82:ad:01:42:5f:f9:fe:0f:a3:e0:
ab:14:a8:d9:f6:be:58:a4:b0:d4:be:de:d1:d3:08:
a3:55:71:72:ed:64:21:6d:7f:c1:64:b6:c6:7d:de:
3a:43:ee:91:7b:df:80:19:b2:7f:5d:d8:88:2a:8c:
3e:13:84:f9:9c:ae:8b:c3:8f:28:b1:3f:71:00:0f:
66:be:f3:3a:be:bd:ec:f9:fa:5d:e0:03:e0:b4:19:
75:3e:3b:33:cf:01:42:9f:52:92:eb:6a:1b:07:86:
3d:f9:68:7c:8c:11:d6:0b:93:2e:d8:97:b2:fb:57:
12:d1:51:3a:67:4a:5a:de:74:39:c1:2e:d3:08:0e:
81:0d:af:23:9e:e9:bc:72:1e:ad:c5:c9:bb:cc:32:
a4:1d:aa:8e:ae:5b:97:32:dc:eb:15:87:a8:05:ec:
9b:db:c2:6d:e2:f2:09:ea:0b:17:db:2a:b9:0f:37:
a9:8d:69:b2:63:cb:06:7f:ca:02:5c:03:d6:d6:6f:
9d:1c:1a:b4:e5:99:a7:1a:7a:9c:97:d2:39:5c:14:
34:74:d7:c8:76:54:c7:6a:b3:cb:94:c6:35:cf:7b:
e5:7b:56:eb:3e:73:2b:73:4f:62:9c:91:33:0b:85:
28:6f:62:e9:c1:e1:ad:63:d3:9d:35:76:58:cc:6e:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:15:5A:7F:76:61:7F:41:41:1A:03:70:0B:6E:89:B6:84:4B:DE
X509v3 Authority Key Identifier:
keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:cd:91:4e:b4:ce:12:bd:0b:c1:56:c0:80:89:a0:2e:33:
11:46:90:a4:51:5f:0e:02:8a:27:27:77:cd:0a:6a:14:00:a2:
3f:73:23:fd:52:03:78:24:49:4d:ed:5f:c3:35:a6:f3:ad:1b:
38:02:7e:c0:69:9a:db:93:83:b5:62:91:f8:73:7d:b1:2c:c2:
2e:dd:58:fc:dd:46:a3:31:22:51:52:8e:c5:d1:c5:55:ef:36:
8f:aa:fb:18:5d:58:ce:7f:14:80:75:b4:8b:24:64:8a:0f:c6:
85:95:09:b5:72:b5:9a:78:10:1c:4a:b5:f3:74:9b:fa:db:9c:
0e:62:e2:a1:83:02:85:f0:da:09:c7:a0:ff:14:9d:2d:ae:53:
50:7e:ec:90:7c:45:4d:40:97:9d:33:27:92:fb:6c:4f:ed:f1:
83:0a:89:ef:5a:d0:0b:40:81:6b:04:d5:9a:e8:75:ac:c0:e9:
d0:96:f3:9a:dd:3e:ec:18:d7:1c:75:2c:1c:82:b4:90:56:17:
20:9d:ed:bb:ad:5d:1e:cf:58:3d:68:0d:90:73:91:92:24:30:
f8:e7:75:8d:0f:9f:f3:e1:4d:5a:8f:30:a9:d7:44:d4:ab:5c:
e9:fd:dd:a5:b4:42:45:e8:d0:6d:b6:a6:ad:79:ea:ba:63:0e:
57:dd:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:27:45 2026 by rpki-client