
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json)
Hash identifier: npw/K9xJFCFiV5piAubdDwv+M8NFe+g+M23AMwbBcO4=
Subject key identifier: D7:D1:1A:B0:F7:CE:03:06:60:30:A4:02:EC:15:75:32:B0:B7:46:2F
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial: 0A86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
Manifest number: 0A6E
Signing time: Sat 28 Feb 2026 19:51:57 +0000
Manifest this update: Sat 28 Feb 2026 19:51:56 +0000
Manifest next update: Sat 07 Mar 2026 19:51:56 +0000
Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: qyMSNFpzyegYMyY5lJZec9X92cqph7GRI9qoAPf4KaI=)
2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: wvtmiBqknG0Ex14oXMBXLdzRkgI1rAedN0Py7FPTv0Q=)
3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2694 (0xa86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Validity
Not Before: Feb 28 19:51:56 2026 GMT
Not After : Mar 7 19:51:56 2026 GMT
Subject: CN=69a3475c-1c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:bb:59:7f:01:d7:93:31:02:56:85:cc:89:
d8:82:77:16:bb:4a:69:a2:9c:ba:7e:89:49:ed:4d:
8d:77:f8:bf:3f:c1:bb:0a:9e:31:75:25:41:a0:33:
a8:5d:15:f2:89:f2:00:3d:9b:ff:a5:77:fd:c9:59:
d5:89:1a:a7:b7:2e:25:71:41:23:78:eb:0d:a9:81:
d1:6a:3a:17:18:72:bf:d4:a6:7c:e5:f9:31:c5:d5:
02:83:d7:49:2c:2e:cb:97:c2:3c:55:d1:2d:66:e8:
1b:d0:35:23:e3:dc:5e:04:74:e6:a5:3e:d8:58:23:
bb:6b:e3:87:06:a9:27:56:6b:ee:f6:58:84:21:48:
43:8e:cb:2e:6b:16:6b:ff:3a:bd:11:46:5e:96:ef:
ab:9b:27:81:92:26:b1:3a:f5:1e:47:65:b4:19:48:
d1:9e:ec:ea:a4:7f:d6:58:bc:e9:2f:35:27:e5:90:
09:69:d3:b5:16:61:3e:61:1e:44:2b:6a:3b:76:36:
22:db:47:fb:83:9f:a0:9c:5b:02:34:11:81:51:15:
77:74:4f:16:2e:c8:05:4f:7f:a8:e6:0c:97:23:40:
17:69:4a:3d:3a:a0:76:19:8d:ca:69:51:9e:1d:57:
c2:bc:f2:47:a4:eb:73:e5:ea:ce:b6:2b:b1:bb:21:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D1:1A:B0:F7:CE:03:06:60:30:A4:02:EC:15:75:32:B0:B7:46:2F
X509v3 Authority Key Identifier:
keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:8f:d6:78:78:a8:0f:d5:7d:ed:34:50:0b:99:e1:f2:56:68:
42:5e:41:77:7c:50:8a:ad:88:fa:5d:2b:14:1e:16:c8:0a:28:
d9:2b:23:a7:20:5b:14:d7:c4:e3:fb:81:73:5e:47:a9:2a:3f:
bc:22:7e:bb:4e:d2:ed:6e:2e:32:93:38:6b:c0:1d:1e:b1:e2:
34:92:8b:88:7c:92:b8:04:43:e8:7a:12:8c:c0:93:64:b0:a0:
12:87:83:ac:8a:67:45:51:b6:de:89:10:89:6f:1e:37:c4:97:
17:5f:9c:9c:32:2b:d0:e5:45:fd:4d:bc:45:03:56:4e:13:55:
fa:c1:e3:b3:64:72:f3:9d:28:74:92:0d:d2:08:a2:83:6c:5d:
5b:81:28:b0:3c:69:0d:0b:58:9a:0e:22:92:f3:66:3e:de:ad:
35:8a:23:1c:92:d6:d1:51:8a:74:44:97:cd:c8:de:14:c7:d2:
12:2f:ff:1f:f0:a9:00:0a:74:ba:36:da:57:e4:f7:3a:97:02:
19:67:a7:c8:3b:ff:f8:aa:2b:0e:c6:cd:1a:74:1b:6c:7f:fc:
50:e0:e3:d9:f0:15:28:ba:4d:9e:5d:1d:08:31:13:40:bd:f8:
e6:e9:60:ad:97:2b:8c:13:09:de:91:07:2d:16:0f:ae:01:21:
84:a6:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:27 2026 by rpki-client