
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json)
Hash identifier: mAPklGlEvkOrIqODXR16wRHLHA3vGpPIxnFt/WEQM54=
Subject key identifier: E3:22:20:C1:2F:71:F6:7C:53:25:D2:89:B7:2F:8C:A3:D2:11:89:F1
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial: 0ADA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
Manifest number: 0ABE
Signing time: Tue 28 Jul 2026 19:46:37 +0000
Manifest this update: Tue 28 Jul 2026 19:46:36 +0000
Manifest next update: Tue 04 Aug 2026 19:46:36 +0000
Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: TRRbJhJDd48TJJCj6LwrMP5kO83qJocpcchBUv0Iw+4=)
2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: 69MhSA35Y7+oCxeHTa4ZtgrfWQvl9S9VgT4gK56n3vE=)
3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: ub4EJQqnSlf7Goi2AexBlDLgYVz7bOdibjQieFCvb3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2778 (0xada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Validity
Not Before: Jul 28 19:46:36 2026 GMT
Not After : Aug 4 19:46:36 2026 GMT
Subject: CN=6a69071c-88fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:4e:30:f0:10:b4:83:d4:cc:0e:98:9b:8f:
96:b4:5b:5a:03:08:34:6d:0c:51:cb:53:bf:55:22:
ef:93:91:ef:47:a1:1c:fe:08:29:b2:1a:54:8a:e2:
6f:67:3f:2c:3a:50:f3:06:6c:44:1d:8f:3b:b6:19:
8e:d3:cb:bc:f7:59:6f:be:00:d9:da:97:27:b6:fd:
bf:2b:33:82:8e:2e:3c:cd:d3:6e:9a:3d:c3:43:a4:
5c:56:84:f6:cf:ae:40:3a:c2:9e:61:a3:ed:64:5c:
f9:b7:4b:31:d3:56:8f:bf:64:a9:fa:d9:16:54:b5:
70:9f:6a:5f:7c:03:1e:04:0f:03:d1:9f:ad:c8:02:
84:a0:2c:8c:a2:12:fa:0c:59:d1:19:a8:86:fc:78:
e1:c7:69:0a:ec:78:11:d6:98:1a:fe:34:ca:7f:6b:
76:25:19:f6:80:ea:c9:8a:28:94:dc:6b:20:d5:5a:
50:fa:43:3b:34:d9:f6:07:77:09:f2:82:35:c3:c8:
a7:8b:a5:97:5e:a1:4e:80:f6:f3:d5:91:10:6c:66:
45:b7:71:fd:d6:71:7e:51:34:6c:58:f5:bb:e1:05:
f2:06:c5:25:e8:63:71:2c:b1:d9:f0:24:67:64:70:
9b:78:a5:86:1b:6f:91:50:39:10:7d:b6:7a:66:ee:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:22:20:C1:2F:71:F6:7C:53:25:D2:89:B7:2F:8C:A3:D2:11:89:F1
X509v3 Authority Key Identifier:
keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:48:38:ec:d0:12:4d:47:36:2c:11:cc:ee:44:08:77:f7:
a8:93:63:1b:f3:d3:c8:ef:f4:49:94:f1:43:d2:b5:7d:ac:18:
90:a9:35:f4:9b:9c:a8:80:44:ac:aa:fb:db:62:89:38:98:15:
25:05:bb:0d:b7:21:75:73:70:6f:77:28:22:1f:f1:52:d9:fc:
b4:20:da:c6:bf:f1:e8:58:87:41:fa:81:05:a5:76:a3:1f:06:
6c:8d:82:94:f7:af:f1:55:1a:af:19:fb:7c:9a:b6:4a:8e:fc:
f1:75:61:bf:2d:e6:04:24:e9:77:35:9f:fa:e3:15:c5:65:18:
5f:e9:e8:e4:d9:05:82:11:f8:03:30:22:18:c0:d8:2e:37:b4:
04:01:d3:dc:63:6f:79:85:60:d7:62:f3:8a:ba:af:3d:e3:21:
be:f5:eb:5f:c2:e8:a7:f6:b5:05:a7:50:33:3b:62:65:b8:fc:
54:07:7c:42:6c:6b:b3:58:07:55:ec:b5:f8:d2:26:76:ec:d0:
8d:e0:7f:62:8d:95:91:68:e3:db:5a:82:2e:a1:b1:46:dc:22:
1e:bd:a2:6f:a2:13:d8:29:68:f9:3c:ee:8b:49:79:0c:aa:d5:
15:25:c4:01:da:22:35:90:01:55:09:2d:f5:4c:8e:96:d5:b3:
18:ba:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:43 2026 by rpki-client