
$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier: 5dEm9S/clN9MYbjSDITpaMbj75cGpJ0e+jhePmG9N/A=
Subject key identifier: C2:F5:25:D4:92:81:87:AE:D8:F1:4D:71:7B:50:52:B5:27:13:4D:CD
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial: 0441
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number: 042C
Signing time: Sun 05 Apr 2026 00:08:47 +0000
Manifest this update: Sun 05 Apr 2026 00:08:46 +0000
Manifest next update: Sun 12 Apr 2026 00:08:46 +0000
Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: hj/XQqf0yc+7mDak3wRwT24m+HtSvhzlmPuPIiXrxLg=)
2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: RTRGzx3DTtJG0iPu4hiw7fBG/3vhdOfJ/25U/hTfNGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089 (0x441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Validity
Not Before: Apr 5 00:08:46 2026 GMT
Not After : Apr 12 00:08:46 2026 GMT
Subject: CN=69d1a80e-296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:9e:21:9b:dd:ef:5f:66:c9:df:37:8a:3e:
71:d6:ee:58:72:5f:ce:95:8c:b7:3e:68:4c:25:ed:
a7:3e:e8:97:22:46:9e:a2:d1:96:94:81:f5:55:82:
d9:63:73:1b:48:76:e1:cf:23:8f:45:23:95:5e:42:
ac:a6:c6:ee:48:b0:6d:3d:73:34:cd:c0:e1:e9:54:
25:b2:d5:ec:df:d8:d6:6a:f7:49:35:6f:28:32:2b:
fc:71:30:7d:8d:54:9e:7b:97:2c:3d:b8:ab:78:10:
ea:50:fa:80:a3:e7:f8:62:fd:70:2f:06:57:7b:3e:
10:78:76:97:88:4a:6d:bc:88:10:93:7d:74:45:97:
eb:e0:1e:6e:72:97:c7:7c:e3:6f:72:bb:6f:97:27:
5e:74:58:c4:3f:97:4c:e4:39:94:bc:06:4f:42:6c:
30:99:66:5f:c4:d2:5a:16:85:b4:8d:48:d2:06:bf:
2f:99:a6:62:d5:92:4a:e0:d6:a8:3b:88:b3:cc:22:
59:00:dc:25:5f:d9:9e:58:17:08:72:ed:8b:ae:ff:
a2:7c:b3:b2:97:6c:c4:eb:c4:e5:c3:71:7c:63:25:
9f:a2:f0:b2:b2:d6:32:10:13:5b:72:5d:5d:26:90:
d2:9a:25:2e:16:83:39:4a:1e:38:1d:e5:26:63:fc:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:25:D4:92:81:87:AE:D8:F1:4D:71:7B:50:52:B5:27:13:4D:CD
X509v3 Authority Key Identifier:
keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:68:9c:02:13:83:e1:e6:ef:15:1c:5f:19:99:f7:67:67:
30:8c:62:21:a1:b0:bf:cc:39:ed:f2:71:8b:38:f7:ae:52:ea:
40:cb:0b:2f:7f:aa:66:74:83:16:5c:50:19:0e:e7:a9:26:66:
ae:a0:27:7b:10:02:e4:78:02:a4:cb:c0:de:28:05:9f:f0:0a:
2a:d7:d9:d1:8e:df:ab:02:61:c3:2e:15:71:94:c8:6b:2c:6a:
98:42:84:bc:9c:46:41:4e:e1:63:66:8e:69:9c:15:80:df:74:
8e:ac:e7:b4:ea:c1:bc:bf:da:e1:55:f5:69:f4:c7:9f:ef:1d:
1e:ae:ec:f1:e0:bf:46:20:74:ea:42:42:ae:de:bd:28:61:6d:
ee:20:ae:a8:f7:de:95:77:a3:f7:ca:3f:87:df:1a:fe:7f:76:
3f:01:c5:ab:c0:7f:d9:e9:9b:3b:26:8f:cb:94:5f:b6:9f:ed:
7c:1d:0b:67:51:1a:ef:96:44:f6:b7:db:fb:d5:94:ce:b4:f5:
53:07:88:90:3c:4f:4d:42:2f:c5:d3:73:a9:f8:34:5f:45:7c:
b0:76:3f:bb:0c:97:6b:0a:7d:53:8e:d0:86:aa:b2:2c:64:38:
47:6f:a6:c8:c4:ad:b6:34:e1:6d:48:72:2a:33:6f:eb:ca:f6:
25:3c:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:58 2026 by rpki-client