
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json)
Hash identifier: kbPyIgWq2KvxGAWNbQv07dHtqibwGfFOMEG6qJkimCs=
Subject key identifier: 12:26:09:41:12:2F:91:61:5F:3C:30:14:2A:01:CE:46:99:45:05:A9
Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Certificate serial: 0562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
Manifest number: 054B
Signing time: Fri 10 Jul 2026 23:56:39 +0000
Manifest this update: Fri 10 Jul 2026 23:56:38 +0000
Manifest next update: Fri 17 Jul 2026 23:56:38 +0000
Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: Zg42SMcKaNEi54iZOF0ecYljncAG917x4twNEPYZxYQ=)
2: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=)
3: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 23:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Validity
Not Before: Jul 10 23:56:38 2026 GMT
Not After : Jul 17 23:56:38 2026 GMT
Subject: CN=6a5186b7-d6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:e3:9f:89:88:a4:30:8d:36:f8:33:9a:72:
41:ae:2e:84:a2:30:e2:71:1d:51:d2:62:61:cd:bd:
89:1f:6e:8e:47:28:9e:32:5c:47:01:83:ff:1a:7a:
de:4e:c6:3f:d3:02:f9:7e:b9:28:17:f5:70:f2:b0:
b7:15:f6:92:31:c2:07:08:9e:0b:75:9e:01:13:a7:
82:29:92:99:d0:45:ec:cd:4a:75:65:5f:31:38:34:
ab:17:11:f8:e1:af:3d:3c:75:b7:46:f6:a2:e1:3f:
32:c1:d0:4c:b9:24:33:de:a0:41:2f:af:7c:39:56:
90:e1:1f:69:9a:fb:67:88:51:42:23:59:ae:8f:69:
b2:25:e3:d8:dd:40:03:c4:ae:a1:f3:8f:94:80:d4:
a0:44:8f:2f:10:9c:9d:9d:dc:ac:dc:5a:c7:3a:5d:
54:76:5c:38:bb:bd:25:dc:72:da:ee:ea:74:9f:5f:
e8:30:e2:62:9f:a9:d1:3b:e9:21:41:16:fb:ee:6c:
32:48:52:72:f0:b9:9f:db:2e:6d:e8:bd:76:1b:0b:
6a:7d:49:c1:15:79:20:57:9d:2e:dc:1a:d1:db:6c:
4a:ff:fa:52:74:d3:ef:58:71:5c:f7:8f:b2:af:87:
6c:f2:ee:2b:89:f1:fd:b8:b3:18:fd:23:a0:1b:3e:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:09:41:12:2F:91:61:5F:3C:30:14:2A:01:CE:46:99:45:05:A9
X509v3 Authority Key Identifier:
keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:c7:26:0a:cb:54:79:80:74:3c:bc:63:d0:3c:ec:d8:ba:
53:dc:26:38:bf:9f:45:16:8d:63:b0:f9:0f:7d:38:0a:b3:a4:
bf:3a:fb:9d:7a:97:63:09:97:dd:44:84:25:bd:38:b9:4c:f1:
a6:4d:31:6e:1d:06:ee:14:9b:c2:9d:08:ac:22:09:2f:6d:e9:
86:7f:3a:2c:a0:7c:47:e9:36:43:33:54:74:d6:d4:31:b0:f4:
bb:0b:0c:73:03:4e:7a:06:9d:eb:3b:81:5a:be:c0:86:75:8a:
c4:09:96:8b:2c:7f:c4:a4:ae:55:16:2f:cc:cf:84:f8:1e:fb:
61:4f:4b:2a:2a:06:ed:68:6a:e9:e3:9d:9f:8e:44:6f:e7:e8:
c1:71:cd:7f:b0:bd:6e:83:50:1d:e3:29:89:f6:63:c5:81:a9:
e2:0f:89:20:12:3a:eb:ac:d5:03:fa:0a:e8:95:96:cd:a0:7d:
6e:61:f7:81:f8:97:cb:13:5b:da:86:5b:03:97:bd:e2:99:3c:
79:e9:11:c7:9e:c0:34:90:e5:80:96:bb:b3:2c:7f:91:ad:60:
f2:ef:7c:4e:a9:10:2b:39:cd:3b:c4:ad:70:e6:4e:e5:95:74:
78:38:29:40:d0:c8:2d:4b:bf:5c:75:03:ff:ea:bc:6d:d0:fa:
48:d9:be:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5
MERFNkFERUQwHhcNMjYwNzEwMjM1NjM4WhcNMjYwNzE3MjM1NjM4WjAYMRYwFAYD
VQQDEw02YTUxODZiNy1kNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Ifjn4mIpDCNNvgzmnJBri6EojDicR1R0mJhzb2JH26ORyieMlxHAYP/Gnre
TsY/0wL5frkoF/Vw8rC3FfaSMcIHCJ4LdZ4BE6eCKZKZ0EXszUp1ZV8xODSrFxH4
4a89PHW3Rvai4T8ywdBMuSQz3qBBL698OVaQ4R9pmvtniFFCI1muj2myJePY3UAD
xK6h84+UgNSgRI8vEJydndys3FrHOl1Udlw4u70l3HLa7up0n1/oMOJin6nRO+kh
QRb77mwySFJy8Lmf2y5t6L12GwtqfUnBFXkgV50u3BrR22xK//pSdNPvWHFc94+y
r4ds8u4rifH9uLMY/SOgGz4qRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBImCUES
L5FhXzwwFCoBzkaZRQWpMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4
MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp
N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARObHJgrLVHmAdDy8Y9A87Ni6U9wmOL+fRRaNY7D5D304CrOkvzr7nXqXYwmX
3USEJb04uUzxpk0xbh0G7hSbwp0IrCIJL23phn86LKB8R+k2QzNUdNbUMbD0uwsM
cwNOegad6zuBWr7AhnWKxAmWiyx/xKSuVRYvzM+E+B77YU9LKioG7Whq6eOdn45E
b+fowXHNf7C9boNQHeMpifZjxYGp4g+JIBI666zVA/oK6JWWzaB9bmH3gfiXyxNb
2oZbA5e94pk8eekRx57ANJDlgJa7syx/ka1g8u98TqkQKznNO8StcOZO5ZV0eDgp
QNDILUu/XHUD/+q8bdD6SNm+TA==
-----END CERTIFICATE-----
Generated at Sun Jul 12 09:08:18 2026 by rpki-client