
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json)
Hash identifier: /FMUFScX7xIwc6qrVTt7DAIj8MYtZHki54hkvEzZIEs=
Subject key identifier: 27:DC:A7:0C:6E:C8:44:14:BD:85:56:47:61:84:D1:D4:48:55:68:B2
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial: 0AEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
Manifest number: 0AD2
Signing time: Fri 04 Sep 2026 19:20:29 +0000
Manifest this update: Fri 04 Sep 2026 19:20:29 +0000
Manifest next update: Fri 11 Sep 2026 19:20:29 +0000
Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: DX/bxDLf78+rjSzwwphJbAjIeZYiqc+cKQH4Ai8BACE=)
2: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: ub4EJQqnSlf7Goi2AexBlDLgYVz7bOdibjQieFCvb3s=)
3: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: 69MhSA35Y7+oCxeHTa4ZtgrfWQvl9S9VgT4gK56n3vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Validity
Not Before: Sep 4 19:20:29 2026 GMT
Not After : Sep 11 19:20:29 2026 GMT
Subject: CN=6a9b19fd-41c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:98:e8:06:3e:99:60:23:a8:61:29:62:b3:
90:a7:20:3f:a5:c6:e6:d6:81:d5:15:01:0d:52:cb:
37:2a:5f:87:4c:ad:47:de:d1:ad:2e:f4:98:6e:5d:
d2:1e:4e:03:55:e9:3d:0a:1d:7f:ef:51:53:1a:1a:
64:24:a0:a5:5e:32:e8:88:82:b4:cf:b2:d8:eb:2b:
6a:48:94:a1:e7:cd:6f:40:e1:54:97:60:65:56:db:
0d:89:f4:89:7e:01:a9:76:50:c1:56:63:94:56:9f:
15:77:75:53:b6:84:f9:06:a8:87:70:34:19:6e:93:
a6:6d:f1:55:24:56:43:f6:f3:af:da:3e:0f:ae:49:
55:8c:0f:b8:81:08:32:a2:8a:25:a6:55:6b:95:5b:
e7:6e:04:b1:bd:d8:b3:3a:21:d7:74:ea:49:32:57:
c1:37:55:59:37:a3:20:3c:57:c6:1c:2a:93:d3:32:
d2:70:f9:83:0e:01:62:dc:67:83:4d:31:19:cf:18:
10:7c:88:04:c3:49:52:07:46:43:1c:d7:0b:63:0c:
20:56:29:53:23:f1:9a:18:12:f8:64:18:4a:30:2f:
8c:d7:85:f4:ba:c2:18:16:fc:97:49:87:a3:aa:a3:
f9:c2:8a:16:21:89:64:6c:e7:16:f6:5a:a2:9b:32:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DC:A7:0C:6E:C8:44:14:BD:85:56:47:61:84:D1:D4:48:55:68:B2
X509v3 Authority Key Identifier:
keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:0b:ab:44:c3:30:9e:28:f0:96:bf:9b:47:03:c8:f6:4b:
d1:29:29:d2:9f:1e:ee:5c:cf:a1:d6:d2:3f:46:cb:46:4d:2d:
b0:84:87:6f:d2:6d:a9:9c:9b:bf:46:7a:4e:bf:99:15:7b:c8:
e3:8f:ee:f0:5f:73:28:30:2b:d5:ad:0b:3a:0f:15:8b:44:94:
4b:8c:17:91:3d:12:5f:cf:bd:25:ab:c8:ff:44:e4:78:f8:86:
43:39:38:ec:2d:b1:6b:5e:c5:a2:17:ed:39:cb:38:50:72:e5:
d1:88:be:2e:37:c6:d1:c3:ab:9c:81:b8:7f:69:4d:5c:79:85:
6f:c5:c3:b2:45:af:1f:6c:f8:e2:40:92:6d:e2:9b:f1:88:d6:
04:cd:e6:91:c2:03:1e:48:d6:c8:19:1b:88:c4:86:29:65:02:
64:0b:b1:7e:7d:dd:d1:c8:f7:f5:a1:36:44:31:fc:41:b6:6e:
af:37:28:ab:3b:ce:82:71:e2:26:9b:66:db:ee:1a:4c:96:a9:
ab:83:28:17:35:72:03:30:dc:58:b3:41:90:95:cd:47:fd:60:
63:f2:a2:1f:b1:92:9c:3a:f7:f7:b7:f4:11:5f:e5:af:fe:ec:
25:9b:85:4e:a5:dc:ee:98:e4:e6:b3:46:a6:fc:b6:28:ba:cf:
63:84:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:44:34 2026 by rpki-client