
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json)
Hash identifier: mJctOpZX46g6HvJ32WpxASchn/QPAVn3kKqZ4TRQVFo=
Subject key identifier: 86:68:BB:5F:CB:52:58:45:0A:94:29:79:A1:01:35:08:16:50:F9:DD
Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06
Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
Manifest number: AE
Signing time: Wed 11 Mar 2026 05:59:32 +0000
Manifest this update: Wed 11 Mar 2026 05:59:31 +0000
Manifest next update: Wed 18 Mar 2026 05:59:31 +0000
Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: Wy2xFMdorLCgWJXjeWzAFdDqmBbY1VUcIT1+awEvrQQ=)
2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: VS76jVfnUICZ9bJBzzkEK0ZrDmbbMRlLDj2ohqAMUKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl
rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 05:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06
Validity
Not Before: Mar 11 05:59:31 2026 GMT
Not After : Mar 18 05:59:31 2026 GMT
Subject: CN=69b104c4-ed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:58:28:b5:43:b1:50:36:c4:b5:85:36:ab:
93:a3:a1:7e:9c:ef:18:b8:54:44:46:1d:b2:b8:28:
ca:3c:b8:11:99:d1:db:97:16:03:b2:d8:88:78:67:
43:e6:ff:37:af:a2:9b:27:27:65:ed:7b:76:f2:6f:
20:dd:b4:de:fc:f8:fb:20:02:c2:e9:4a:2c:fd:bf:
48:67:4f:13:fa:09:c2:37:2a:c7:f6:da:74:4f:d0:
29:9e:ea:63:3f:9d:49:80:76:e5:1e:06:c4:8b:0a:
bc:d1:fa:82:9a:e1:df:a5:51:74:7f:80:be:a2:a0:
9a:da:0a:b8:d4:02:29:06:98:22:75:df:20:97:13:
0a:58:08:f9:ad:a9:52:e1:bc:c5:55:50:ef:89:c9:
6a:64:25:b9:f4:d9:69:d0:d3:3d:3a:30:b7:1c:a9:
a3:8e:44:e2:b4:37:7e:39:54:17:3a:9f:2c:d2:2c:
de:7b:55:ea:01:f6:f9:28:d8:3a:d1:13:fe:99:2d:
4f:85:65:49:75:6e:34:8b:cf:b8:b3:dd:21:12:2e:
93:48:ba:e1:a3:70:97:69:41:51:e4:93:ba:69:ab:
bf:60:18:b5:9d:20:7d:e7:08:64:72:47:75:0a:3b:
a2:82:d4:20:7a:9d:9a:5a:24:b2:bc:9f:96:b9:19:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:BB:5F:CB:52:58:45:0A:94:29:79:A1:01:35:08:16:50:F9:DD
X509v3 Authority Key Identifier:
keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:2b:a9:a2:85:32:f9:6c:fb:6e:ca:00:21:8c:25:e8:95:
ac:55:d8:67:03:4d:9c:83:cd:29:b4:78:98:d4:b3:c4:89:98:
3f:68:c0:bf:d8:cf:bf:a2:14:c8:9c:86:86:9b:15:52:24:28:
64:aa:27:62:0b:ca:7c:4d:82:18:5e:38:49:3c:07:7b:96:cc:
be:12:3a:cd:71:33:98:6a:b2:2e:e2:75:53:2a:d3:6c:ec:89:
20:64:b4:a4:34:e8:f0:f2:73:b9:2a:9d:4e:73:c2:45:80:6d:
12:0d:71:ed:b4:e7:37:41:f3:8a:be:7c:8e:92:03:df:cb:f6:
15:a6:dd:2e:73:79:1a:c5:90:f7:13:5d:4e:9a:e3:dc:75:11:
cd:fb:26:55:5b:4b:b1:51:db:a5:24:8e:42:5a:38:f9:6f:af:
c6:3b:61:ac:c1:59:a2:6b:25:3f:07:7c:0b:48:c6:cc:06:87:
1c:f4:dd:c1:d6:8c:cc:3e:58:1c:65:e0:c5:c0:2e:4b:02:53:
5f:3b:ec:e0:57:2b:a2:9e:af:a5:8d:b5:96:58:0f:49:8e:35:
74:23:4d:0f:cc:67:5a:4e:b4:cd:ba:63:e8:5e:81:0c:23:41:
72:e2:97:27:25:c8:45:b3:09:2c:10:04:4b:5f:69:ce:2b:15:
10:94:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:56 2026 by rpki-client