
$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier: R43yrkANVhDov85dGLKILC8Em6Y9KGuXwy5tcAhHx70=
Subject key identifier: 5D:5D:58:38:A2:E7:96:F1:DA:F4:3D:D9:D6:06:4B:14:BC:44:22:DD
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial: 048A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number: 0474
Signing time: Fri 21 Aug 2026 00:00:23 +0000
Manifest this update: Fri 21 Aug 2026 00:00:22 +0000
Manifest next update: Fri 28 Aug 2026 00:00:22 +0000
Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: LPm+k6l8MCOm7TzLnvp9VD8FvAxoGl9Sx7j4vb1Ho8w=)
2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: hABnM/97lZ7YUUne7x9/QuRRaHhaVqPrBbk6si90BL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Validity
Not Before: Aug 21 00:00:22 2026 GMT
Not After : Aug 28 00:00:22 2026 GMT
Subject: CN=6a879517-3207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:63:8d:70:83:02:75:ae:77:70:94:a4:5f:
53:9e:36:2a:91:ce:d8:04:f6:2d:30:a4:b6:7e:ab:
a8:69:68:77:db:9d:61:2f:97:27:2e:21:7a:7c:02:
6e:bd:9b:20:3a:b9:00:14:e6:81:af:dd:ec:51:2b:
7c:77:03:44:b6:9a:17:1d:75:6c:ee:fa:ce:e6:f5:
61:5b:90:31:e0:b4:60:ac:f8:5b:e8:c8:c4:b8:13:
75:1a:30:7d:df:1c:18:ac:1f:72:08:45:0d:36:d2:
24:e2:cf:33:02:1b:5d:0a:97:82:80:74:20:06:28:
7f:84:1c:88:8b:9c:94:df:d5:61:94:4a:90:f3:7a:
f7:92:09:eb:12:c5:86:e9:7a:01:2b:58:81:ff:bf:
4b:06:26:a1:5f:81:c7:8f:e3:db:80:04:1d:86:ed:
a8:da:15:83:16:61:62:16:cc:e0:b8:1b:c5:68:8b:
27:e6:d5:7c:1b:ee:c7:20:9b:bd:9f:25:db:3c:60:
62:f6:14:ee:06:81:05:90:68:ad:e6:a0:f7:e7:1a:
fc:8f:f4:76:2f:35:91:43:f0:43:56:47:ec:d2:97:
20:8e:c5:71:93:4b:7d:0e:bf:43:98:7a:ec:a9:53:
26:28:29:cf:1e:04:d5:94:9b:e0:f8:39:0a:0b:3b:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:58:38:A2:E7:96:F1:DA:F4:3D:D9:D6:06:4B:14:BC:44:22:DD
X509v3 Authority Key Identifier:
keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a2:fb:6e:08:2c:55:0a:ff:aa:b0:70:4e:e6:2c:0f:03:54:
f6:fd:3d:11:6e:8a:6a:73:f4:ab:a0:1d:f7:b8:59:2a:b9:53:
02:85:75:50:df:d5:ca:c7:bd:33:82:87:ca:cf:aa:86:33:b5:
b2:1e:8e:32:30:a9:68:27:de:02:59:89:b9:ff:c4:02:41:40:
46:af:09:6b:22:e6:92:34:e1:cc:44:cf:63:8e:e9:5a:3e:ac:
b2:f8:76:9e:bb:b1:26:f0:33:3f:79:ec:72:5d:0a:49:4c:b5:
5e:1a:98:9e:e6:50:97:17:7a:c8:74:9b:de:05:eb:64:cd:65:
cb:36:46:0b:c3:ed:30:c1:c6:59:fc:9b:c6:93:9a:63:db:2f:
12:2d:3f:65:6d:68:62:8f:6e:00:62:94:ea:2f:78:94:ff:9d:
f3:c7:7e:fe:4a:f2:6c:38:80:7d:e3:12:e4:bf:26:87:fe:39:
02:c0:6a:94:99:79:cd:54:cd:0b:d7:ac:ab:04:27:20:05:76:
c6:9d:01:25:19:96:5a:1a:99:ed:58:bb:b5:58:e8:ae:f9:8d:
5f:ee:5a:4f:63:92:20:10:42:d7:3b:d3:b4:d2:30:f9:73:79:
44:a3:08:d0:2d:02:df:0c:10:7d:1c:71:d3:c1:5e:f8:f7:ae:
f5:c6:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:26 2026 by rpki-client