
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier: KfUE31ibnPifefOCAVSAelYl+XG0fbSrY4u7gjxLjnk=
Subject key identifier: EE:9C:14:24:96:3E:69:A3:71:66:4B:3F:30:12:C1:AA:DF:CD:39:0B
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial: 313C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number: 3108
Signing time: Tue 18 Aug 2026 15:30:27 +0000
Manifest this update: Tue 18 Aug 2026 15:30:26 +0000
Manifest next update: Tue 25 Aug 2026 15:30:26 +0000
Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: WkngOS4FVpiBiNVVeHAmSzQ4e/uNrOSrIO/xntFNWhM=)
2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: B5rWzBjI7BfkOi4vSBBhpW3ifXKdbuWjkXECi3PmcCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12604 (0x313c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Validity
Not Before: Aug 18 15:30:26 2026 GMT
Not After : Aug 25 15:30:26 2026 GMT
Subject: CN=6a847a93-6843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:86:ea:85:d7:13:fa:3b:9c:8b:bd:3d:2b:
cb:34:91:fd:a8:a5:78:1c:91:1a:7e:d9:52:4a:2d:
9f:bb:c3:b4:2a:65:89:55:ef:0f:97:f2:31:19:28:
de:8e:60:1f:1d:a7:2f:ec:93:c9:f1:dc:ba:d4:66:
3f:cb:5d:cc:b1:28:f4:de:cb:ff:11:4d:7d:28:50:
0b:cc:a0:fe:03:46:8c:15:d8:7d:f3:c9:17:c3:1b:
4d:13:33:3a:15:af:4b:cb:2f:0f:aa:30:8d:74:ee:
1b:6a:a8:b9:46:45:55:83:6d:d3:65:99:a2:a6:de:
54:34:41:8f:c1:66:e7:e6:38:89:8a:2e:c8:bf:19:
1f:a0:be:a8:e8:57:de:6b:de:55:f4:85:f5:11:32:
cd:8f:94:50:05:ba:5e:c5:30:9d:60:76:e1:b7:db:
4f:7d:36:d1:7a:e9:09:a4:63:04:c4:e8:45:c3:85:
7c:cf:08:d8:71:3c:16:9e:8d:fe:cf:9f:67:70:4d:
32:23:41:87:e2:b0:a1:10:ee:7c:fa:fa:f3:c0:e1:
37:5d:f4:cb:6a:58:78:13:a0:00:5f:e5:80:74:ac:
b9:55:a0:e0:ff:8e:fc:99:56:11:a5:91:50:5f:43:
14:23:9d:bb:4a:05:77:d7:cb:ea:0c:a5:d3:fd:10:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:14:24:96:3E:69:A3:71:66:4B:3F:30:12:C1:AA:DF:CD:39:0B
X509v3 Authority Key Identifier:
keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5c:22:cd:bc:b9:ec:a0:7c:58:28:6c:77:af:13:ed:43:b0:
7a:3c:a0:da:52:be:d1:ca:b4:e2:d6:ec:be:3b:c6:d3:36:0e:
4d:5c:04:25:be:b3:6d:52:7e:c2:bc:94:6b:44:92:8f:f6:47:
22:ee:67:dd:fb:16:2e:7c:bf:0c:96:2e:bd:96:96:b3:87:e9:
c2:4c:0d:f5:bf:98:2e:1c:f6:a9:a4:f1:f9:95:68:ac:f0:09:
15:41:b6:7e:1c:c1:1b:51:03:83:38:12:0d:cd:e7:0f:66:c1:
4d:0f:cc:cf:10:0e:9d:61:f1:0e:60:a5:3c:78:74:49:36:7e:
9b:da:47:71:dd:f9:fe:ab:e3:f0:44:4b:7a:cc:2b:0b:f9:d6:
8a:12:14:09:5f:f3:93:eb:b3:41:f0:0d:19:ce:a3:77:ea:81:
47:66:8d:d2:96:a3:2c:d0:92:a5:47:90:43:e0:73:49:3f:7a:
ac:d6:e8:83:d7:6f:4e:07:99:15:1e:30:f7:ee:a3:c3:f4:f1:
8c:17:17:ae:c0:bf:c6:c7:56:de:df:24:77:9b:d3:99:6e:f4:
63:2f:be:e9:a9:1d:1c:8a:ff:a6:a7:8c:d7:a2:61:17:cb:f7:
a9:a7:50:79:8b:6f:b5:b6:b6:cd:b8:31:99:cf:10:c5:0e:24:
74:05:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:37 2026 by rpki-client