
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json)
Hash identifier: bcESp6U1yD01X6CNjFxkcWjAvIbvjSw5Dg2BkRvYljE=
Subject key identifier: 9E:A4:FF:12:DE:91:06:D9:A0:51:F4:95:62:BA:36:5D:56:1E:E3:14
Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490
Certificate serial: 35D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
Manifest number: 359B
Signing time: Tue 18 Aug 2026 14:18:41 +0000
Manifest this update: Tue 18 Aug 2026 14:18:40 +0000
Manifest next update: Tue 25 Aug 2026 14:18:40 +0000
Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: +xT3vf+sgUiIkD5Lc2LoCKZEfvMQ8ZaaudVpqfU1CWU=)
2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=)
3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 9fz8ROlxgIz9BeZ3bDwbubljhDBRymKASujcQJN55ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl
rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13780 (0x35d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490
Validity
Not Before: Aug 18 14:18:40 2026 GMT
Not After : Aug 25 14:18:40 2026 GMT
Subject: CN=6a8469c1-ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8c:93:ba:ea:e3:30:5c:36:b4:fb:d9:26:d0:
45:1f:06:27:46:a8:05:e8:b9:48:b4:a3:73:e6:c1:
49:af:83:e9:52:a6:1b:15:37:fc:a4:ad:02:93:aa:
73:46:3e:77:2f:0e:50:9f:9c:f8:41:80:24:51:c7:
d0:53:46:2a:16:fa:07:4b:d5:9b:db:6c:37:b6:c3:
cc:b4:71:91:4d:6c:c4:ea:0f:e7:9a:f9:f2:50:a5:
0d:d2:64:74:9f:c4:2b:76:22:90:6e:79:1d:c2:95:
2f:56:f5:b1:76:59:81:7f:6e:ad:86:ac:85:53:d1:
9b:c1:3e:c7:f9:fb:8b:4a:e1:99:a2:ab:dd:b7:c7:
ce:f0:d4:39:3a:ff:ce:3e:3f:be:0b:8d:6e:74:c1:
82:21:4f:f7:b6:1c:75:21:38:4b:84:6b:68:fd:82:
ff:d3:3f:ec:1e:fc:aa:ec:4d:de:36:63:ec:ec:82:
aa:da:ef:52:2d:03:41:d9:d4:c1:e0:9b:7e:00:bc:
2f:db:67:23:30:03:d4:29:0e:b5:d0:5b:c5:71:0e:
d0:74:6f:ae:44:c5:95:06:f3:56:57:95:86:e0:30:
83:74:8e:90:f7:9b:78:0a:a6:f8:dd:56:92:ed:4e:
54:d3:34:45:5f:e6:20:b6:33:a1:b2:cf:78:01:6c:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A4:FF:12:DE:91:06:D9:A0:51:F4:95:62:BA:36:5D:56:1E:E3:14
X509v3 Authority Key Identifier:
keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:b5:e2:ac:23:3d:61:81:ff:78:e8:f8:d7:f8:06:cd:2b:
fa:7b:11:e3:ab:09:a8:a3:71:bb:03:7f:f5:43:95:f2:8e:25:
26:fd:38:61:dc:9d:46:87:59:a1:35:d0:2c:1e:ae:8e:29:ed:
e3:e6:c1:46:47:18:98:3a:07:e2:27:42:a9:b4:2f:83:90:35:
89:30:90:cd:e0:df:35:e6:92:62:cc:40:f2:90:5a:9f:72:60:
c6:ee:78:41:60:2c:4c:f6:f5:c1:f4:02:cc:a8:09:cd:7d:b6:
f5:bf:d9:56:46:58:7c:61:32:a3:8e:5f:e2:8b:42:51:50:48:
62:e1:87:d9:f6:ae:d5:d0:d9:db:93:e7:96:e5:42:fe:ff:91:
4c:23:b9:5d:64:03:52:62:43:30:06:96:8b:50:2d:c3:56:4e:
90:5d:97:66:64:3a:9b:ca:7d:7a:88:4d:e5:68:d5:59:52:b6:
35:2e:d5:3e:61:88:db:d9:48:8c:74:21:6b:53:80:b8:30:c8:
a5:77:fb:7f:ca:11:52:aa:35:ff:65:18:67:b5:ac:5f:bb:cc:
da:76:da:d9:4c:f7:96:1c:e5:de:0e:51:c3:2c:11:44:e2:45:
b7:4c:8b:78:a4:ed:85:8e:55:f4:7c:88:26:b4:cb:a1:d4:eb:
f2:1e:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:05 2026 by rpki-client