
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json)
Hash identifier: oksYPXh9aD4p1QLQzVq86KWwWdfLZTqW9wHCKAIXv48=
Subject key identifier: 97:4A:10:83:82:1A:D9:C7:FE:FD:95:0A:82:5C:2F:89:C9:6B:3F:FA
Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
Manifest number: 02D7
Signing time: Wed 19 Aug 2026 01:37:53 +0000
Manifest this update: Wed 19 Aug 2026 01:37:53 +0000
Manifest next update: Wed 26 Aug 2026 01:37:53 +0000
Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: QZCuS0BFRSAtRHKVnvgiy9sNmuiOtiE6jMWFCSTykZA=)
2: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: 4oINYtmMIJAI0qB/zgs7eJ/PHXiHCKVBi4RA5fWevZs=)
3: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: ZQQmEapOEB8hbnYD2748C5/tVDyFBuYad9v0XjI6Mok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Validity
Not Before: Aug 19 01:37:53 2026 GMT
Not After : Aug 26 01:37:53 2026 GMT
Subject: CN=6a8508f1-bf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:18:ad:ca:57:1f:da:43:4a:76:7b:32:99:
7f:39:d8:04:21:e9:b1:21:26:79:87:b1:73:d7:4d:
c5:01:2c:b8:94:95:ce:bf:7a:f3:37:63:34:14:c4:
4e:aa:b5:fb:f3:d6:15:c8:7d:a7:ac:f7:9e:a0:eb:
3d:d9:b8:a3:4b:25:3c:b5:b0:20:3a:4d:b8:87:56:
6d:7b:f8:95:0b:a1:c6:79:80:00:b7:8d:4e:d9:34:
63:8e:82:4b:c5:a5:fc:47:b5:95:b5:c0:a4:ae:0e:
70:74:7f:45:dc:ac:25:d2:d6:8c:c8:db:bd:12:b3:
3e:7f:d0:ba:cd:29:b3:46:f3:0b:9d:a9:24:1a:21:
6a:ab:f4:74:0c:3b:8c:de:26:8b:f5:b4:bb:00:f3:
ee:56:cc:9d:80:74:2e:24:48:e0:25:38:5d:01:a0:
45:98:90:dc:c2:31:6a:59:a1:d6:47:d5:ac:07:a0:
06:59:96:7d:27:ea:47:fa:7b:e8:0d:2a:ce:4d:4a:
58:3a:b4:91:03:75:43:7f:72:b0:9e:c9:a9:b6:9e:
16:43:5e:8d:a9:0a:b1:c8:85:e6:57:f0:f7:ce:32:
2a:f9:bb:0a:f8:f8:97:3e:d5:4f:c1:a0:2f:b1:a6:
69:d0:96:d9:d5:75:c4:1f:b5:76:46:d0:a6:28:df:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:10:83:82:1A:D9:C7:FE:FD:95:0A:82:5C:2F:89:C9:6B:3F:FA
X509v3 Authority Key Identifier:
keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:96:61:69:12:e6:12:d4:8e:c6:42:d4:93:b0:97:d3:24:
8b:8f:16:e5:50:67:ca:c9:cd:a5:e1:ee:dc:c9:db:5d:de:b0:
4c:16:b1:65:e2:cc:ff:40:70:8f:67:19:a6:ac:51:bb:c7:05:
ff:cc:a4:3c:51:e3:20:a1:f9:3c:86:fc:64:17:31:a2:cb:ae:
6c:d4:33:fe:e4:62:63:56:d9:d3:cb:3b:37:4e:db:b3:d0:3f:
b2:7e:ea:bf:5a:95:c5:66:2e:31:3d:83:ac:af:f2:5b:86:b9:
69:95:5d:ca:e6:35:2f:88:08:ef:cb:e2:fe:9f:c9:cc:b7:cb:
ff:05:b8:f2:61:25:02:4c:5c:be:dd:de:77:c5:7b:a0:72:ef:
70:f5:00:2c:a4:23:e6:42:7c:73:79:12:de:31:f0:52:d3:67:
a2:49:b9:09:f1:4b:0c:ab:00:9c:31:8d:0c:40:82:0e:ab:07:
e0:cc:4a:1f:b7:fe:b8:d3:63:c3:20:f9:8b:fc:57:de:06:02:
f8:2a:66:41:0d:76:3d:47:26:df:e8:4f:74:57:b4:01:ed:1e:
a2:b4:90:98:2a:58:4a:b4:78:bc:b7:95:e6:5b:ad:2c:c7:67:
7b:9a:b0:c5:d4:0c:d1:42:1f:7b:9a:63:f4:24:a1:59:28:50:
01:a1:97:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy
MUYwRDNCRTYwHhcNMjYwODE5MDEzNzUzWhcNMjYwODI2MDEzNzUzWjAYMRYwFAYD
VQQDEw02YTg1MDhmMS1iZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP0YrcpXH9pDSnZ7Mpl/OdgEIemxISZ5h7Fz103FASy4lJXOv3rzN2M0FMRO
qrX789YVyH2nrPeeoOs92bijSyU8tbAgOk24h1Zte/iVC6HGeYAAt41O2TRjjoJL
xaX8R7WVtcCkrg5wdH9F3Kwl0taMyNu9ErM+f9C6zSmzRvMLnakkGiFqq/R0DDuM
3iaL9bS7APPuVsydgHQuJEjgJThdAaBFmJDcwjFqWaHWR9WsB6AGWZZ9J+pH+nvo
DSrOTUpYOrSRA3VDf3Kwnsmptp4WQ16NqQqxyIXmV/D3zjIq+bsK+PiXPtVPwaAv
saZp0JbZ1XXEH7V2RtCmKN+yiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdKEIOC
GtnH/v2VCoJcL4nJaz/6MB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz
QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX
VGJxMjBEY1NLeW9oOE5PLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV2mWYWkS5hLUjsZC1JOwl9Mki48W5VBnysnNpeHu3MnbXd6wTBaxZeLM/0Bw
j2cZpqxRu8cF/8ykPFHjIKH5PIb8ZBcxosuubNQz/uRiY1bZ08s7N07bs9A/sn7q
v1qVxWYuMT2DrK/yW4a5aZVdyuY1L4gI78vi/p/JzLfL/wW48mElAkxcvt3ed8V7
oHLvcPUALKQj5kJ8c3kS3jHwUtNnokm5CfFLDKsAnDGNDECCDqsH4MxKH7f+uNNj
wyD5i/xX3gYC+CpmQQ12PUcm3+hPdFe0Ae0eorSQmCpYSrR4vLeV5lutLMdne5qw
xdQM0UIfe5pj9CShWShQAaGXyQ==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:35 2026 by rpki-client