
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json)
Hash identifier: ssgfmcGXKfCSCiD+VuelVqdeRfjIGnXYaY0cG0J1104=
Subject key identifier: 08:35:3C:0D:38:00:6C:ED:CA:1D:1B:67:47:B6:08:B7:CA:16:AA:83
Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Certificate serial: 02CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
Manifest number: 02C0
Signing time: Sun 05 Jul 2026 01:48:07 +0000
Manifest this update: Sun 05 Jul 2026 01:48:06 +0000
Manifest next update: Sun 12 Jul 2026 01:48:06 +0000
Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: LLm7w0x5mam8fTw4EJjvmh8m4mWQgl4aooeL5c1Jp40=)
2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: ZQQmEapOEB8hbnYD2748C5/tVDyFBuYad9v0XjI6Mok=)
3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: 4oINYtmMIJAI0qB/zgs7eJ/PHXiHCKVBi4RA5fWevZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 01:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Validity
Not Before: Jul 5 01:48:06 2026 GMT
Not After : Jul 12 01:48:06 2026 GMT
Subject: CN=6a49b7d7-543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:56:2a:5b:6d:fe:38:8d:8f:b3:88:e9:ed:
ce:32:7c:9c:88:0d:6e:97:72:7c:4b:06:8d:83:68:
b5:dd:ea:38:83:13:2c:79:b8:a7:68:aa:31:78:cf:
dc:b9:5a:72:16:60:6a:40:77:12:dd:2b:da:55:aa:
af:b7:55:8c:fe:b7:65:cc:b2:7c:76:82:cf:74:93:
8c:3b:97:4f:2a:e4:2f:9e:7e:31:81:7b:37:3f:7b:
f8:dc:55:59:d6:c1:0e:be:2c:f5:52:0d:d6:0b:67:
5e:7b:4c:95:f7:d1:87:81:54:a3:e2:67:84:d4:57:
f5:57:bd:4a:9d:8a:6c:74:dd:54:5f:e6:4e:f9:1b:
8b:32:f6:72:6e:54:2a:df:79:6e:1b:2b:10:b2:97:
2f:bd:f0:9b:60:40:bd:34:f1:bd:7b:fb:49:44:6e:
a9:75:00:6d:5e:7b:ad:9a:e8:36:46:86:c7:bf:72:
6b:2b:47:dc:7b:fb:8c:79:38:04:8c:1a:40:40:10:
74:95:38:89:9d:e8:b3:10:ea:b5:8b:fe:ee:db:4c:
7b:10:df:f9:f9:3b:06:39:e1:97:e7:04:1b:79:8b:
8b:53:c2:cf:60:27:b9:3d:7a:48:7d:5f:4c:ed:1c:
56:95:bb:8d:54:0f:37:37:e3:a3:07:e0:f2:55:05:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:3C:0D:38:00:6C:ED:CA:1D:1B:67:47:B6:08:B7:CA:16:AA:83
X509v3 Authority Key Identifier:
keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:f9:b3:b7:b2:bd:a5:2c:98:e7:9e:1d:b7:b3:28:a1:7c:c1:
75:5a:d0:16:d3:5d:11:d7:52:39:a5:b9:62:c8:1d:a4:d5:04:
4b:f1:72:a2:2d:9c:97:41:76:09:64:88:3b:ac:50:03:4c:c8:
40:68:44:f0:fb:7b:16:bd:dd:e9:cf:fd:ab:ca:6d:29:08:25:
85:7e:76:7d:6b:2a:71:69:56:d9:b6:52:e7:1c:0a:92:3b:d9:
75:b0:8f:58:5f:a7:cf:19:73:0f:fb:cc:cc:bc:4c:48:3e:52:
ff:a9:a9:a7:f4:2c:76:b6:a0:0b:6d:aa:68:7a:89:b1:b4:11:
d5:94:7f:f3:3f:fc:cd:a7:af:3c:9d:9b:3f:8f:88:3d:87:3a:
57:53:31:9b:94:b5:7f:eb:a1:92:62:72:a1:5a:71:bd:4c:20:
7a:27:da:7c:ac:21:3c:16:08:a1:5d:57:01:e9:59:6d:e7:01:
37:d4:81:1d:3a:48:f4:8b:6a:c1:85:a5:86:45:39:a6:93:29:
57:1f:5d:2d:39:69:39:f0:46:0d:39:42:43:8d:9e:9a:92:07:
38:b5:51:c5:c1:6c:b9:54:a8:d2:bc:45:0d:b6:81:f5:cd:7c:
52:b8:6c:d2:ee:c3:c8:c3:7c:0a:20:66:55:60:86:f5:bd:2a:
3c:4d:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:16:12 2026 by rpki-client