
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json)
Hash identifier: NvuwRT50+8pPQVquRfZnzznKgW2U2lIwI1cTv8m9MCE=
Subject key identifier: E7:5F:83:40:32:EC:15:13:45:74:58:42:97:D1:1B:06:2A:02:5E:D0
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 0B56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
Manifest number: 0B26
Signing time: Thu 10 Sep 2026 19:16:55 +0000
Manifest this update: Thu 10 Sep 2026 19:16:54 +0000
Manifest next update: Thu 17 Sep 2026 19:16:54 +0000
Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: N7QoLIz/vRswCN6u5KA0ce2qaS7x/Ur+bvwJHAIo0uo=)
2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: hOTfDBRJ9QfUK/rKfDPevW6q1jqnJPqcLBV4za1Ryww=)
3: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: 3EVgcj9byaZV+R8WBQHb58ZwywQ37QmCQoA4eowxsVM=)
4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: DIYCGw/BAp96EDkeT/ymP1J8m6rhVJplM5J1ZEv2xqc=)
5: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: EEToEwILYbsl8GqN1bkw26ymGXwnVFNMe/KMqvFHVTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2902 (0xb56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Validity
Not Before: Sep 10 19:16:54 2026 GMT
Not After : Sep 17 19:16:54 2026 GMT
Subject: CN=6aa30226-eb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:2b:0a:a7:8e:92:97:d7:85:75:70:21:4a:
4d:a5:21:ed:55:fb:0d:9a:5d:b1:6e:3c:70:bb:5e:
82:8d:28:c6:06:3b:54:8c:0b:b0:14:34:66:e9:42:
fd:88:f8:4a:e1:1b:5e:93:e8:00:2d:4a:06:5a:b9:
f0:8d:00:0d:53:a2:84:65:dc:5c:a8:42:57:dd:71:
31:a0:f0:72:dd:61:a8:b4:83:01:15:cf:95:74:b3:
58:d8:d9:32:52:24:cc:ef:97:e6:10:63:d6:75:ae:
37:ea:be:2a:25:d5:a7:98:21:3b:42:bf:3f:76:af:
aa:ee:ff:13:3f:de:41:ab:98:3e:8e:ec:5d:26:25:
b6:bc:1e:65:b0:90:32:0d:69:80:b9:66:1f:54:7b:
d4:78:a2:39:5e:23:57:e2:d9:a9:77:76:b9:5c:58:
3a:ce:46:b5:2e:8f:cc:4e:b5:3b:a6:6a:56:bd:a5:
75:c5:ad:90:e4:e9:b1:f1:c0:a3:95:db:32:0e:88:
15:75:b3:f2:97:94:05:24:bb:d2:82:7c:fb:0a:2c:
67:d1:0e:36:82:27:5c:10:52:9e:df:22:94:72:f3:
4d:76:32:89:db:be:c5:5b:c9:85:27:7d:29:18:50:
e7:1d:4a:89:af:3c:a0:04:23:a0:58:32:96:e4:45:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:83:40:32:EC:15:13:45:74:58:42:97:D1:1B:06:2A:02:5E:D0
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ee:f3:f0:ac:e9:ca:0c:53:30:69:19:0a:87:fa:ef:28:7d:
13:d2:5d:6d:6c:23:5f:52:1a:39:9d:61:66:26:0a:3a:c5:50:
b3:f8:ec:07:17:76:12:de:f7:e2:4c:22:cf:13:63:ea:a4:70:
ce:11:f1:6c:2a:59:ee:da:6b:65:04:81:e9:49:75:14:bc:79:
49:9f:09:00:0a:34:01:48:65:7b:dc:34:42:18:ca:e1:6c:60:
09:ad:57:6b:52:c3:07:40:8b:39:ec:23:06:42:eb:1f:e4:69:
eb:28:c1:db:22:69:da:85:5a:7c:14:fb:d5:3a:62:c1:88:aa:
24:bd:5d:68:26:8c:9e:eb:b5:16:e1:6b:ee:61:92:d0:3f:fa:
29:39:4a:4d:73:fb:6b:ec:a0:8b:ec:dd:9f:d0:df:8d:ae:40:
df:4f:72:71:82:c1:99:6a:f0:f9:01:6a:dc:c1:b7:0f:bb:32:
cd:27:83:e4:66:31:ae:a5:51:8c:9d:eb:16:33:9b:c8:01:d6:
97:e1:17:a0:9b:67:23:f1:5c:c8:c3:a3:30:99:bb:f8:26:33:
23:ac:ef:7c:40:cc:1e:44:2c:c4:48:33:f3:e3:09:b5:cc:f1:
aa:c8:cb:89:d7:83:ab:30:b6:12:ac:9e:d5:d1:a9:ea:f7:02:
de:d1:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:29:45 2026 by rpki-client