
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json)
Hash identifier: LNFUhuClZCxZWBfBgi/RTOcb3m+1SPqQUJkTJGftHjA=
Subject key identifier: 47:9E:AC:0F:91:90:2B:B9:87:51:9D:B6:EB:38:71:62:BA:36:EF:C6
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 0B1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
Manifest number: 0AF4
Signing time: Fri 12 Jun 2026 19:26:31 +0000
Manifest this update: Fri 12 Jun 2026 19:26:30 +0000
Manifest next update: Fri 19 Jun 2026 19:26:30 +0000
Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: vHfL96UU4DuwXJFYVySrC35xhlFG0QEq3u2UNuWMACk=)
2: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: AzvWvbrPiuhKiBHdJfjBxy5Ra/OUuOns6Vjq7S/FHI8=)
3: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: bueneiv4zkp1hJi+0Ko6hSLY2lsE8PKm4m/3t84VQKA=)
4: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: Y5wKsH1cPWNKRGL2sR47JtUL6S3wrlsTRofvAYJPq3Y=)
5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: vfLHTt29kOm1Z7Kfy6jmmNrQQkJF27JhRO5eWjZJVw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Validity
Not Before: Jun 12 19:26:30 2026 GMT
Not After : Jun 19 19:26:30 2026 GMT
Subject: CN=6a2c5d67-8450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:36:a9:04:62:70:85:37:61:77:46:91:36:
59:f5:27:a9:47:52:66:64:d8:b1:23:55:98:de:9c:
66:9d:4f:c3:f6:0a:c6:74:5c:d1:e1:f2:eb:5a:2f:
2e:71:26:a5:28:b2:73:16:10:8e:77:85:fc:7f:4f:
fb:59:91:8e:43:33:c6:a6:f7:f7:58:0f:60:70:95:
a1:e3:85:3f:dd:da:e0:d3:4e:60:08:8c:00:8b:82:
68:03:eb:42:3b:da:cd:0d:15:f3:ac:68:a5:79:71:
08:1c:3d:46:66:91:ac:4d:29:69:56:10:9a:89:b6:
6b:3f:3f:7d:ef:27:f3:7a:12:51:4c:24:8e:d4:9e:
34:02:98:d4:69:a8:26:57:07:0d:a6:96:be:12:95:
1a:10:83:18:c6:59:67:c9:f7:2a:26:e8:6f:ae:08:
67:a5:b7:45:68:d4:5e:eb:1a:ed:48:0c:12:c5:73:
e6:9d:00:a5:81:e9:82:0f:25:0f:c7:6a:77:00:a6:
1d:d5:2c:f9:25:84:36:19:be:4e:7d:e3:1c:df:dd:
a5:19:e8:27:f3:40:31:89:a2:7f:e2:0b:d1:72:e5:
22:26:12:b6:e0:1a:b4:d7:14:7e:a3:7e:77:5b:20:
4a:65:57:58:ad:b6:ad:5e:c4:34:2f:b5:fe:15:cc:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:AC:0F:91:90:2B:B9:87:51:9D:B6:EB:38:71:62:BA:36:EF:C6
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:31:27:b2:15:44:a6:11:65:6a:ac:41:de:39:57:61:ac:cc:
4b:5a:b2:81:e2:82:ce:3e:f3:31:7b:5a:5b:86:ea:e0:a6:60:
ae:c5:23:92:5b:32:7e:13:16:fc:2c:b8:0d:9b:74:38:f6:7c:
e2:bb:8e:c5:62:a0:b9:4b:4d:bf:49:a1:f5:56:5d:7a:66:dc:
dd:eb:16:3d:e5:0f:b6:e5:07:d8:b1:eb:e3:8a:d7:e1:e7:d7:
54:12:89:03:89:dd:76:a0:7f:05:e7:ed:b4:0b:99:54:04:b9:
7e:07:4e:c6:bd:14:63:be:0c:e8:c3:0b:05:0e:d6:6e:84:7d:
5f:90:07:79:3c:2b:b4:0a:e5:0c:a0:c9:02:e1:dd:f2:26:38:
11:69:87:ff:92:30:9c:cb:fa:62:39:d0:82:c1:b0:cc:18:51:
8c:ac:a3:b0:7f:39:51:18:64:f2:b2:55:26:ed:8f:ef:34:8f:
13:0d:3e:ba:71:7b:c0:6f:04:00:d7:56:a5:ec:83:e8:07:81:
78:27:61:fc:25:de:8c:22:34:02:7e:89:cb:bb:57:1c:b2:71:
00:d5:4f:81:41:bc:80:2a:16:e9:77:63:cf:20:c5:de:3c:82:
ad:94:81:cb:34:d8:34:11:cb:6e:1f:f8:15:2d:04:82:f9:6f:
e0:a4:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:32:45 2026 by rpki-client