
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier: d7nvV3OzZHOI5ux6oiWhGww6pm5yFwHqooEIXRHFCBo=
Subject key identifier: D9:0B:AE:E0:A7:F2:F1:3D:B6:AD:9B:14:DE:F1:43:5A:2C:4B:27:BF
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial: 05C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number: 05AD
Signing time: Mon 22 Jun 2026 23:12:19 +0000
Manifest this update: Mon 22 Jun 2026 23:12:19 +0000
Manifest next update: Mon 29 Jun 2026 23:12:19 +0000
Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: jjSYD5ignBOcwrrO+USF42bdMmHc6R1K5TmlJLIE7Qo=)
2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8=)
3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: mFoBkWfLh0LGrOinTzXA38KoXXGaCtnMvz2q3N7gfu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Validity
Not Before: Jun 22 23:12:19 2026 GMT
Not After : Jun 29 23:12:19 2026 GMT
Subject: CN=6a39c153-a6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:f1:14:61:3f:44:2b:15:8d:1e:ce:78:2e:
d3:11:9b:ed:65:d4:4d:35:34:db:f2:ac:88:12:01:
94:81:20:4b:71:e0:a8:7a:1c:f2:e4:eb:2d:8e:21:
85:0a:98:2d:73:87:1f:3a:61:ea:4b:fa:d2:b9:20:
ab:31:75:7e:36:31:c4:2b:53:b1:9b:a0:54:6c:44:
00:dd:ca:83:fa:d5:6d:50:ad:30:1b:63:54:01:e4:
e9:46:4a:4e:3b:b4:ec:91:d5:cf:24:e7:e7:3c:42:
81:5b:6a:ec:f4:17:14:ab:87:76:36:6a:5c:91:e4:
ba:03:9d:25:5e:ba:14:6c:9a:0e:54:83:1a:e5:4f:
a3:5a:84:12:06:45:9d:3c:62:a4:d4:27:72:a4:96:
17:6b:d0:cc:f4:dd:9c:9a:34:50:38:ff:ad:d4:7f:
7a:a1:1e:83:01:89:9d:1f:cf:94:34:af:0a:97:70:
8e:d6:8b:37:d6:94:96:de:3a:e4:03:2b:0d:17:6e:
a5:15:d9:29:30:e0:01:7c:2f:50:3d:bf:39:56:a3:
4f:d8:9f:0f:4a:6b:eb:82:b6:5f:00:0f:8b:79:a4:
94:ff:2b:34:b7:0a:5e:e6:3a:b0:81:e4:bb:bc:35:
0a:d3:4f:c4:da:50:0a:d4:7b:e7:f8:78:cb:71:af:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:AE:E0:A7:F2:F1:3D:B6:AD:9B:14:DE:F1:43:5A:2C:4B:27:BF
X509v3 Authority Key Identifier:
keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:40:fb:14:64:68:de:6d:f1:4d:10:ec:57:d2:28:50:0a:3d:
5e:c1:35:3a:d3:08:d3:98:4e:00:11:c4:a3:3a:94:88:7e:1c:
96:2b:7a:a8:08:8b:dc:84:de:ac:a3:5a:6d:63:70:13:f6:fb:
51:e0:bf:ea:b1:92:46:38:a7:44:ba:c6:9f:f5:89:90:2b:35:
dc:02:1b:ab:29:d1:89:90:87:78:a3:bb:0c:de:da:03:2a:b5:
42:54:14:22:5e:d4:6e:7f:2d:70:61:2e:be:3e:ff:f9:65:f2:
b5:1b:3d:0f:72:8a:d0:08:27:46:63:e1:f6:e1:b8:89:29:3b:
7e:76:e7:6a:9f:ab:db:1b:7e:2d:f2:55:07:3a:d2:ae:fb:86:
f1:0a:4a:93:d2:a9:71:df:23:5d:51:e9:96:b4:28:29:58:ce:
91:00:4b:e7:18:ff:2a:56:84:ea:f6:63:ef:86:3e:46:6b:b0:
84:e9:6c:0c:18:e4:0d:34:6f:d3:29:5f:b3:c4:c4:7c:e8:39:
da:5a:09:c5:64:07:3d:3e:3d:54:ff:31:f0:b6:2d:b4:55:e8:
3a:0c:73:65:c5:da:00:35:f3:31:ea:68:68:70:73:46:9c:b2:
04:df:86:c7:f7:1e:4a:26:04:eb:2b:ec:44:26:8c:66:5c:85:
8d:a3:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:56 2026 by rpki-client