
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier: 3fimCAhtSsvp0KYfhfUEgyG9tUrxCAqmffDlTdlmeaU=
Subject key identifier: 4E:17:FE:D3:1A:53:E1:E1:6E:FC:42:54:22:90:BC:27:11:8C:98:9A
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number: AB
Signing time: Fri 17 Jul 2026 08:27:24 +0000
Manifest this update: Fri 17 Jul 2026 08:27:24 +0000
Manifest next update: Fri 24 Jul 2026 08:27:24 +0000
Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: rYgiN89oxLndXWGrqQr8LjPKD5EI0p7tktYCckK0Rso=)
2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Validity
Not Before: Jul 17 08:27:24 2026 GMT
Not After : Jul 24 08:27:24 2026 GMT
Subject: CN=6a59e76c-13a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:d7:d4:89:a9:bd:49:93:c5:b7:9d:27:73:
f0:69:f0:44:df:c2:9d:61:93:bd:74:80:35:33:87:
e1:8f:23:7f:ef:d8:b8:d6:69:8a:b4:d1:04:36:0d:
93:f0:7f:d5:8f:a9:fc:03:4e:f5:d9:de:63:80:1a:
42:fd:76:62:6b:5a:3c:16:cd:6f:40:41:b0:5d:b7:
7b:f6:5c:ba:ef:50:fe:57:a2:49:27:de:1b:dd:75:
07:6c:bf:7e:67:2e:68:c4:1a:a5:45:f3:29:31:3a:
a0:c7:dd:48:75:1d:0f:a7:02:8a:5a:6b:c2:80:83:
62:5a:2a:83:0d:4e:79:76:6c:f5:5f:5b:f0:ee:df:
64:17:af:0a:7c:2a:b8:be:4d:56:76:3d:da:d1:8e:
d3:66:d0:24:76:51:51:2e:42:8c:95:ac:24:c2:c2:
e4:f6:a1:ce:31:58:ba:47:2d:8f:0f:73:99:28:38:
79:2f:a6:9d:20:e0:4b:59:5f:5a:14:1d:96:4a:61:
10:4a:7c:88:5e:04:a5:c6:65:d0:a2:4d:b7:33:37:
c1:c4:cd:fb:4d:b8:ae:a0:f4:3e:ef:bd:26:35:2d:
09:b7:2f:35:79:6a:2e:66:f3:63:d6:7e:51:01:61:
16:d0:91:bd:16:cf:38:0a:ac:e5:59:03:f5:3a:77:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:17:FE:D3:1A:53:E1:E1:6E:FC:42:54:22:90:BC:27:11:8C:98:9A
X509v3 Authority Key Identifier:
keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:25:e8:6f:0d:e5:81:9c:67:58:9a:53:3b:fb:0f:7e:c3:16:
02:81:ab:b1:97:75:b9:fb:7d:a9:fd:9c:f2:8a:fd:ad:43:2e:
9e:a3:03:3f:9c:f4:b7:95:6b:f1:78:45:2e:b2:c0:10:20:ff:
fd:9e:91:39:de:43:e7:45:1c:66:14:7f:a2:22:e9:25:ff:6b:
8c:df:aa:5d:ab:3d:17:ad:37:d3:40:cf:cb:e0:ff:bb:19:cc:
91:f9:4a:ea:02:fe:60:0d:58:0c:83:57:20:5b:bf:d4:62:c6:
97:f7:b7:16:f5:da:01:7c:04:4e:c0:da:1f:33:54:88:bb:02:
43:df:96:65:73:75:66:8a:dc:a4:9a:ff:29:6c:35:e9:89:a1:
b3:b0:e1:bd:cd:a8:c4:a4:58:31:16:87:20:cf:13:b0:5b:66:
e0:a4:a3:cb:da:7c:85:35:4a:a3:aa:a6:5c:10:7d:94:14:5a:
ec:11:14:93:d2:cd:d8:87:27:ef:32:6f:85:61:58:25:fe:dd:
d6:0e:79:1c:11:be:2d:8f:10:78:5e:7c:7a:57:07:80:41:d2:
4d:15:bb:f8:90:a4:98:b2:6e:b3:7d:9a:d9:06:52:e4:03:4d:
d6:f6:58:f6:08:88:f7:d0:ad:85:eb:a6:80:4c:51:3b:20:51:
d1:f7:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:58 2026 by rpki-client