
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier: 0MZvH2feiUbA2fAJgeZTFJ0zCSRGUM7jPbK8aOpYFs0=
Subject key identifier: 16:E3:0C:66:3E:2A:EA:79:74:99:EE:60:2A:11:8C:D9:53:44:0A:C0
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number: 67
Signing time: Tue 03 Mar 2026 07:42:57 +0000
Manifest this update: Tue 03 Mar 2026 07:42:57 +0000
Manifest next update: Tue 10 Mar 2026 07:42:57 +0000
Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: 0HRomAUURPCOnIoEI7L3CV+JffvzMn94xpa+aMJWGQw=)
2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Validity
Not Before: Mar 3 07:42:57 2026 GMT
Not After : Mar 10 07:42:57 2026 GMT
Subject: CN=69a69101-7a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:09:6a:57:c6:f0:fb:a4:e8:ed:ce:7f:94:
0c:7f:88:34:8c:38:25:b0:fd:a0:83:8f:58:d9:ca:
8e:5c:b2:f6:aa:12:97:d7:41:e2:b0:df:ee:5d:e9:
90:ff:82:ce:ed:76:6a:44:a6:ef:73:f6:a7:a5:a6:
57:eb:54:4c:03:d5:ea:15:0c:24:f2:95:a0:9d:af:
fa:b9:07:ca:04:0c:ca:dd:90:9b:58:2d:72:62:33:
f9:02:a3:82:a7:a7:18:91:b0:7a:6f:72:b4:78:20:
23:c3:e1:a8:1b:87:c3:c9:3e:5a:2a:f4:2c:59:9e:
bc:de:73:ae:df:74:c4:bd:c0:6b:33:86:f0:c2:85:
bd:81:1d:a0:4d:fa:33:33:ea:b1:cd:db:2d:06:a9:
31:a9:74:44:8a:f4:41:43:5c:74:28:0a:9b:d1:1b:
83:0d:30:22:7d:8a:9c:a5:34:bb:ef:3d:bd:76:53:
ca:0e:16:ae:c0:b0:03:f9:2b:71:05:35:4c:99:8a:
1a:69:a4:b5:19:e9:a6:37:ca:b2:3f:cd:05:4e:12:
7f:d4:b2:5f:2b:73:3a:8e:fc:cd:e1:6e:3c:87:9e:
1c:22:d9:4f:45:df:ed:6f:bf:dc:c6:18:08:9b:0f:
b6:5f:db:84:e4:8d:e3:1a:41:d2:07:df:6d:bb:c7:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:0C:66:3E:2A:EA:79:74:99:EE:60:2A:11:8C:D9:53:44:0A:C0
X509v3 Authority Key Identifier:
keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5e:cf:5d:3e:b5:7d:54:59:e9:41:6c:09:d4:72:db:43:6f:
c9:df:d4:9c:2c:d5:4d:ac:9c:cc:c3:74:d3:f7:d7:02:c5:da:
8f:05:54:89:3a:17:8c:12:d8:cb:ae:82:f7:31:10:bb:4d:fb:
c1:f4:a5:b2:1c:f0:9e:64:5c:e7:93:ac:11:25:60:4f:e8:1e:
c5:42:aa:6a:48:5b:ae:db:8d:6b:0e:cc:15:fa:48:2f:c1:5c:
f9:21:55:22:50:a9:47:c5:8c:62:71:9b:6e:07:b1:20:2d:49:
61:68:cc:bd:b7:bd:2a:d8:07:d1:63:61:d6:ab:ac:0c:60:b3:
ad:de:fe:c0:62:a8:28:f2:f0:11:4e:3c:a0:94:a6:a8:02:0b:
60:68:0d:dc:0b:33:e9:ca:29:44:38:69:5a:19:af:0e:57:34:
7d:55:50:36:52:4e:5d:59:d1:59:04:c5:e4:d7:5b:63:63:0d:
72:8d:8c:24:0a:ab:90:11:16:29:8e:36:e8:1b:1b:a4:3a:67:
b6:6c:19:f1:19:5d:02:74:a5:d2:0c:62:92:51:13:39:4d:61:
e8:d8:de:c8:03:d5:99:fa:c4:60:f2:6e:9d:f0:c0:04:6e:90:
c2:d0:83:0a:8c:84:c5:9a:10:ef:2c:f9:e2:7b:79:fa:2d:ac:
95:2f:c1:65
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy
MERCRUU5RTAeFw0yNjAzMDMwNzQyNTdaFw0yNjAzMTAwNzQyNTdaMBgxFjAUBgNV
BAMTDTY5YTY5MTAxLTdhNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCudwlqV8bw+6To7c5/lAx/iDSMOCWw/aCDj1jZyo5csvaqEpfXQeKw3+5d6ZD/
gs7tdmpEpu9z9qelplfrVEwD1eoVDCTylaCdr/q5B8oEDMrdkJtYLXJiM/kCo4Kn
pxiRsHpvcrR4ICPD4agbh8PJPloq9CxZnrzec67fdMS9wGszhvDChb2BHaBN+jMz
6rHN2y0GqTGpdESK9EFDXHQoCpvRG4MNMCJ9ipylNLvvPb12U8oOFq7AsAP5K3EF
NUyZihpppLUZ6aY3yrI/zQVOEn/Usl8rczqO/M3hbjyHnhwi2U9F3+1vv9zGGAib
D7Zf24TkjeMaQdIH3227xxonAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFuMMZj4q
6nl0me5gKhGM2VNECsAwHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky
RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw
QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5
WGxZVkZPVTdiUGlEYjdwNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCaXs9dPrV9VFnpQWwJ1HLbQ2/J39ScLNVNrJzMw3TT99cCxdqPBVSJOheMEtjL
roL3MRC7TfvB9KWyHPCeZFznk6wRJWBP6B7FQqpqSFuu241rDswV+kgvwVz5IVUi
UKlHxYxicZtuB7EgLUlhaMy9t70q2AfRY2HWq6wMYLOt3v7AYqgo8vARTjyglKao
AgtgaA3cCzPpyilEOGlaGa8OVzR9VVA2Uk5dWdFZBMXk11tjYw1yjYwkCquQERYp
jjboGxukOme2bBnxGV0CdKXSDGKSURM5TWHo2N7IA9WZ+sRg8m6d8MAEbpDC0IMK
jITFmhDvLPnie3n6LayVL8Fl
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:16:56 2026 by rpki-client