
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json)
Hash identifier: ePdGZgExKL3VbViFJTca7tJuEeUoHrzoWjuG4o8hPYA=
Subject key identifier: EB:9F:8C:7B:58:D7:82:73:7A:53:29:B5:75:57:E8:8E:7F:3A:33:7E
Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C
Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
Certificate serial: 0AD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
Manifest number: 0AC5
Signing time: Mon 28 Sep 2026 19:35:50 +0000
Manifest this update: Mon 28 Sep 2026 19:35:49 +0000
Manifest next update: Mon 05 Oct 2026 19:35:49 +0000
Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: 3x83FGy3c5YA2mKwRizEv8/eHJ89/ePz7cI4PThvTUM=)
2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: lMbLeQ9y+VcqNaUu40E6Ont31pNHR+PjOYoL46iU/ug=)
3: E35939C2261711EC9990A750C4F9AE02.roa (hash: tTZXDpG6s0I7epPtJd00/Iy7JGi1h8+PbbN85OVIZMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl
rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 19:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
Validity
Not Before: Sep 28 19:35:49 2026 GMT
Not After : Oct 5 19:35:49 2026 GMT
Subject: CN=6abac196-e622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:be:5f:c7:ce:a2:5b:6d:15:9f:2f:97:cf:
54:25:20:a9:1b:85:6d:f4:7b:fe:13:53:61:43:f3:
43:22:9a:0f:78:04:5f:22:1f:4a:45:e6:ab:b5:6b:
4b:16:e6:f0:4e:77:33:91:47:4e:3d:9c:7f:8b:d6:
f5:31:bd:88:70:aa:eb:7a:b5:63:df:0c:96:34:35:
04:ff:9d:41:63:83:0f:70:ea:3e:b2:f6:d0:f4:62:
66:ad:70:73:36:e8:e1:69:98:14:91:f8:71:95:20:
53:d3:bd:75:0c:42:04:bf:b9:5a:22:d7:df:85:71:
5e:0e:33:e4:3e:91:3c:bf:4b:91:4b:89:43:fc:34:
59:e2:b0:5a:58:11:60:6a:c1:52:06:5b:07:2e:42:
01:c3:5b:c0:aa:e4:38:ee:12:e6:63:ca:17:9f:f9:
c9:72:62:12:56:b8:8b:28:3c:98:f2:ef:b0:1e:88:
46:ef:a2:05:40:79:a7:86:82:91:98:42:81:17:14:
32:37:cf:12:a2:21:8f:c8:aa:05:7e:3a:ed:b7:32:
83:11:89:a1:64:bd:d1:b8:3d:5a:ac:3a:75:f8:ce:
bc:86:97:c3:53:64:50:8a:27:82:9b:4b:5a:e0:61:
d4:7e:b5:39:ee:f2:ab:ef:dd:87:de:13:ab:73:35:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:8C:7B:58:D7:82:73:7A:53:29:B5:75:57:E8:8E:7F:3A:33:7E
X509v3 Authority Key Identifier:
keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0f:2a:8b:5d:c2:a3:7c:62:2b:f0:c9:e7:9c:c1:1e:89:e6:
6c:f6:6d:4a:93:23:0f:4c:57:f1:a9:06:95:e2:be:26:b4:ca:
5e:fd:b7:0d:1c:b3:55:cd:9d:19:70:5d:e9:f3:ee:09:f4:c1:
3f:4d:99:c0:fc:02:08:b3:a6:30:b3:a1:2c:ca:99:c4:c7:dd:
d7:c0:ab:c6:9f:8f:8c:74:33:dc:1b:b0:d7:17:58:40:b2:ba:
89:47:69:23:13:54:e9:9e:e8:77:af:f1:0c:4d:2a:ed:06:0d:
70:c4:93:5a:27:fc:73:c5:7d:56:c8:bb:eb:dc:e0:14:01:4c:
f8:92:e9:8b:e7:f9:07:0b:ca:be:18:af:93:ee:64:9c:26:e4:
78:4a:68:b1:d8:d9:03:16:98:c4:77:d9:9e:ba:b5:69:11:9f:
65:91:1e:24:8f:6d:3d:d7:c9:97:e3:53:46:26:ff:ad:bb:ad:
4a:73:ad:3c:cd:26:12:92:fd:f2:e3:d4:56:56:95:4e:e0:d1:
a6:a4:79:1c:bb:1e:02:68:fc:7e:d6:46:ed:ae:ef:24:18:38:
6f:c7:85:93:75:d9:90:6e:1a:f3:e2:5a:46:b6:89:df:87:2b:
a3:41:ae:79:20:0b:a2:0f:bc:97:a8:04:d5:66:d3:50:36:46:
c2:19:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:47:45 2026 by rpki-client