
$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
File: cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json)
Hash identifier: +4LitVsJpv1vcf1pLEHqohRv3j7p8UMlvxXAHQmnI6M=
Subject key identifier: 36:A9:32:3C:A8:D1:27:1A:65:78:9D:DC:5B:78:F4:A2:78:8C:58:01
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
Manifest number: FF
Signing time: Wed 13 May 2026 06:26:38 +0000
Manifest this update: Wed 13 May 2026 06:26:38 +0000
Manifest next update: Wed 20 May 2026 06:26:38 +0000
Files and hashes: 1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: S3CpPg9NycUPx7wI6Bt97AB4ULK1UDtnw+0ndlpTmLg=)
2: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: 3nJqGrjMdf5D7MugjfLyV3mlrWn6RF9SKC0CMqH5eTc=)
3: BE713C72E06211F0BC8E94E0746F56BC.roa (hash: EFjR0asu4wd/yeWWK7gzSOj/T05MOi3CBtWkuJ6nqxA=)
4: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: XuBY8r+m0nn8vqkTh0uM6kdpQk4Jsat9oInYlsF5zpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Validity
Not Before: May 13 06:26:38 2026 GMT
Not After : May 20 06:26:38 2026 GMT
Subject: CN=6a04199e-af89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:bf:f4:70:b5:3e:5c:2f:b0:76:23:f4:a5:
cc:28:4e:a2:d5:81:c9:e4:82:6a:7d:59:35:5a:db:
f9:63:d9:73:e3:36:69:30:03:23:26:72:3c:fb:07:
e7:86:fe:41:a3:e8:73:f5:a8:3c:2b:a7:d2:a0:6c:
f0:12:db:eb:e6:db:04:b7:9a:f3:0f:0f:1f:73:89:
b4:fb:11:d8:4e:1c:44:9f:50:31:fa:8d:56:3d:5a:
3e:50:8a:74:79:da:73:17:07:3e:cb:41:41:da:c3:
c8:d7:44:71:68:25:ae:d7:69:b2:33:9e:11:d5:c0:
69:6d:9e:e0:14:7c:08:c8:ee:2c:87:ea:ab:31:87:
3c:1e:a8:0c:e6:7a:30:a9:39:5b:a1:40:29:e0:50:
b0:78:06:50:f9:04:bf:06:75:f5:ac:e4:5e:52:9e:
25:37:67:db:3f:24:eb:24:ef:d6:8c:b8:90:ae:92:
b5:04:0e:6e:c2:05:70:1c:c7:b7:2d:0a:87:e7:31:
6b:6d:0a:66:a7:15:82:09:d5:9b:ff:36:71:e5:25:
d3:2e:dd:f3:9b:02:58:f1:dc:78:2a:c9:cb:53:b1:
f1:82:87:38:a2:d9:f2:bb:42:25:af:95:0e:f7:7d:
9f:a4:a6:4a:ab:bc:9b:31:77:ea:82:38:d3:10:00:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:32:3C:A8:D1:27:1A:65:78:9D:DC:5B:78:F4:A2:78:8C:58:01
X509v3 Authority Key Identifier:
keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:55:13:e8:3c:11:c8:a6:a0:71:66:ef:b5:ae:29:a7:76:f8:
df:c1:09:a7:29:8c:e1:f5:8f:28:fb:a1:a2:ce:f7:37:d6:4f:
b9:b4:80:7b:4c:ae:f5:b7:a7:e3:72:e5:02:ce:96:f8:bc:16:
6b:b7:52:07:e1:f0:fb:06:b2:03:5c:7c:61:83:0f:01:e0:7a:
f2:9e:33:41:eb:8e:58:75:ba:29:60:00:80:6b:e3:ce:98:5c:
d5:52:ab:bc:6e:0c:1c:d3:db:55:56:0c:3f:70:fd:24:8c:b3:
ea:90:40:c7:c2:b1:a3:11:23:db:99:16:2a:fa:f3:b4:6a:74:
dc:54:50:70:77:39:92:c9:ec:ed:e0:f6:72:0d:c8:6e:d0:63:
1f:24:ee:af:11:aa:bd:83:9a:dd:c2:33:61:78:ea:f4:8f:9e:
8c:b4:9b:b7:6e:a1:44:72:6c:27:41:46:d0:3c:fe:a1:41:cf:
1c:2b:c7:56:39:89:88:75:4e:ff:10:0e:9f:75:cb:34:32:86:
18:25:07:2c:da:c1:60:fb:06:4f:39:bc:65:60:f5:b7:ec:c7:
39:81:31:52:a0:0b:e1:a5:e9:d1:e7:7a:85:d1:08:89:45:ba:
c8:20:59:a0:f2:6b:f2:2d:11:1b:b3:8b:d8:42:94:5b:c9:67:
dc:52:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:02:49 2026 by rpki-client