
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json)
Hash identifier: mp0b1fpkpF1BTACPllzh9aT/656WgHWB21k4SzQv0vw=
Subject key identifier: DE:9C:0D:76:72:D7:77:50:B0:41:F8:81:16:DE:2A:3F:21:D4:C7:39
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
Manifest number: 0228
Signing time: Wed 25 Mar 2026 02:24:01 +0000
Manifest this update: Wed 25 Mar 2026 02:24:00 +0000
Manifest next update: Wed 01 Apr 2026 02:24:00 +0000
Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: dMYW/uXz/oUXta9xdL0MY2KIfUTCLZCqEQgQTE66Jwc=)
2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: xubgESY7ENUwjaYICY3KQDEJuRzIf66RrN29YCUy9DU=)
3: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 0hf744/8ClGNM1pPRKsYmzGhD2Zto6yat3iUOtKyOcU=)
4: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: 49siwc9TCEX7qSFWEwhlrKnStCVbHuwNYdSKXeuPW+8=)
5: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: PNuCCopETWS6vlNk5jS1Oy7RDkYmnLxq7jDjnr/jkg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Validity
Not Before: Mar 25 02:24:00 2026 GMT
Not After : Apr 1 02:24:00 2026 GMT
Subject: CN=69c34740-6ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:82:56:71:bf:d4:78:c9:2e:ec:21:19:1d:
61:44:74:f6:67:44:36:0b:94:61:e4:7c:50:c0:0d:
cc:ee:0e:99:62:44:e1:6f:8b:fa:72:2e:ad:0b:a8:
a8:a2:c9:5a:95:dc:1e:86:d4:d9:c0:21:76:3d:9f:
c6:78:b1:5f:bd:8f:d5:37:f4:ed:77:e1:d3:41:30:
aa:07:a9:58:da:78:65:7d:a7:c2:c9:f6:94:06:32:
16:3a:68:5e:37:0a:07:93:ef:0b:24:cb:48:1d:d8:
f0:f4:71:39:09:36:30:85:1b:fa:cf:46:5e:ec:2c:
70:24:64:44:7e:be:6d:a4:33:d3:73:5f:2a:53:cc:
31:b2:f8:62:91:19:dd:b1:4e:7f:86:85:79:b5:25:
2c:1d:cc:9d:7f:e5:66:61:8a:90:2a:b2:9b:a2:8f:
4d:58:d9:e7:d4:e0:88:51:5a:e2:89:26:ad:5b:c5:
3b:88:20:73:99:99:d2:81:41:89:fd:f9:2d:ae:31:
49:4e:29:80:70:bd:fa:98:57:1e:1b:74:8b:b2:4d:
0f:30:45:5c:47:57:28:34:1a:f9:9c:04:3e:18:12:
c4:bb:e1:5f:0d:32:10:c3:73:c5:93:8f:b8:c6:70:
ef:4b:03:c4:61:a8:f9:a6:7b:f6:e6:27:81:85:bb:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:0D:76:72:D7:77:50:B0:41:F8:81:16:DE:2A:3F:21:D4:C7:39
X509v3 Authority Key Identifier:
keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:eb:37:43:49:df:fc:34:3a:2b:f5:42:39:58:89:ca:5b:e6:
db:ca:f6:3b:f1:2d:45:a5:a4:58:e0:bf:8d:f4:d8:27:60:f5:
9c:d1:ea:a4:d4:7d:3b:ee:d0:c7:45:89:be:60:3e:12:77:f0:
35:e1:20:5c:21:7b:5a:29:82:9b:72:8a:7d:21:a5:93:b2:7c:
13:4a:3b:f4:85:65:22:1a:ef:b6:26:2c:75:25:f2:92:8a:0f:
43:d8:3d:b4:e6:8d:3e:7e:f6:94:26:56:20:9c:8d:4d:3a:24:
e1:ee:0f:06:de:31:0c:48:f9:bd:b5:ae:fe:12:85:b9:d3:a5:
59:f0:8f:d5:a7:1d:81:bd:03:99:a5:2f:ec:17:b6:c7:33:f2:
eb:8a:95:a5:59:40:36:65:8d:89:ac:41:de:e4:7a:88:39:07:
e2:8d:d3:79:c4:ed:40:5a:4a:9f:6b:d0:33:2f:cd:0b:10:90:
a4:36:4c:29:ac:fe:89:51:53:88:5c:1d:08:0a:d5:77:fb:6d:
20:9d:cb:b9:c4:d7:bb:0e:e9:5a:6b:88:6e:85:a4:b7:6e:06:
21:18:39:c1:03:5b:65:32:a0:e7:94:f7:e8:8e:b7:00:7c:f6:
c1:39:83:b6:04:3b:6b:e2:d3:28:12:ba:d2:86:5e:49:4f:78:
0b:17:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:35 2026 by rpki-client