
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json)
Hash identifier: GWlmh/m1K8uypvU+3yU6eC4XtSap0nYjU3/BBbc1R38=
Subject key identifier: C4:41:CF:03:15:ED:2E:69:52:44:94:4E:EE:71:9B:AC:4D:B0:A1:50
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
Manifest number: 0240
Signing time: Mon 11 May 2026 02:49:18 +0000
Manifest this update: Mon 11 May 2026 02:49:18 +0000
Manifest next update: Mon 18 May 2026 02:49:18 +0000
Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: 1SPZAdQCeHHyUBurKI1IDejjEiUKmaMkW3wCy8ypWPE=)
2: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: PNuCCopETWS6vlNk5jS1Oy7RDkYmnLxq7jDjnr/jkg4=)
3: AA398864B96611EF8161BF51C4F9AE02.roa (hash: xubgESY7ENUwjaYICY3KQDEJuRzIf66RrN29YCUy9DU=)
4: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 0hf744/8ClGNM1pPRKsYmzGhD2Zto6yat3iUOtKyOcU=)
5: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: 49siwc9TCEX7qSFWEwhlrKnStCVbHuwNYdSKXeuPW+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Validity
Not Before: May 11 02:49:18 2026 GMT
Not After : May 18 02:49:18 2026 GMT
Subject: CN=6a0143ae-a6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:33:34:67:bd:f0:e0:15:8e:35:f7:47:73:
7a:8a:71:23:35:d7:1a:f9:87:3f:b6:f4:b3:b2:76:
53:a8:d1:2b:40:2d:ad:8b:83:ac:01:04:e9:86:aa:
5a:da:d5:1c:97:b4:87:7b:f2:50:19:26:67:d7:f1:
3d:05:d2:53:b4:a8:db:5f:b4:dd:15:ed:bc:52:a9:
86:53:c8:b4:de:e9:ab:3e:c6:48:e8:8b:b9:67:58:
4b:ea:18:8d:e5:f2:d3:67:5c:c6:94:7a:7e:3b:99:
65:db:aa:c8:62:be:d3:ac:9c:ee:28:45:9c:19:7b:
2b:89:e7:ad:fc:ec:c5:40:38:c0:08:93:5a:93:cf:
b5:9b:cf:d6:64:fe:5a:d4:58:e4:6c:eb:6d:b6:6d:
b7:83:df:d3:34:b1:cd:9d:c6:cb:2e:64:da:e7:ff:
0f:ab:54:f0:23:f8:20:09:7d:7c:ae:c1:41:d4:5b:
9b:1d:f7:34:33:b1:3f:5d:e5:dd:cf:0f:ee:25:8c:
6b:aa:7d:4e:64:10:ed:17:4b:43:bc:1c:d2:da:70:
6c:c7:a2:c9:2b:ad:78:e1:52:a1:2a:ba:27:2d:6f:
1c:01:8b:d7:06:fe:cd:37:c0:73:0e:40:dd:fd:a4:
39:68:9b:c9:52:9e:6e:fc:e5:48:5c:e3:2f:9a:78:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:CF:03:15:ED:2E:69:52:44:94:4E:EE:71:9B:AC:4D:B0:A1:50
X509v3 Authority Key Identifier:
keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:01:d3:93:d5:fe:ca:3b:d4:bb:63:a8:f9:0c:43:54:e6:8f:
74:26:46:1b:87:49:e3:51:91:8d:be:13:53:3a:e5:f3:f0:0a:
f3:bd:cb:06:71:4a:0c:47:77:3c:29:f2:29:a3:32:19:83:c1:
08:e6:1a:fe:cf:ee:9a:f2:02:77:3d:07:39:90:1b:6e:9c:e1:
f0:3c:1b:94:74:51:a0:92:88:93:dc:48:84:df:c6:3f:aa:8c:
80:ea:20:a0:fb:c8:7f:06:0d:02:9d:db:32:5b:b7:71:31:ca:
85:28:a3:74:ef:ea:f5:21:53:47:ea:4b:2f:76:70:71:73:bd:
fd:9a:f7:dc:e1:02:d9:4e:ac:23:bd:a7:f3:1f:b8:4c:61:17:
2f:1d:1a:49:67:e2:f3:1a:1d:2d:a9:4b:66:61:a8:8e:db:79:
d5:97:90:9b:d9:67:2d:f2:aa:82:a6:90:35:e5:26:8f:59:13:
91:95:18:85:78:6a:05:3b:f1:e9:5e:c2:37:60:e7:ec:ae:6f:
af:1a:86:84:33:1c:96:fd:43:f1:e3:14:40:48:28:46:b4:10:
af:59:02:fd:18:26:4c:3e:e2:74:a7:33:90:3f:10:39:e1:28:
dc:61:02:68:90:53:af:8e:5b:63:cc:65:65:7e:ad:66:46:39:
e1:34:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:16 2026 by rpki-client