
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier: G66KxirprUipSslBmacmpfuajYpjBEhgU46uksiEM5c=
Subject key identifier: F8:6C:B2:2C:FA:CF:3F:1A:4F:0D:C5:2F:62:95:C4:19:B4:64:AB:07
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial: 312E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number: 30FA
Signing time: Wed 22 Jul 2026 15:31:25 +0000
Manifest this update: Wed 22 Jul 2026 15:31:24 +0000
Manifest next update: Wed 29 Jul 2026 15:31:24 +0000
Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: 9KS9wAyUNUJtXA+g+6SWqKffAAcCBz8D7r2vVlaBWFg=)
2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: B5rWzBjI7BfkOi4vSBBhpW3ifXKdbuWjkXECi3PmcCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12590 (0x312e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Validity
Not Before: Jul 22 15:31:24 2026 GMT
Not After : Jul 29 15:31:24 2026 GMT
Subject: CN=6a60e24d-6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:0b:66:0b:98:57:5a:66:12:32:24:42:ed:
d2:a7:2f:e2:81:17:36:ea:2a:ea:ec:43:a2:db:04:
37:2c:c2:87:43:ef:ef:9f:4c:93:04:b1:d9:1f:b4:
46:87:8b:68:f8:cb:70:d3:b9:1a:52:2b:97:df:52:
e3:1c:be:fc:77:5e:fe:19:e9:f1:4c:cf:1a:e1:c5:
7b:92:85:3e:97:ba:09:66:52:42:3d:e1:9c:50:26:
93:0b:3b:ab:e0:45:3d:03:3e:46:e4:85:fc:da:16:
b6:52:10:72:d2:df:d6:d3:fe:8e:8c:30:65:11:a0:
23:b5:10:c2:2d:59:a3:a2:f8:2c:96:3a:00:24:bb:
7c:09:2c:f1:6b:70:5b:f8:ed:48:4c:7d:c6:c9:e9:
15:07:bd:fa:99:62:04:36:07:19:59:cc:bc:75:06:
75:93:62:ff:c5:09:ac:7a:64:26:95:03:3b:92:5f:
a6:4c:14:2e:ab:ed:da:6a:33:d0:32:60:55:a1:af:
97:a2:57:98:cc:ae:5f:d3:fe:03:4c:71:8e:49:e9:
09:ef:fb:84:46:96:2e:49:28:fc:ec:6a:42:f9:cf:
33:64:a2:a6:c7:0c:0f:17:60:84:07:60:be:0a:ac:
60:2c:9b:b0:99:d6:7a:81:d8:82:56:24:ce:45:50:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:B2:2C:FA:CF:3F:1A:4F:0D:C5:2F:62:95:C4:19:B4:64:AB:07
X509v3 Authority Key Identifier:
keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:5e:fb:3e:05:fa:56:cb:a7:f7:1e:a9:e9:8f:4b:ce:77:1e:
98:15:82:b6:22:4b:55:c5:73:d0:1b:9b:b4:64:7a:0f:ff:ec:
94:c2:03:e0:a2:b8:a5:65:31:27:09:65:54:ef:97:c6:84:ba:
28:92:a6:77:df:ea:63:7e:82:54:cd:16:b5:2d:03:dc:c6:38:
03:72:11:ef:55:71:e8:e0:6e:d6:b1:f3:07:b3:a3:92:1d:87:
48:27:14:87:60:d4:aa:f2:b7:bc:eb:6f:64:e1:ba:aa:84:9a:
34:21:61:d5:ef:8a:82:41:c5:8b:99:06:9b:d9:44:69:25:05:
be:1a:b7:92:6b:8f:c7:b3:4e:b6:a1:3c:04:a5:45:d2:46:7d:
24:1c:a2:e6:d7:28:e6:c2:6f:08:47:c5:9d:69:5e:b9:86:de:
0c:40:3f:70:bd:19:38:21:bd:bf:c7:4a:fc:c8:82:f3:97:c7:
96:41:c0:66:9e:79:86:67:7e:ec:61:36:6d:3d:3f:e9:0a:cb:
6c:be:84:e7:14:4a:46:3a:85:eb:62:c8:93:c3:ec:68:ad:fa:
78:1e:45:a1:0f:04:75:26:34:c9:dc:04:a4:2b:00:5c:e9:77:
42:df:f2:a4:a8:c2:7b:21:36:29:88:d4:06:46:9b:c5:97:35:
9f:1f:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:39 2026 by rpki-client