
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json)
Hash identifier: 4VLIKQqS179d/cZsJPo/11jKbKLQR8t63ZHo4Fcaeuo=
Subject key identifier: 4D:26:3A:54:3F:ED:F1:BF:EC:08:0B:0A:4B:F1:E3:92:07:30:D2:AF
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 0B36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
Manifest number: 0B0A
Signing time: Wed 22 Jul 2026 19:45:05 +0000
Manifest this update: Wed 22 Jul 2026 19:45:04 +0000
Manifest next update: Wed 29 Jul 2026 19:45:04 +0000
Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: CYU0YtICvQGeMho6c9mrwevCzhEeG10bjDnkqBJ9zjs=)
2: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: y0XDl+o2I2x4dYgUjwQy+20VZVGgOcUuaeOK8CyrDMY=)
3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: SETDgSSjufmhfsxB9BdsWp+M1dD0A3n7br+cido47bY=)
4: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: zpF/iroph1goI9vLyet3Iu/iExhp9GIw9FnnLOzuZ1s=)
5: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: Ct86T16HFRZmaEpY/N6uhciriyN1LPVcCReU3E2/ThE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Validity
Not Before: Jul 22 19:45:04 2026 GMT
Not After : Jul 29 19:45:04 2026 GMT
Subject: CN=6a611dc1-8c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:80:66:e3:19:a6:44:be:fe:91:87:21:91:
52:14:0f:b0:63:99:ba:d1:ff:77:55:6c:07:80:35:
2f:e1:06:10:41:aa:5c:88:dd:e6:04:a1:be:bd:0f:
c4:5c:75:0b:f1:9f:1f:de:dd:cb:a0:cc:c8:10:34:
45:f0:bc:58:90:59:09:f9:93:19:3a:42:9e:50:b4:
05:4d:90:d0:5f:27:13:3c:3c:1b:0a:7a:a8:3f:b6:
2c:7a:16:c0:c5:fd:6c:cc:21:29:68:1c:5b:e4:c1:
61:b1:79:11:1a:31:c8:85:34:9b:08:9c:06:89:d1:
3e:65:94:15:cb:36:dd:51:0e:43:19:13:02:1b:67:
3f:b6:da:b4:64:10:2c:89:d1:3b:71:9a:1b:1d:44:
ee:2b:99:79:d3:df:ba:18:e3:2a:b1:7e:c3:b2:f2:
0f:80:37:0f:88:f7:5a:2d:f0:60:04:83:36:57:1e:
b7:2b:6d:a2:7d:d9:e9:ff:1a:37:ea:d5:bf:24:8c:
0b:87:49:26:b4:7b:27:a0:bd:5d:c7:63:b4:d8:2b:
d3:2f:cc:ca:eb:4d:34:da:69:72:43:78:77:8a:da:
68:dd:d9:f2:68:70:a7:ea:4f:ca:1d:e0:55:53:61:
bd:fc:bc:42:7e:69:63:70:57:02:a5:6a:4f:a9:58:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:3A:54:3F:ED:F1:BF:EC:08:0B:0A:4B:F1:E3:92:07:30:D2:AF
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:3e:f6:d9:57:8f:38:eb:b9:22:1e:d0:c9:f2:bb:79:86:ff:
a3:2a:60:f6:e6:58:86:21:27:ab:ee:98:bc:86:7e:2f:b1:d3:
ec:6a:ac:2f:f8:0e:dd:3f:42:85:88:00:e3:79:a6:3a:5f:51:
1a:b9:f1:79:57:07:6c:41:e6:98:fe:e3:66:06:9b:11:db:1d:
1c:a9:d1:ce:ea:93:0c:4e:31:ea:65:c1:d7:c2:a9:34:76:33:
95:c0:7d:a7:3f:e6:8f:cb:e0:7f:2b:cf:8e:3e:f4:b9:d6:a3:
57:ff:ee:f6:32:b5:e0:fd:90:e9:7e:42:04:50:c5:1d:ed:59:
98:c1:68:d0:1b:5d:92:c6:f2:b0:a0:65:59:e1:d7:98:d3:89:
c1:f7:66:25:10:f5:56:df:bc:ab:a6:8f:64:5b:e1:8c:50:60:
6f:11:73:fa:4a:c7:9d:a3:e7:80:64:d1:36:f3:7e:ba:96:9d:
2f:34:ed:3f:27:60:0a:69:3e:8f:80:a0:87:64:79:dc:a5:a8:
1a:58:21:2d:1f:d5:a4:8a:41:19:62:0c:33:e3:98:01:f5:09:
f7:0c:0a:59:d6:03:ae:c4:d5:d3:e1:06:1a:1d:23:8b:34:77:
4d:e1:bc:36:3b:f4:b6:f6:b4:fe:f3:31:0d:c9:66:7e:c2:80:
ee:f0:cc:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy
QTM2OTE3QkQwHhcNMjYwNzIyMTk0NTA0WhcNMjYwNzI5MTk0NTA0WjAYMRYwFAYD
VQQDEw02YTYxMWRjMS04YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs8WAZuMZpkS+/pGHIZFSFA+wY5m60f93VWwHgDUv4QYQQapciN3mBKG+vQ/E
XHUL8Z8f3t3LoMzIEDRF8LxYkFkJ+ZMZOkKeULQFTZDQXycTPDwbCnqoP7YsehbA
xf1szCEpaBxb5MFhsXkRGjHIhTSbCJwGidE+ZZQVyzbdUQ5DGRMCG2c/ttq0ZBAs
idE7cZobHUTuK5l509+6GOMqsX7DsvIPgDcPiPdaLfBgBIM2Vx63K22ifdnp/xo3
6tW/JIwLh0kmtHsnoL1dx2O02CvTL8zK60002mlyQ3h3itpo3dnyaHCn6k/KHeBV
U2G9/LxCfmljcFcCpWpPqVgNbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0mOlQ/
7fG/7AgLCkvx45IHMNKvMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz
MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY
SDg2QmZHUlNQNE1xTnBGNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARz722VePOOu5Ih7QyfK7eYb/oypg9uZYhiEnq+6YvIZ+L7HT7GqsL/gO3T9C
hYgA43mmOl9RGrnxeVcHbEHmmP7jZgabEdsdHKnRzuqTDE4x6mXB18KpNHYzlcB9
pz/mj8vgfyvPjj70udajV//u9jK14P2Q6X5CBFDFHe1ZmMFo0BtdksbysKBlWeHX
mNOJwfdmJRD1Vt+8q6aPZFvhjFBgbxFz+krHnaPngGTRNvN+upadLzTtPydgCmk+
j4Cgh2R53KWoGlghLR/VpIpBGWIMM+OYAfUJ9wwKWdYDrsTV0+EGGh0jizR3TeG8
Njv0tva0/vMxDclmfsKA7vDMFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:30:23 2026 by rpki-client