
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json)
Hash identifier: wNAQM/ecmaufMvjGXOnQOOrDNz9HBWk5ylqq5it/36U=
Subject key identifier: 9F:EA:BE:62:D4:17:09:84:E2:FF:A9:51:3F:B3:FF:8F:18:8B:AA:F0
Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA
Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
Manifest number: 0274
Signing time: Wed 25 Mar 2026 01:32:06 +0000
Manifest this update: Wed 25 Mar 2026 01:32:06 +0000
Manifest next update: Wed 01 Apr 2026 01:32:06 +0000
Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: Ju8MyVGYlugPPjhEBOLQUMfLL66xTUesh/x6sbUuKWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl
rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
Validity
Not Before: Mar 25 01:32:06 2026 GMT
Not After : Apr 1 01:32:06 2026 GMT
Subject: CN=69c33b16-ef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:ee:ce:b1:39:e7:4d:37:6c:c6:37:7d:08:
b2:11:5c:a2:41:23:ed:b3:85:f7:60:b3:eb:aa:39:
ea:3e:90:d5:64:4c:44:41:d6:21:30:8d:ca:87:a0:
c8:32:d1:ef:51:1c:40:c5:22:df:d9:32:93:32:dc:
90:2d:65:9c:81:8a:af:4a:1c:62:33:ce:12:db:cc:
60:37:c7:22:25:8d:58:21:2f:ed:72:76:ba:90:04:
da:69:5e:4e:0d:93:17:f3:5e:aa:43:d2:fe:a5:d5:
93:0e:29:be:8f:a3:b7:75:03:ec:20:d4:89:a1:8f:
70:06:5f:c9:b2:40:94:5d:a5:1b:e6:69:23:0b:3c:
77:c4:a4:e6:c2:95:b4:ce:32:a4:98:0a:02:70:49:
dd:74:f5:d6:c9:68:ed:2d:65:0e:0b:67:df:aa:b1:
4b:54:f8:a2:41:d4:b3:4a:34:9e:4b:f9:9d:d3:21:
97:35:f0:a7:e8:39:ac:fd:72:6d:24:27:58:ac:33:
56:92:3a:a6:54:b7:5a:b7:93:15:ef:52:35:73:17:
2c:d9:79:87:3d:13:43:34:78:4f:a7:fb:2e:c3:22:
d4:b6:4a:f6:fd:40:35:bc:74:d7:80:45:ad:65:1b:
21:b4:d0:ae:28:07:ff:f3:0a:e8:d6:a1:cf:73:f6:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:BE:62:D4:17:09:84:E2:FF:A9:51:3F:B3:FF:8F:18:8B:AA:F0
X509v3 Authority Key Identifier:
keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:be:02:61:3d:cc:9c:dd:15:a0:27:a7:13:f1:42:c6:62:
b9:d9:b7:d7:b3:e2:48:3f:f0:84:76:bd:00:c8:e2:2b:09:a6:
ed:1c:c8:67:26:d5:9b:ce:21:79:4a:b1:89:ac:64:32:26:26:
d8:2a:10:c8:96:79:d3:6b:57:24:7f:35:db:40:70:6e:e7:45:
3d:3f:ed:c0:56:88:e2:8e:91:1f:ef:cd:87:38:8d:e9:af:a1:
bb:f7:14:e0:ff:af:d7:53:dd:ed:cd:20:14:00:08:3c:b0:d6:
9e:36:ea:57:cb:33:5b:4b:ed:af:22:b3:ed:ab:d1:85:b1:64:
52:32:0d:ac:06:df:aa:63:85:6d:96:44:69:aa:c2:f5:69:e8:
6b:57:9c:7e:cf:0a:f8:0f:65:79:fc:67:cd:c3:42:d9:e0:0d:
3f:a3:12:4a:48:4b:ea:52:60:66:41:b0:c8:d5:ac:dd:ad:a1:
93:75:54:03:ac:ee:fe:58:cf:7a:d1:fd:d3:e2:16:3e:a4:0c:
38:1c:35:1a:8c:10:77:11:f0:6f:58:31:39:5c:49:4f:28:45:
39:9d:8e:16:ae:ab:ab:7f:1d:58:b8:6f:11:04:74:c2:b3:7a:
63:95:cd:21:00:bb:43:27:15:c3:99:59:45:e0:d9:21:32:36:
1f:ec:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:12 2026 by rpki-client