
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft
File: cpJMv-NjcwP3sTdsjPca22H7bDk.mft (raw, json)
Hash identifier: ujcbxpoM5tDvDM13/ReSThIrzdLjhcMzwa68zlaZv9w=
Subject key identifier: A4:49:B9:42:7D:55:6E:DE:D8:C2:77:08:65:3B:D8:0D:9E:4D:AC:22
Authority key identifier: 72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39
Certificate issuer: /CN=A91D09BC/serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft
Manifest number: 0134
Signing time: Mon 11 May 2026 05:59:21 +0000
Manifest this update: Mon 11 May 2026 05:59:21 +0000
Manifest next update: Mon 18 May 2026 05:59:21 +0000
Files and hashes: 1: cpJMv-NjcwP3sTdsjPca22H7bDk.crl (hash: tWA/gCLli9z7SLnbN2l3/gecMskcTGo9rCdZy7bAiCs=)
2: 526AF16A3C7B11F1B0CB2EC97EEE528E.roa (hash: /a4QOETR5wBQx4lL0BfTBrG9hDYCg/Ec1yCZX3YiOH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39
Validity
Not Before: May 11 05:59:21 2026 GMT
Not After : May 18 05:59:21 2026 GMT
Subject: CN=6a017039-12e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:67:ba:33:22:d9:8d:2e:36:e2:f7:00:a1:
81:c7:0d:27:8e:a1:bc:44:f5:5c:52:83:23:8c:41:
e0:11:14:5d:80:c8:1e:3f:e7:a9:74:21:28:57:db:
f5:83:5d:d4:99:dd:07:e8:5e:b1:96:f5:05:b7:4c:
9a:b2:ce:dd:fe:2b:7c:21:10:a7:54:5f:9b:71:94:
78:6f:ec:ef:28:c7:0b:26:a2:8a:7c:73:81:f4:94:
68:dc:c2:f1:52:9d:59:9b:4b:38:4b:89:f4:50:58:
8f:ed:66:ec:b2:27:16:bb:54:4c:41:e6:8e:74:d7:
3b:f2:27:22:7a:cd:82:20:07:b3:97:3c:89:47:0c:
c1:d1:92:f2:26:30:d2:1f:93:46:bc:47:c7:3e:17:
57:91:32:90:99:53:2a:51:15:8d:25:ba:65:83:bc:
97:35:bc:20:45:16:f3:a3:d7:fd:73:4e:bc:21:7f:
7f:55:23:0c:41:94:b8:f2:f8:dc:c2:2e:2e:21:34:
ab:1b:9e:e9:ef:b4:55:b6:63:83:63:bb:94:74:32:
0a:2e:55:e2:47:50:c5:58:81:3f:b1:29:0a:5a:84:
01:4c:f7:46:51:f4:8e:a1:2a:17:ea:d9:0d:84:30:
36:95:92:88:a0:49:5b:e0:12:6f:29:3d:2e:8d:64:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:49:B9:42:7D:55:6E:DE:D8:C2:77:08:65:3B:D8:0D:9E:4D:AC:22
X509v3 Authority Key Identifier:
keyid:72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:eb:39:3a:7e:6a:a4:cf:93:b2:cf:5c:3a:78:40:34:16:a7:
2d:30:b0:ff:da:fd:16:49:f7:c2:c8:d2:88:b5:1a:d3:98:47:
7c:4d:56:d3:99:3d:c7:f6:e3:d0:df:f4:aa:07:a1:8f:c9:f8:
d0:38:db:54:5d:1a:26:4f:ea:b3:23:83:ce:33:e1:7c:ef:30:
ba:8e:22:7c:e9:b2:5b:eb:b6:f7:1d:92:d8:f1:8b:fb:68:d1:
7b:b6:4d:f2:0d:4e:88:b9:d0:98:e1:57:56:63:c7:2b:e8:f3:
be:34:dd:81:cf:3b:11:b7:24:e0:5e:92:f5:81:44:28:d0:02:
70:e0:cb:f3:12:bb:95:f7:ff:a1:0c:4a:a2:a7:77:48:1a:53:
08:2c:06:67:04:1f:19:b7:6e:72:1f:fa:a1:1e:9a:47:ae:27:
2a:fe:73:b3:ae:01:c7:ec:59:6c:78:a5:9f:3f:51:00:ec:53:
76:38:67:94:47:0b:ec:7b:73:0b:13:64:9c:29:51:fa:b9:9d:
45:5f:b4:56:61:49:93:72:9e:b0:66:98:03:a7:7a:77:88:af:
c4:f0:1e:88:af:cf:9b:c1:12:40:8b:c5:47:c1:3e:01:35:bb:
ff:90:41:cc:ac:6b:78:ce:e5:93:de:a4:b2:27:3b:d9:b6:02:
6d:e8:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:50 2026 by rpki-client