
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json)
Hash identifier: Fo8bVQf7RakPaRY+3owB68aSINMSTnUaOBJldp89tqA=
Subject key identifier: 50:A8:CD:1A:CD:99:84:FE:75:59:4F:8F:66:A8:29:E5:B2:59:97:26
Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
Manifest number: 0167
Signing time: Thu 23 Jul 2026 06:27:27 +0000
Manifest this update: Thu 23 Jul 2026 06:27:26 +0000
Manifest next update: Thu 30 Jul 2026 06:27:26 +0000
Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: 5hqymNFDHQvReaxoXS22+QVKaQ8yn0CUcmC4fROvuaA=)
2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: /xBEhjFYaty4e00WWfiVcrTVHTi4dEl3w+IvJBJnwpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Validity
Not Before: Jul 23 06:27:26 2026 GMT
Not After : Jul 30 06:27:26 2026 GMT
Subject: CN=6a61b44f-518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:1a:27:86:d3:c6:11:49:81:69:c4:0d:5b:
c0:7e:46:0e:45:64:a1:10:d7:84:96:59:48:1c:0d:
41:6e:70:2d:3d:bd:06:9d:17:ae:4f:8f:3b:85:9d:
28:72:44:01:25:64:63:e8:70:9d:b4:f0:ab:26:fa:
ee:80:7e:25:15:09:a2:99:5d:ff:52:89:df:37:bc:
2c:a7:91:03:b9:16:1c:18:4f:05:c1:b7:58:05:f0:
fe:f1:65:66:7a:15:c8:5e:15:50:6c:a9:d5:96:a6:
72:2a:fa:bf:13:7a:fa:34:7c:47:79:a5:7c:b1:5c:
c6:2d:30:38:15:45:e7:6a:8d:f5:5b:0c:0b:4e:3d:
5b:89:7d:0a:d9:b8:bd:73:51:23:bf:f7:bd:86:87:
0e:1e:86:7e:eb:6b:d8:ea:83:8c:b9:16:fa:e0:9c:
cc:dd:c9:36:19:7d:48:c6:4f:80:bc:15:9f:b1:23:
43:0d:2e:eb:74:1d:5a:54:ed:2e:52:2e:ee:66:e1:
0a:12:b9:d2:4f:e7:52:21:72:98:9a:82:cd:5b:8b:
96:b7:7e:8d:c0:da:9b:8c:d1:8f:02:5e:2d:a0:46:
73:2e:52:2c:09:30:01:18:6e:02:fd:eb:68:6c:f9:
c3:41:dd:06:ad:d0:0e:44:93:70:25:0e:c6:22:58:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:CD:1A:CD:99:84:FE:75:59:4F:8F:66:A8:29:E5:B2:59:97:26
X509v3 Authority Key Identifier:
keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a3:3e:f2:8f:bd:e6:4a:0d:a9:fb:ba:2f:96:91:b1:75:9d:
ce:ff:ee:65:17:85:56:8e:1d:32:e5:b7:17:c3:8c:7a:8c:25:
c1:65:09:4c:a5:12:62:b6:78:8b:c1:7f:3e:fd:e1:5b:54:c5:
be:7c:ee:2d:9f:4d:88:28:bc:ad:5d:85:43:e0:4d:c2:2c:b6:
17:bd:4c:29:e4:c1:55:53:5c:35:44:3f:93:17:6c:de:4a:5f:
ae:c1:36:52:e9:b2:67:c3:8f:85:05:16:64:23:be:4a:d8:49:
28:91:85:7d:7a:6d:b8:fe:74:f3:23:8d:49:e1:5b:37:eb:41:
1d:18:d4:80:9b:d2:6b:d6:8b:a8:a4:eb:c4:39:89:8d:9f:b3:
e2:45:ae:aa:26:1e:81:5c:f6:84:7a:21:7b:a8:b7:8b:a3:f3:
0f:2e:bd:37:96:e7:ff:df:c8:e3:85:23:12:3c:66:50:cd:14:
f1:ec:ba:41:76:00:44:07:67:79:f9:f1:4f:0e:24:4b:62:f3:
58:94:22:12:28:3f:98:dd:a0:66:85:77:99:5a:0e:15:ff:bf:
29:b3:b9:5c:56:25:6c:cb:98:17:1b:a4:56:4d:4e:50:f2:89:
cb:ec:bc:71:0b:68:da:fc:45:6a:fb:95:a0:df:48:97:a0:ca:
95:69:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:32 2026 by rpki-client