
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier: em/uIAguBgnEESrgMAN+83hXYvbiifU6NwW9MHCMaDI=
Subject key identifier: 94:20:86:EB:90:BF:15:08:C5:76:7E:A7:D3:91:4D:59:AD:D4:3A:2F
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number: E8
Signing time: Fri 13 Nov 2026 06:41:11 +0000
Manifest this update: Fri 13 Nov 2026 06:41:11 +0000
Manifest next update: Fri 20 Nov 2026 06:41:11 +0000
Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: znn4TEnM1brugeEYh4cac54DmTMjS9Cwrv+82jmzyZI=)
2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 06:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Validity
Not Before: Nov 13 06:41:11 2026 GMT
Not After : Nov 20 06:41:11 2026 GMT
Subject: CN=6af6b107-01af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:e3:c8:6f:f0:e4:ef:15:59:48:0a:9c:ce:
41:e5:bb:59:7e:94:92:ea:23:ad:68:69:6f:2f:20:
19:34:95:57:94:f6:b1:e7:85:8b:a8:02:69:76:4c:
85:c0:11:62:71:e8:42:84:96:2d:50:b3:51:ff:28:
a6:b1:98:89:bf:c7:d3:b5:88:5d:ee:f0:a0:42:c4:
83:94:06:48:3f:f9:47:c5:3e:ff:cd:d8:40:2d:f7:
de:25:73:a1:0b:af:04:b9:19:2f:eb:ec:82:ff:57:
bc:51:73:b6:b8:c4:f5:f1:8e:a7:f4:12:34:19:37:
b4:15:22:a0:6f:e2:0a:45:72:a1:b9:1e:b7:28:05:
94:2e:07:b0:b2:6e:2e:77:01:1f:46:2d:11:66:97:
47:1f:3f:4e:ee:13:0d:d7:48:49:f0:4b:ea:2b:a6:
f6:bc:30:31:9c:10:f6:e6:bb:2f:52:5c:fd:13:e5:
7c:a0:59:40:bc:6a:ef:0e:7d:ff:c6:1e:ba:5e:70:
58:30:66:c8:0a:ff:6c:4c:99:a1:ba:f3:84:51:09:
0a:0e:99:0b:44:17:d9:89:e5:63:4e:fa:4a:da:7b:
99:9a:be:63:b4:1f:f4:3a:7e:1b:59:51:1a:99:a1:
7d:ed:c6:50:54:49:ad:61:43:45:48:90:ff:5a:86:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:86:EB:90:BF:15:08:C5:76:7E:A7:D3:91:4D:59:AD:D4:3A:2F
X509v3 Authority Key Identifier:
keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c2:c8:14:66:6c:ca:f2:2a:83:9d:85:14:75:58:64:eb:9b:
0b:4a:35:ba:48:ce:c6:77:b2:0d:f6:56:bc:e7:a9:86:5d:0b:
72:e1:51:c8:19:58:7b:fc:07:37:17:c4:27:8c:5f:52:90:f4:
1d:cb:28:5a:dc:53:06:ee:70:cb:83:8d:a7:1a:83:5e:c5:81:
cc:49:7f:6f:62:01:81:8c:56:de:03:2a:25:4b:f5:44:de:04:
f2:44:ab:03:50:29:bb:ea:94:0e:a5:84:8e:1b:71:0c:06:49:
d5:a5:24:8d:60:3f:22:69:6f:de:12:2e:63:a8:26:2d:f2:d0:
ca:1f:30:21:05:08:f7:44:9c:20:04:4c:c6:c5:df:43:e7:2a:
80:e8:5d:61:22:fc:b4:d5:1f:3a:e3:5e:f5:1b:3f:b7:b7:68:
08:79:e3:30:94:a2:03:87:70:25:e4:a5:bb:5c:f6:7e:ea:4f:
35:ff:9e:dc:d5:db:ba:3d:f7:17:3e:ae:62:17:9f:e7:d4:23:
43:04:0e:15:79:6f:a9:73:a8:ad:0a:69:ee:87:b3:68:01:e4:
c1:da:5d:86:50:df:10:35:d5:d9:a3:e6:9c:5e:ae:11:e6:17:
84:6a:77:ed:ad:86:cf:0a:7d:b0:84:d3:4d:f8:8f:be:e2:74:
3d:1a:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:58:40 2026 by rpki-client