
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json)
Hash identifier: X+0HTrIH65DfJ9bzbEXzJ9nChJOZpXWq15WA6kEo8SA=
Subject key identifier: 31:26:B9:9D:55:10:3E:FF:D0:A0:58:E2:41:73:A2:0D:05:16:97:10
Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Certificate serial: 0E57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
Manifest number: 0E50
Signing time: Sat 28 Feb 2026 17:55:21 +0000
Manifest this update: Sat 28 Feb 2026 17:55:20 +0000
Manifest next update: Sat 07 Mar 2026 17:55:20 +0000
Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: cqjFYUk/MLEsGECsIXPiYePr7Pq8zD/v/jgGC6OQUz0=)
2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: cYdmS5wLlGFfq5Y1sGvt09KmgEcXdc6nHMkHCfvEFrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Validity
Not Before: Feb 28 17:55:20 2026 GMT
Not After : Mar 7 17:55:20 2026 GMT
Subject: CN=69a32c08-efac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:54:77:5a:70:d4:0b:e0:6b:64:22:f8:cc:
5d:27:13:4c:67:c3:6f:ea:cf:f1:19:d7:12:91:c3:
91:18:3d:4d:ad:5f:01:f4:18:f3:d3:16:60:41:31:
c8:61:3d:8d:a3:8f:73:29:7a:46:49:12:16:74:37:
2f:1d:2b:e2:1f:b5:24:fd:fb:54:91:3a:46:a2:d7:
a4:3a:0c:c1:72:93:6b:23:d5:d7:f0:88:ab:c5:77:
e8:ee:68:31:d4:66:29:16:4f:a3:73:29:46:24:bb:
b2:ef:95:ca:af:11:8a:5c:0c:9a:39:53:d8:c6:3b:
05:bd:1a:a4:de:e0:2d:2a:14:48:f7:5a:38:a9:19:
81:09:1e:15:e2:64:d3:b2:1d:60:f3:c6:f8:a4:b5:
69:2c:6b:d5:2d:58:50:93:2f:15:04:c2:77:23:18:
63:15:c7:42:14:a5:61:f9:42:ad:ed:9d:eb:56:4b:
17:f1:f7:98:30:72:d4:0c:36:04:92:8b:27:7c:e7:
70:82:12:3e:49:73:22:d5:fd:bf:9f:b3:55:4d:27:
e8:3e:fe:d6:83:26:37:a4:45:ac:56:eb:20:ec:92:
57:45:9a:c9:16:11:af:e9:e5:69:1f:9d:ec:19:1d:
6d:93:4e:be:96:f0:5e:52:3b:07:2c:5c:a0:85:5e:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:B9:9D:55:10:3E:FF:D0:A0:58:E2:41:73:A2:0D:05:16:97:10
X509v3 Authority Key Identifier:
keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:e1:16:75:74:9b:20:82:89:30:3e:0d:90:ab:d9:37:27:c7:
3d:f4:87:41:ab:e9:be:65:c1:96:d0:9a:17:36:98:22:73:e2:
50:fa:34:18:b5:d1:81:61:65:28:7b:af:e9:15:1f:27:b2:f9:
00:9f:81:3c:a0:12:1a:0d:a0:d1:13:bc:35:5f:e1:de:13:94:
5c:b1:c4:cc:c4:05:70:29:fa:54:5e:3d:88:24:8f:8c:30:fb:
9f:08:f5:f2:b4:d9:8f:96:d5:b1:a9:c1:c0:01:8a:62:08:53:
d2:32:af:91:9e:51:35:fe:70:70:ea:c6:0c:85:50:b4:8b:2a:
49:02:56:dc:d5:8e:fd:80:9c:18:6d:53:b0:58:63:6b:0c:b2:
00:c7:81:dc:05:66:6b:58:f5:24:ce:32:77:f1:d2:be:18:f1:
10:fc:82:31:c2:f5:e6:cd:af:ff:b9:e5:5e:3f:7f:8c:3a:72:
55:3f:68:11:b8:27:70:75:d0:f1:53:60:8e:b8:ec:ad:be:d5:
e1:6e:fc:2a:99:55:0e:90:9a:c1:f6:20:d7:b2:67:4a:ce:2f:
86:74:d5:f8:27:31:09:b7:34:97:f8:cc:e1:92:91:0f:f7:87:
7a:ee:99:23:4f:41:48:9e:56:86:47:c4:4e:d4:74:bd:ee:b5:
5a:7a:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:48 2026 by rpki-client