
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json)
Hash identifier: ZnY3lBnkqtdzUVLA2Obe5YP/oABXqNRRnyDcz+l23QM=
Subject key identifier: EA:BB:79:0B:A8:8A:D1:D1:E8:43:5B:34:7B:3C:0F:49:BB:8B:11:6F
Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Certificate serial: 0EA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
Manifest number: 0E9E
Signing time: Tue 28 Jul 2026 17:50:55 +0000
Manifest this update: Tue 28 Jul 2026 17:50:54 +0000
Manifest next update: Tue 04 Aug 2026 17:50:54 +0000
Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: C4SivQiqaRUIzqkZwWKFGDFn5ft4zoR8GXAdZV1xrwY=)
2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: OBgW+edgtqEgU2zYC3kqUPRhw9Mb7tvvEfxdbFYsVkI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3751 (0xea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Validity
Not Before: Jul 28 17:50:54 2026 GMT
Not After : Aug 4 17:50:54 2026 GMT
Subject: CN=6a68ebff-9e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:8f:8f:db:a3:c8:f5:6c:07:8e:38:fe:78:
38:b5:b4:af:19:ff:2a:81:fa:63:22:87:0f:f0:69:
00:55:40:8b:14:a0:f1:a3:c8:ab:f2:83:32:0b:ec:
33:89:03:a8:88:20:49:38:b3:32:d3:f9:6f:60:48:
b6:09:6b:04:a2:6d:6a:16:6e:c7:10:ce:c0:5a:c0:
14:9f:8e:1d:b5:e9:85:81:d4:a4:dc:f7:89:d2:e0:
8f:1a:c3:ac:d4:6e:05:dc:89:bd:81:14:07:65:97:
e0:a9:77:3f:4e:41:7e:ab:c7:57:db:22:bc:31:25:
3e:1f:98:1e:44:73:c7:de:a7:eb:e7:58:1c:fd:da:
9b:8a:65:d7:3d:0b:fa:5a:bb:4c:5d:96:82:90:e2:
97:67:34:12:2c:97:29:c4:35:8b:91:11:12:44:b8:
bf:eb:66:bc:fd:e5:63:60:cd:3b:ab:e8:bf:2f:dd:
c4:f9:6d:2c:4c:09:24:74:4c:de:0d:5b:ec:8b:97:
35:8a:d8:4b:a1:c1:c0:ec:a1:4b:48:27:a0:90:f7:
19:c7:a0:6a:49:9a:e6:7f:f0:ac:66:c4:02:e5:f5:
2f:bd:9b:0b:a9:d4:26:47:b4:6b:1b:8c:2d:a2:96:
77:00:51:ff:56:e0:af:1f:f6:73:0a:ae:60:6e:0f:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:79:0B:A8:8A:D1:D1:E8:43:5B:34:7B:3C:0F:49:BB:8B:11:6F
X509v3 Authority Key Identifier:
keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:3f:d5:61:27:87:6c:20:3e:9d:b3:a5:ca:0e:77:b3:2e:
9e:1b:b9:cb:41:60:2e:35:2f:ca:13:5f:53:5a:83:17:6b:42:
75:20:b2:22:a7:74:d1:d5:bd:d3:72:ed:23:db:98:7d:ab:16:
5d:1e:43:4d:e1:8f:7e:45:3c:cd:c2:e7:c9:4d:16:b4:76:d7:
e8:56:58:a4:c7:ed:ca:ca:7c:09:87:96:1f:72:dd:aa:ab:1e:
6e:0b:c7:c5:08:fc:a5:43:d1:12:05:67:9f:8a:d6:46:72:f3:
f7:cc:5f:c3:ac:7f:8e:85:5a:b5:9e:b4:03:e2:66:f3:b8:20:
85:85:49:2a:a1:d2:f0:e9:45:3e:0b:39:0d:9e:40:c0:1f:b5:
36:d5:70:48:26:06:7c:b9:7e:cf:13:93:c5:c6:f5:c4:6b:f7:
2f:6f:59:77:b4:69:c4:83:b7:49:90:59:0f:60:73:60:b2:17:
95:6e:fe:d5:95:1d:a3:a3:95:2d:39:e9:d9:be:f9:9d:57:94:
b1:7c:c1:39:94:3f:1d:c3:10:f3:eb:a6:82:45:ee:cf:89:43:
cd:de:fb:47:65:7e:94:35:5d:86:fb:a2:d7:20:c9:2f:d4:92:
fd:87:6e:e2:60:76:d1:55:91:54:66:2e:35:fb:ee:8b:d3:ed:
4c:19:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:12 2026 by rpki-client