
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json)
Hash identifier: c0MOlkgIB/oMyTzQcxDHPlzBmnyjkwsLPvSK6GMrFKw=
Subject key identifier: 86:08:42:F5:9A:E2:BF:77:4E:64:8D:A0:7F:3F:AC:4E:EE:2D:3B:F4
Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Certificate serial: 0EC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
Manifest number: 0EBF
Signing time: Sat 26 Sep 2026 17:45:30 +0000
Manifest this update: Sat 26 Sep 2026 17:45:29 +0000
Manifest next update: Sat 03 Oct 2026 17:45:29 +0000
Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: FgBQcyYE3xw8wzi2p+xO53OTI8vFhNfIosZj65M+gI8=)
2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: Kp314Z/IGVTSIepcMGXMRI/Il28yCatLCD2MLmcgYVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3785 (0xec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Validity
Not Before: Sep 26 17:45:29 2026 GMT
Not After : Oct 3 17:45:29 2026 GMT
Subject: CN=6ab804ba-19e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:7e:9b:f3:4c:d4:4c:d9:d2:f3:27:7d:44:
35:b4:0e:16:f1:0a:af:d2:cb:13:a2:0c:41:4e:99:
af:0d:a8:9d:dd:9f:b6:d3:d9:61:dd:a4:e9:f0:c1:
91:9a:85:78:2c:7d:d1:50:d0:41:1c:4b:51:e8:ad:
18:42:ca:76:da:e3:96:04:97:70:26:be:14:78:c3:
b5:43:00:25:98:86:d8:16:23:15:a9:05:55:86:40:
03:a1:e5:9c:b0:d8:cb:f5:fd:70:cf:cf:c8:80:41:
aa:9a:fd:7a:7e:bd:d7:a8:9f:03:cc:d0:af:aa:64:
26:65:86:4a:26:f0:f0:5e:ce:3b:7a:97:65:3e:67:
24:ef:cc:7f:dc:42:99:d1:d4:88:17:43:14:12:7a:
b9:87:53:44:5c:ac:00:7d:b4:f7:10:4c:c4:1a:61:
9e:fa:fc:ac:9e:42:2b:a4:b1:b4:42:60:e8:0f:7d:
89:f4:ef:31:a9:9c:ed:db:e9:d5:13:94:dc:d4:94:
fc:2d:fd:ac:90:f0:2f:48:c9:de:12:7b:19:4d:e9:
2a:43:af:60:28:e3:26:ab:7e:6a:0d:76:99:2e:94:
e0:d3:55:9b:eb:fd:02:55:77:ab:71:28:7e:c9:56:
83:56:92:ee:04:40:42:2a:89:41:e3:ed:44:cb:a3:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:42:F5:9A:E2:BF:77:4E:64:8D:A0:7F:3F:AC:4E:EE:2D:3B:F4
X509v3 Authority Key Identifier:
keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:b5:c8:04:2a:05:64:62:e9:f2:03:4a:a8:71:05:83:7b:70:
64:94:11:9f:9d:06:d5:fa:d0:5c:5c:22:57:38:70:f7:95:60:
14:f6:38:16:32:a7:75:a4:01:60:75:f7:25:fc:49:3b:5d:48:
b5:f9:d2:13:ae:2d:43:8b:37:d5:d7:bd:63:96:52:f3:d0:3b:
7d:2e:eb:c4:c7:45:42:85:1a:ca:35:60:86:48:ae:61:e2:95:
88:82:b6:53:76:c8:b9:12:ec:68:c9:42:5c:cc:9d:93:74:07:
04:c6:2f:48:85:71:6f:44:11:da:57:72:24:5f:c3:52:eb:4f:
34:bf:dc:93:ca:b7:69:34:8b:1b:a0:36:c1:1e:97:8b:33:6d:
88:73:aa:35:1f:8d:19:9f:09:25:73:9c:c5:2b:fe:86:1e:c2:
29:7a:17:6f:46:b5:d9:d7:38:b6:95:c4:2f:7a:96:83:de:c8:
ed:35:14:99:6b:ba:d6:35:c2:68:c3:b1:99:19:a0:7e:bf:9f:
78:86:a8:21:15:6b:ef:2a:35:e8:63:de:e0:e3:bb:2a:24:57:
25:1e:e9:45:82:96:4a:d6:f8:b6:8e:0d:fd:1c:30:73:fa:c3:
41:4d:bf:69:be:d7:46:69:ec:0a:4e:8a:ff:a9:73:d3:b5:3a:
b1:b0:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:34:19 2026 by rpki-client