
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: grkoL75zH/syj7lBUV4/KYfZln6RV5wvLhde1/DQiS0=
Subject key identifier: DD:2E:AE:65:AD:9E:AF:D8:B5:D1:67:02:F4:C7:1D:19:05:82:1A:C7
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 054D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 053F
Signing time: Sun 01 Mar 2026 00:05:12 +0000
Manifest this update: Sun 01 Mar 2026 00:05:11 +0000
Manifest next update: Sun 08 Mar 2026 00:05:11 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: 8rUyWU8Peo5mNhz9WxGyrDmyt8esrEKC42cxp/m7cy8=)
2: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: dBrvRhE7d6Gn9XYLN8nXQpwQDGFVLLDwce3vUOtRs0Y=)
3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: TsQo1WVy7+xiLxG6l3ch8mItS0YptsU2uDmAtTmaMrs=)
4: 19270196406311ECB405CB27C4F9AE02.roa (hash: 1UGikhqVC/p0q/nRUe3Y/KltgB00K+avhNJIYpdz6SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Validity
Not Before: Mar 1 00:05:11 2026 GMT
Not After : Mar 8 00:05:11 2026 GMT
Subject: CN=69a382b8-0e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:18:55:78:28:5c:b2:da:e7:90:c8:fa:9e:
2d:d9:c6:79:03:9d:48:d7:00:da:25:37:b3:a8:a1:
46:c5:df:b4:b8:0f:ff:a6:fd:e7:58:d2:09:a8:1b:
e3:10:ac:22:b5:8c:f8:10:47:2e:86:22:3e:6c:18:
80:21:87:62:f6:22:6e:06:ca:53:41:e0:d8:5f:e7:
00:66:cf:ce:1f:e1:c5:79:60:aa:a5:20:29:26:06:
cc:cc:d9:b4:98:63:0f:24:cf:8f:c4:b6:e5:20:e5:
35:99:40:c6:3d:34:f4:b0:78:55:e8:26:7d:e4:0f:
f6:66:d3:d8:80:f6:b0:59:2f:18:49:8b:b5:1f:57:
17:b8:2c:92:89:c6:3d:6b:57:3a:d1:cf:63:74:5b:
30:9d:12:f4:f8:4e:5a:e4:c5:20:01:90:53:73:35:
2b:4e:84:bb:09:af:5f:d1:b7:22:7e:08:7a:69:f1:
36:af:19:12:01:83:4c:0c:b6:70:6e:48:cf:5a:3d:
77:67:1a:7e:0c:20:08:84:83:13:3c:d8:aa:a4:de:
b7:40:6e:27:fe:62:ab:99:ef:96:89:93:e6:28:b5:
7d:5e:fe:42:19:a0:50:1b:af:87:98:a5:8a:8e:19:
60:8a:8f:b1:df:76:4a:33:57:2c:2b:10:6a:cd:6a:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:AE:65:AD:9E:AF:D8:B5:D1:67:02:F4:C7:1D:19:05:82:1A:C7
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:90:8b:71:5e:d2:43:e9:84:a1:44:fd:b4:44:8e:28:8b:e0:
81:de:2d:46:2f:94:de:d9:61:dc:10:6b:74:c7:51:26:35:bf:
18:ce:c8:c6:26:c7:9e:2b:98:44:44:91:ab:8f:b6:b1:c6:2a:
7a:5f:41:17:07:be:f5:b1:cb:0f:51:00:52:dc:85:64:4d:59:
1b:5a:9c:b7:f1:d3:5f:43:b4:08:8b:6b:31:d8:b4:bb:bb:8d:
50:f8:df:5b:a4:e6:fc:d8:72:6f:73:88:30:82:28:47:77:e3:
da:97:08:0f:71:48:d6:5c:db:76:72:71:62:30:d8:7b:19:13:
2f:0b:48:4a:97:17:0b:d8:f4:5f:12:3f:48:f3:e5:22:a7:c9:
1e:26:d1:cb:48:ad:80:be:1c:9e:3a:c8:79:ab:fe:33:dc:a8:
62:61:64:7d:f7:2b:ad:15:c2:3e:80:03:0f:57:2b:e1:b3:2e:
0c:d9:57:2d:00:73:89:9e:78:e9:bc:aa:c6:2a:ee:12:f6:2f:
21:37:b0:f4:3b:81:8c:af:44:0f:94:72:6e:23:cf:66:7a:27:
c1:50:76:fb:34:3d:1b:2a:bb:06:47:a0:bf:86:e9:bc:ac:f9:
7c:8c:1c:32:49:68:dd:7c:1b:8d:77:0b:fd:1a:09:3b:55:47:
d8:93:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:18 2026 by rpki-client