
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: 6j5m0oYNzZI6xA/0N34zr6iICXOZX0UayQwPdiKU7eU=
Subject key identifier: 12:CE:AA:DF:07:37:6A:4C:0C:B3:C8:1C:20:27:75:BC:71:B7:63:05
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 05A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 058D
Signing time: Tue 28 Jul 2026 23:53:57 +0000
Manifest this update: Tue 28 Jul 2026 23:53:57 +0000
Manifest next update: Tue 04 Aug 2026 23:53:57 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: kFFE54+fUEPJIgq0XiGmEZyPOWubi2m2MW5hTxWOh7E=)
2: 19270196406311ECB405CB27C4F9AE02.roa (hash: HVYsfOxlb2WAh2eGE9kwR0kPlhU1KxlVthyk27GCA3w=)
3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: uWKrlH46xOMUPQf0I41m9PfK6LPIgrPit2IHhoLq4XQ=)
4: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: GGQqfvLx7zM2VjLtrQhpcfOMC/ugg1QcYqduayPT2Bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1440 (0x5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Validity
Not Before: Jul 28 23:53:57 2026 GMT
Not After : Aug 4 23:53:57 2026 GMT
Subject: CN=6a694115-579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:4a:fa:3a:4d:24:3a:ee:b0:62:20:c9:5a:
23:e6:11:35:57:c3:33:64:b6:49:30:71:79:04:46:
e5:7d:6c:ef:ae:17:17:7b:01:fa:30:92:94:e4:83:
37:76:ff:59:44:b5:0b:39:18:14:6f:e6:95:c2:68:
20:4b:dd:58:75:a9:b7:f9:17:44:8f:d1:69:79:ec:
94:4d:a9:5e:36:c3:cf:37:07:4b:02:f2:4f:cf:f3:
0a:bd:50:1d:0d:09:42:75:1d:de:33:9a:a6:ab:c1:
39:79:05:e0:79:30:24:49:72:d7:3a:bb:b3:63:24:
90:20:6e:17:ef:db:e3:ad:84:78:74:0b:04:44:18:
4a:e5:1d:a9:69:aa:ee:0b:bf:ab:bc:5d:68:8d:b2:
43:8d:67:22:d8:f8:7d:dd:1e:05:81:61:e2:d8:4e:
18:7f:74:dd:5b:34:b6:ff:65:03:f1:cb:c3:ed:a1:
69:4b:5b:d5:65:3b:d7:3a:8b:e5:46:80:ac:c5:fb:
84:c4:69:16:f3:d7:a3:a1:b8:1b:c2:58:a2:d9:81:
81:97:0e:19:b7:c5:99:a5:d5:61:23:d6:ab:dd:47:
71:7c:58:8a:cd:8d:4a:8a:05:09:6c:b8:94:7b:8d:
f7:3d:ff:fe:67:d4:62:f5:35:45:a3:43:c1:a9:68:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CE:AA:DF:07:37:6A:4C:0C:B3:C8:1C:20:27:75:BC:71:B7:63:05
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:c8:5a:dd:4d:5b:6f:84:fe:b0:0b:60:a9:aa:da:62:8e:12:
55:68:a3:3f:ee:c0:49:b5:11:7f:32:a8:ae:8f:5a:04:6c:51:
62:1b:b1:ed:df:b9:05:d5:e6:b9:19:ad:13:56:e5:c7:02:13:
c8:42:4e:54:ea:2b:52:e2:51:54:67:fd:4a:60:3b:c9:26:e9:
cc:b7:90:a4:fa:1f:f6:f5:5d:59:36:f5:81:8d:5e:3b:03:3c:
11:6b:db:6e:46:2d:ca:b3:6b:ca:cb:39:30:53:73:31:4a:8f:
7c:15:43:27:df:2c:f9:af:fa:cc:49:9f:b1:d5:58:b9:e5:40:
3b:1e:e2:ff:29:a3:83:8c:16:d9:5f:56:eb:56:80:21:0a:df:
c4:69:cd:3d:3e:a8:05:d9:e1:f2:74:15:25:b0:95:d6:cd:b3:
02:7c:f0:a5:b8:6a:45:7f:2c:b8:ee:64:fb:f2:91:a9:72:c9:
62:b1:52:7a:ae:30:5f:6d:4e:8b:03:1a:60:2c:0b:d7:e5:2a:
66:72:a5:7d:27:b9:8b:fa:b0:2e:bf:9e:c9:21:d9:9b:ce:5c:
47:0a:6d:94:66:a0:25:6d:7a:df:b7:f0:d6:92:4f:a5:d0:10:
79:80:b3:79:55:52:c2:83:5b:c8:52:25:f0:37:1f:50:1f:c7:
c9:fb:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:07 2026 by rpki-client