
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: 4VGOsgmx/lVTeAmXkp9QVZ1bGd3hjwL6MO8z1xY5Vss=
Subject key identifier: EB:79:94:90:CF:65:96:D8:F4:18:77:8F:14:F0:9B:45:26:B4:AC:89
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 05BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 05A9
Signing time: Sun 20 Sep 2026 23:01:20 +0000
Manifest this update: Sun 20 Sep 2026 23:01:19 +0000
Manifest next update: Sun 27 Sep 2026 23:01:19 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: ni7nvMjTalyjWz6lo0uJccN9glLG74cpIvUXMj9qpS8=)
2: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: uWKrlH46xOMUPQf0I41m9PfK6LPIgrPit2IHhoLq4XQ=)
3: 19270196406311ECB405CB27C4F9AE02.roa (hash: HVYsfOxlb2WAh2eGE9kwR0kPlhU1KxlVthyk27GCA3w=)
4: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: GGQqfvLx7zM2VjLtrQhpcfOMC/ugg1QcYqduayPT2Bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Validity
Not Before: Sep 20 23:01:19 2026 GMT
Not After : Sep 27 23:01:19 2026 GMT
Subject: CN=6ab065bf-2edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:7e:0b:a2:84:5a:b9:bb:87:2d:83:1c:e5:
26:e5:37:47:f5:79:cd:24:4f:74:7b:4d:81:62:ca:
a4:32:ac:ce:8a:7b:6e:fe:8a:f7:a3:4b:f3:23:2b:
fc:20:e5:e2:38:48:2d:f7:0f:ec:d5:f6:7c:6b:e7:
08:65:7e:a5:05:21:95:03:7c:77:d9:e2:ed:10:86:
70:f5:14:1b:a3:71:19:ec:5c:43:dd:5a:d1:2f:c4:
86:70:c6:3d:aa:3c:97:a8:a9:9f:d2:ac:81:b1:3a:
a0:b5:a6:c3:6e:2e:e1:01:2e:93:22:b0:89:86:b7:
eb:74:b8:ba:79:65:b7:b6:22:e5:b0:32:b7:24:49:
bc:8f:e9:93:be:71:10:83:22:e5:df:3e:de:32:ba:
8b:a2:d0:8c:0f:7f:51:e0:b5:16:ce:37:0b:c3:43:
fe:39:6d:b7:4a:7d:c8:d2:6a:ae:56:ff:ed:74:16:
8c:2f:29:30:8e:2f:30:0a:73:54:ff:d9:0a:19:0e:
79:13:37:9b:d7:31:ed:23:93:8f:e4:2e:c1:b8:19:
69:20:6d:c0:71:4a:3e:0f:f8:8d:0d:36:86:bb:a1:
2d:46:4c:70:16:24:bb:02:76:74:d3:65:ae:7b:39:
59:2a:e1:ad:f4:27:25:13:56:7d:28:d8:ef:cc:fd:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:94:90:CF:65:96:D8:F4:18:77:8F:14:F0:9B:45:26:B4:AC:89
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ef:de:64:e8:1a:86:40:f9:0f:17:59:9b:ba:2e:c3:f2:ec:
3b:a2:e5:6b:a5:1e:62:74:1c:9d:01:ec:c9:e3:70:a3:33:d4:
72:7d:b5:8d:bf:f2:74:9b:e3:96:89:fe:fd:d9:bd:5b:81:f0:
7b:1d:9c:19:d5:ac:18:94:ba:57:22:cb:c3:93:a1:55:94:7f:
57:a6:e7:4a:5a:7b:e9:8d:eb:10:67:3c:bb:be:6d:e2:1f:82:
71:80:c6:6e:7f:a1:31:7b:f9:a9:e6:b9:c0:90:8b:f4:e6:fe:
0a:bd:07:01:ce:5c:0c:ec:15:01:6e:89:26:25:9a:8d:cb:df:
18:f6:f9:03:9c:3f:0d:fc:93:df:c4:5b:11:ad:ae:a6:fd:0f:
2a:c9:f5:24:f7:2d:45:38:5a:8b:e5:ff:60:82:ae:32:45:26:
5e:63:e1:53:d5:7e:33:3e:54:51:7a:ee:41:4e:b7:54:05:42:
8c:8c:b4:d9:57:70:5d:a3:a5:12:40:ed:19:7d:a4:8f:40:93:
88:52:1a:2f:c2:62:e1:a4:a5:29:8b:f0:9f:2c:7a:6c:c4:82:
96:79:bf:14:d6:7c:5b:82:f2:cb:54:76:8a:40:84:81:3f:ac:
74:5e:10:11:63:26:39:31:ad:76:4a:25:91:7a:8e:1d:4f:8f:
68:bc:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:09:18 2026 by rpki-client