
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
File: Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json)
Hash identifier: QzOmLnSJYcy9ueZusTNHb1GWiYwF6CcfOxsqaqb2M3Y=
Subject key identifier: A3:C7:30:38:75:0A:E6:25:2C:AF:17:DF:0E:A8:41:3A:05:93:96:A4
Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13
Certificate issuer: /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
Manifest number: 0149
Signing time: Mon 05 Oct 2026 05:52:17 +0000
Manifest this update: Mon 05 Oct 2026 05:52:17 +0000
Manifest next update: Mon 12 Oct 2026 05:52:17 +0000
Files and hashes: 1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: 4rjd1JPDVWZs2g04GTN8EsmGGEURy0778dzNmdpE/Xo=)
2: CACE510EA7A811F180A31FD84C11F970.roa (hash: wglg41cZyZ6SHDJ4L1WMDunGSNeOm/hZ1r6SiEx69y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl
rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
Validity
Not Before: Oct 5 05:52:17 2026 GMT
Not After : Oct 12 05:52:17 2026 GMT
Subject: CN=6ac33b11-4f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:8d:92:82:83:74:3a:ac:d5:a5:bc:79:2d:
ca:d7:93:3f:a5:ea:9b:58:7d:6a:bb:9e:27:6b:37:
dc:31:03:75:de:4c:d6:55:42:d1:9a:58:69:12:47:
f4:bd:27:e5:06:9a:b3:07:49:3e:dd:92:67:a4:7c:
c4:26:fd:e0:97:ba:f3:75:ed:b9:da:2d:ba:bb:ed:
d3:d4:0c:5c:a0:8e:bb:80:fc:c7:31:60:23:3c:06:
60:77:51:b3:61:c3:77:f0:32:f0:f0:87:80:de:a5:
25:08:c9:bf:30:20:9c:95:02:54:9a:f7:4f:f1:59:
6d:76:19:dd:c5:08:35:02:89:73:a0:fb:e2:49:ae:
ce:63:f7:7e:5c:85:43:aa:6f:03:dd:f0:94:8c:92:
ec:bd:74:28:64:e3:39:40:ec:15:15:7a:90:b8:9c:
fe:08:d4:cb:bb:c8:c3:1b:2b:e1:d3:21:16:ea:ee:
fb:db:11:87:9d:7e:8f:91:90:a8:a4:58:5c:cf:ed:
13:4d:f5:a8:77:06:8b:a1:06:4f:77:0f:38:4f:15:
c2:ac:09:ad:ad:9f:2e:8d:d7:1f:96:23:12:60:3b:
79:96:7e:b7:ca:8d:f5:76:aa:d7:a3:63:1e:cd:8a:
43:64:e0:20:1e:2c:ef:ed:5c:5a:bd:b2:93:18:45:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:30:38:75:0A:E6:25:2C:AF:17:DF:0E:A8:41:3A:05:93:96:A4
X509v3 Authority Key Identifier:
keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:a7:2a:98:42:70:24:16:5a:b5:45:cb:81:0c:8b:7a:af:
37:75:f6:82:22:61:99:eb:ea:7d:e9:18:96:be:a6:45:9f:c3:
da:08:de:54:36:bc:dc:88:9f:0d:6d:65:b5:08:a2:ab:a3:5f:
ac:81:82:94:ac:1f:c9:84:fd:eb:56:d8:85:0a:39:cf:c3:4f:
d2:ba:e5:26:17:96:5a:98:9e:e8:91:7b:be:36:24:a8:47:62:
f6:4b:10:20:6e:04:9c:db:e1:82:e5:cb:33:28:4c:2e:d6:cb:
ba:cc:76:aa:3d:13:8b:22:80:10:1d:61:cd:f7:aa:09:4b:72:
5e:72:c5:a5:06:66:9b:f9:ac:3e:44:cf:a0:d8:f3:d0:9d:70:
89:70:82:75:15:dc:b9:5e:44:ea:77:71:aa:df:7e:09:3a:55:
f3:a1:e9:b2:5b:54:11:c5:76:f2:a5:22:2f:06:94:8a:95:0e:
70:ea:0e:41:74:bc:90:81:4a:cc:7b:34:24:78:ab:41:47:99:
45:b4:2f:1c:d3:44:41:20:60:59:28:fe:80:9e:3c:15:50:42:
5c:69:ee:5d:53:05:a7:4d:3c:f1:5c:36:1b:67:e3:3c:69:d7:
54:60:e4:f0:fd:42:db:6a:87:cf:ac:44:6f:3a:68:ac:3b:d3:
6d:9f:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:32:47 2026 by rpki-client