
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json)
Hash identifier: spTojOkoP/Tf33Kj48h6eZUFgX8HkuKzBLQoRcs2BAM=
Subject key identifier: BC:B1:73:21:D9:6C:EB:0B:A1:64:53:4F:D3:19:0A:50:D3:CD:2D:5E
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial: 0309
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
Manifest number: 02F5
Signing time: Mon 21 Sep 2026 01:00:43 +0000
Manifest this update: Mon 21 Sep 2026 01:00:43 +0000
Manifest next update: Mon 28 Sep 2026 01:00:43 +0000
Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: gESVDOB9RF5kvCdgy3CSse+7c5kKtPJq9SRyM+opvJ8=)
2: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: 3q66unEtiXx6jKcOQRNMynBbEHvMb38v7KWWr1AaGpQ=)
3: 99E52804462E11ED90035452C4F9AE02.roa (hash: qcEi6yFXe14vxwDIXMsWeAcEI41V5KEYbNBlQcRMfIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Validity
Not Before: Sep 21 01:00:43 2026 GMT
Not After : Sep 28 01:00:43 2026 GMT
Subject: CN=6ab081bb-8971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:60:2b:58:a4:be:0d:f4:d9:04:e2:14:35:
ac:66:a7:c0:04:0f:25:e3:c6:a2:24:1c:af:82:a2:
cc:b4:48:a3:1e:12:87:fe:ff:f0:c8:f0:ca:f9:0d:
5b:48:db:df:d3:aa:eb:cb:41:62:08:7e:58:ba:90:
0b:c7:9c:63:fa:de:85:5b:37:10:b9:ee:4e:a5:06:
83:58:4d:f7:3e:6f:fb:a4:04:cf:c8:20:de:2a:af:
5f:94:50:0c:e3:d5:bc:ab:c3:c6:f5:6c:07:fa:09:
ca:ce:8a:02:41:3a:cc:ff:49:41:6a:d3:87:ce:3b:
00:62:23:6a:6c:ae:e2:20:b4:b8:3f:10:e5:46:94:
5d:ea:82:cd:7b:c7:8f:4b:46:f4:9b:b4:28:6d:98:
2a:68:82:b0:07:43:31:09:d4:16:97:8e:0f:53:b5:
9a:e8:d2:4b:f7:af:54:dc:e6:70:8d:8a:be:a3:c6:
ac:99:9c:f6:93:7b:59:4f:e9:e4:96:b8:4e:d4:b2:
5a:ce:80:03:14:d6:e1:e7:4c:65:63:d6:13:e2:3d:
22:f5:4b:b8:9f:98:f1:d5:50:4f:41:da:2c:38:db:
34:87:44:4e:dc:8e:22:82:d2:d6:ab:29:fd:f0:33:
99:bf:fe:fe:20:d0:07:d8:15:81:06:0a:91:f3:ff:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:73:21:D9:6C:EB:0B:A1:64:53:4F:D3:19:0A:50:D3:CD:2D:5E
X509v3 Authority Key Identifier:
keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6e:a3:55:ed:88:fb:5c:ed:5b:87:92:45:68:83:3e:fa:fc:
d3:81:96:7b:c2:1d:aa:8a:71:e2:90:d3:ca:a7:ea:a4:e3:da:
4f:8b:27:f5:50:9d:e9:97:e1:3e:7d:52:9f:ad:05:e8:85:35:
bb:8b:4f:cd:fa:3b:d6:89:fa:72:30:7a:05:9a:49:b5:e5:94:
77:a9:dd:54:48:2e:8c:7a:3d:c8:94:7d:62:4a:64:19:f3:72:
fa:49:c5:6e:dc:1e:79:bb:6c:06:51:c4:24:5e:8c:bb:be:2f:
77:9f:78:e9:31:8d:23:bb:24:c1:74:32:97:e0:79:be:f7:c4:
f8:01:82:4f:03:a4:1f:50:73:49:57:36:f2:42:12:d6:4c:b5:
b3:0a:f5:02:ca:88:b1:f2:f5:ce:ab:63:1b:1c:3f:e4:10:37:
9d:af:da:26:72:1a:d3:66:7a:12:75:54:a3:15:48:6b:4d:e7:
5c:b0:32:b9:6a:66:3e:8e:c4:fe:38:9b:01:8d:3f:b5:d8:79:
47:16:be:6b:3c:f6:1b:bb:49:7b:20:cd:38:de:3e:58:07:d6:
8c:12:ec:e5:14:53:08:01:a3:5c:b3:23:5e:4c:b6:03:64:e2:
24:34:29:43:87:16:a4:d9:38:d3:1e:c4:1b:4c:2e:b5:32:fa:
9e:f8:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:02:27 2026 by rpki-client