
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json)
Hash identifier: Oet4z/DLG9aGy+xqIJp7Ow8XHADtZyxt6pBAQWFgCEk=
Subject key identifier: DA:A5:6A:9E:20:DB:B6:05:CC:7F:6C:D5:94:FF:84:25:BC:F9:0C:C0
Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19
Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
Manifest number: 01BD
Signing time: Fri 17 Apr 2026 03:40:34 +0000
Manifest this update: Fri 17 Apr 2026 03:40:34 +0000
Manifest next update: Fri 24 Apr 2026 03:40:34 +0000
Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: 5tgPBSm0SQPZX5VcKRk9GtoNd7xv3/+ufcNrVGeytio=)
2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: CUeuH72R6wMEqHdQYRhjXClzCmFmQxPMkyhfcP/mgQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl
rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
Validity
Not Before: Apr 17 03:40:34 2026 GMT
Not After : Apr 24 03:40:34 2026 GMT
Subject: CN=69e1abb2-7a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:bf:fb:5a:d4:a4:61:9c:9d:9e:f5:a1:7f:
05:5b:69:d6:f6:97:5e:a7:b9:b2:31:8e:08:a1:b2:
9b:01:ba:b3:df:62:40:2f:bc:9b:9c:51:1f:57:0a:
89:10:d4:6e:4a:ca:90:fd:ec:09:2f:5d:17:7c:cb:
61:5e:d9:c6:40:a8:56:67:d4:ee:ee:78:0e:dc:bf:
0c:85:c4:de:93:78:db:cb:22:d0:5d:7a:1a:74:e6:
bc:92:13:0d:c1:9c:60:82:57:c6:ee:aa:92:1d:e5:
c2:01:8b:06:26:74:ec:52:11:9c:4a:28:12:24:93:
4e:4b:75:c8:47:f7:fc:89:6e:90:35:a4:f5:ef:23:
bd:67:d7:bf:bf:a8:b6:43:50:29:0e:d4:17:4c:0a:
2e:b0:33:38:71:ca:fa:8b:74:fe:65:54:8b:75:14:
a6:79:5f:da:09:25:73:b0:2c:6a:f8:f6:87:ce:3f:
f1:8c:e3:0d:43:c2:48:5f:ac:c1:aa:68:ac:b2:0b:
03:0a:cb:d6:e3:16:45:c8:be:97:6d:55:de:24:99:
b6:eb:1d:ca:bb:f4:d6:18:f5:b6:7a:4c:ae:09:5c:
ac:30:2a:3d:ca:7e:ec:3d:4e:60:1e:db:5e:1f:d2:
de:09:1b:66:a8:21:db:b4:b0:20:a0:8f:69:07:7f:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A5:6A:9E:20:DB:B6:05:CC:7F:6C:D5:94:FF:84:25:BC:F9:0C:C0
X509v3 Authority Key Identifier:
keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d4:dd:97:4e:0e:0b:5a:51:45:4e:7e:58:a0:53:97:95:4e:
a7:a4:cd:57:04:4b:4f:e1:4a:ac:00:96:01:39:66:57:6e:47:
0d:d3:e1:c5:1e:f6:58:f6:6d:42:60:17:fd:44:00:0e:0c:2c:
1e:8a:db:c2:3c:c2:69:27:c5:5e:b6:42:c5:e8:0f:7e:71:bd:
44:6f:12:66:be:e9:66:ab:df:ce:7c:b7:a0:49:19:05:85:47:
6a:64:d6:3c:36:a4:ee:ce:82:81:13:b1:ad:03:ef:29:20:da:
77:6b:2c:c0:68:e7:65:68:bf:5f:15:fd:5e:9b:e3:31:89:d8:
77:5d:df:af:fb:9b:bf:16:d4:a9:ff:48:8b:50:61:ba:1f:1c:
da:f8:56:e8:8e:7c:56:df:1b:d0:b2:b8:a9:f2:a5:69:3e:4b:
36:62:92:1e:00:15:bc:92:18:c7:80:df:8d:8e:31:7d:e7:e1:
c1:0a:9b:91:6d:1a:da:2a:62:13:26:70:f5:90:27:82:26:af:
bb:2f:8a:68:16:d6:10:a0:37:4e:54:dc:5c:51:7c:6c:c4:23:
17:12:b5:22:4d:51:1d:7b:f5:61:d4:9e:81:f9:a0:1a:66:bc:
a4:95:a6:33:28:28:33:57:4b:1a:96:e7:a8:3d:58:6b:1e:cd:
c4:56:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:41 2026 by rpki-client