
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json)
Hash identifier: 8ySVRNNigQvBLo7BOtdRarkmWjBgfcfybIl7VfPGKLU=
Subject key identifier: E3:24:52:2F:54:B2:A3:1E:C0:A5:F3:41:08:B4:DC:73:4D:E6:C7:86
Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19
Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
Manifest number: 0215
Signing time: Mon 05 Oct 2026 03:22:16 +0000
Manifest this update: Mon 05 Oct 2026 03:22:16 +0000
Manifest next update: Mon 12 Oct 2026 03:22:16 +0000
Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: rQNDvAeUs9yOqyIBbYOdbuOnNjAo+OWSN+lbd50w73Q=)
2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: eLebO2+YEq6f+mYfWO6chJr0Ech2TuUK1BNYfJzhDL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl
rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
Validity
Not Before: Oct 5 03:22:16 2026 GMT
Not After : Oct 12 03:22:16 2026 GMT
Subject: CN=6ac317e8-7e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:43:a1:9b:ff:ec:1b:46:6a:2a:24:44:c9:
a2:05:0d:0e:96:b2:83:fb:58:7d:2e:3b:b2:56:e5:
07:f0:36:8f:61:dd:54:51:88:58:ef:fc:b1:6a:f7:
3d:67:eb:9a:f8:ef:73:01:27:28:87:f1:3e:5f:2d:
03:cd:21:64:d7:16:35:31:b4:9a:34:bb:65:39:01:
f7:4d:4f:e6:0f:6a:98:aa:9a:fb:7c:e9:58:80:93:
56:71:04:7e:86:9b:33:a8:e9:a5:6b:1b:a9:f9:38:
11:c4:0d:2e:1d:e5:9a:d4:14:ea:10:5e:8c:7a:ab:
66:04:f1:16:e4:ea:38:33:91:09:c3:82:bf:1f:1a:
f5:c2:81:da:ac:46:c6:dd:89:62:e0:d8:26:e7:db:
88:33:f2:44:6a:10:3e:24:87:e1:ef:18:0b:01:a6:
c1:4b:f0:a4:73:17:4b:06:f7:26:39:5b:a4:3d:3f:
a6:4d:06:3f:05:c8:8c:a4:64:44:9d:a0:92:08:ae:
dd:6a:bd:b8:a1:e3:54:45:60:95:88:07:22:31:ab:
3d:c1:a6:7e:f4:90:16:41:df:89:17:e2:21:41:1f:
1a:bf:df:f8:73:8a:cf:a0:a4:ea:d3:3a:73:85:b6:
20:89:02:40:bb:b0:28:71:27:03:81:d6:51:92:0f:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:24:52:2F:54:B2:A3:1E:C0:A5:F3:41:08:B4:DC:73:4D:E6:C7:86
X509v3 Authority Key Identifier:
keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:26:37:ab:21:4e:0a:c6:c7:fb:f6:66:bc:5a:80:ba:a5:b8:
f8:aa:e3:d1:21:52:b5:68:13:48:4e:e5:9d:a9:47:2b:cf:25:
8f:4b:6b:30:c6:d2:44:96:39:9c:e2:d8:00:01:f0:a6:e4:ce:
24:50:a7:5e:a4:51:1a:10:20:00:90:e7:61:2f:1a:50:45:9d:
cf:1d:ab:51:ed:e3:bd:a8:7e:50:87:dd:df:1a:1a:a6:8c:bb:
00:46:83:62:3b:20:f6:20:fa:a3:85:4d:15:02:5d:8f:1e:e0:
22:ba:fe:21:c7:4e:f3:c6:c8:8d:e9:96:5a:ff:92:3d:fd:66:
de:99:d4:5e:4f:6d:d5:51:0b:41:c1:22:f4:b4:18:74:f6:7b:
43:e0:b1:0f:81:fd:8c:6d:28:5a:8b:86:32:00:fc:5f:61:6c:
e5:0d:9b:9b:d5:35:2f:90:54:79:67:ac:67:ac:d5:2f:bf:a0:
96:ab:0f:1e:fb:05:c5:cd:92:98:d3:74:ad:4f:68:30:ba:78:
7b:a4:af:c9:f3:56:6a:5b:55:25:63:66:ce:31:5e:88:f0:17:
00:74:79:42:f4:65:be:c4:9c:86:43:a4:31:8b:38:09:69:75:
89:05:6e:16:6a:42:fa:1e:99:25:09:22:fe:9c:f9:c1:c3:b2:
d8:a0:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:27:16 2026 by rpki-client