
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: dAO4TuKTgekLJv49tl9wqLO27HAIkWUqCx4TI/EUGYU=
Subject key identifier: 3F:8C:84:F0:D9:E7:17:B3:95:CE:08:55:E3:F0:4E:CB:F0:84:6E:FB
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 05CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 05BA
Signing time: Sat 24 Oct 2026 23:05:02 +0000
Manifest this update: Sat 24 Oct 2026 23:05:02 +0000
Manifest next update: Sat 31 Oct 2026 23:05:02 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: lR4f/bBR2B4iZtzyszo0QzPvRMbeUt+iR9tiEjKjko8=)
2: 19270196406311ECB405CB27C4F9AE02.roa (hash: HVYsfOxlb2WAh2eGE9kwR0kPlhU1KxlVthyk27GCA3w=)
3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: uWKrlH46xOMUPQf0I41m9PfK6LPIgrPit2IHhoLq4XQ=)
4: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: GGQqfvLx7zM2VjLtrQhpcfOMC/ugg1QcYqduayPT2Bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Validity
Not Before: Oct 24 23:05:02 2026 GMT
Not After : Oct 31 23:05:02 2026 GMT
Subject: CN=6add399e-50f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:f2:c9:1f:c2:40:fe:02:33:40:f4:94:14:
bd:0a:32:25:3a:92:b2:71:ed:b8:b6:d7:6d:f0:a2:
a3:ad:8e:57:dd:6e:b7:e4:ff:9f:ed:7c:f9:65:3a:
0b:2b:37:70:cc:53:96:8e:95:01:9a:84:93:b9:57:
29:52:f2:d5:11:32:8e:4f:02:6a:98:ed:d5:11:88:
a3:d9:b9:72:fa:c7:db:cd:bb:e7:68:4a:14:e9:73:
90:69:a8:09:3d:a5:82:e9:88:6c:b3:a1:fa:a8:6a:
1c:08:9f:0c:32:74:b2:ea:8c:23:4d:3b:59:a2:7c:
5f:32:9d:d6:68:50:9d:26:f8:ad:a8:1a:06:f3:9a:
d9:d1:48:1c:27:0f:86:17:a7:89:ee:ee:5a:00:22:
27:4f:1c:e7:97:d3:cd:b9:62:8b:1f:38:1b:db:fe:
39:30:b2:80:44:6f:8e:36:47:01:45:37:c8:4f:b4:
9d:d0:bf:ef:29:e4:49:7a:96:d2:e3:7c:8e:89:25:
ee:30:07:86:7c:7e:60:4a:a3:b8:01:55:58:03:5a:
a7:bb:e2:63:c8:f1:4b:de:02:60:6c:98:50:6d:eb:
29:ef:6f:e3:d0:60:6f:7e:04:26:e0:2e:79:a8:a9:
f9:16:ab:c3:76:59:95:28:ca:d3:c2:20:b5:39:6a:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:84:F0:D9:E7:17:B3:95:CE:08:55:E3:F0:4E:CB:F0:84:6E:FB
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:61:d5:14:d5:b8:11:a6:0b:de:27:fb:9f:e6:2f:03:df:2c:
c5:ca:21:3d:24:f4:b6:5d:9a:0a:47:88:81:a5:fe:df:0c:e8:
b1:e2:75:3a:b9:d3:a7:fd:b6:fe:b6:2d:a3:33:1d:9e:67:53:
82:91:dd:ae:1c:70:40:cf:be:3a:98:35:bb:3e:b1:56:1d:d9:
13:60:28:29:7e:d6:39:af:58:83:7e:7b:5a:fd:2e:d1:02:a1:
15:5a:5d:40:ea:aa:1a:36:6c:21:58:56:4d:25:6e:b3:e0:88:
99:7b:e2:e6:c8:91:de:69:7f:7f:c6:1a:bb:11:28:f3:ea:2a:
80:0e:40:c1:f1:0d:d3:fb:e6:6e:f8:eb:e1:7c:4b:28:83:13:
39:60:e0:bb:ad:3f:60:c6:d7:33:9b:d5:bb:1d:90:4b:2d:96:
8d:d3:b0:b9:0b:f8:68:13:e6:4f:57:3b:44:6e:e0:ad:9e:d3:
ac:81:52:ec:39:09:f7:67:96:4a:cd:f2:84:19:ad:47:b7:3f:
4f:b5:ce:32:cb:be:d9:91:cd:c6:5b:a4:4b:fc:3e:b7:a2:f2:
23:ca:45:dd:89:ee:f4:77:2a:f3:f9:45:31:b5:14:d2:57:ef:
59:a8:c1:6c:14:dc:f6:33:c7:19:d9:f5:9d:9e:31:24:dc:51:
5d:b8:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:10:38 2026 by rpki-client