
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
File: JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json)
Hash identifier: j1Y68Dqo19ZJVpKNaXhk9oe/sn3UO23+gL9vzLX9U1w=
Subject key identifier: C5:D5:32:AF:76:E1:50:37:35:30:23:52:6B:4D:A7:08:7E:33:5F:FE
Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07
Certificate issuer: /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
Certificate serial: 034E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
Manifest number: 0348
Signing time: Sun 05 Jul 2026 01:25:19 +0000
Manifest this update: Sun 05 Jul 2026 01:25:19 +0000
Manifest next update: Sun 12 Jul 2026 01:25:19 +0000
Files and hashes: 1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: gz4kgisNblHqEpk3rK0DyI3zZLcOADhh3fNnn5eFFQc=)
2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: GVYtfQdO2bq9KV7ijyB1vDTY1F+6N2+dVA85bXeqBtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl
rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 01:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AF37, serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
Validity
Not Before: Jul 5 01:25:19 2026 GMT
Not After : Jul 12 01:25:19 2026 GMT
Subject: CN=6a49b27f-c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:6b:34:bb:fc:8a:fa:11:e1:46:da:fe:cb:
11:57:87:54:07:96:82:80:e3:aa:5b:00:f9:4d:4d:
f4:07:33:34:3b:d8:ba:07:b8:40:04:e5:6b:cc:5a:
68:40:86:1d:39:0b:8b:c7:09:12:01:e1:ce:28:cb:
59:31:66:f9:7f:0a:f1:07:81:3d:bd:99:ce:f4:5b:
4a:9a:e5:8e:85:03:cf:23:79:66:6d:e7:cb:bf:11:
45:40:7b:38:1e:49:0e:eb:f1:a5:6a:22:65:ca:65:
0d:cc:df:bc:01:cb:04:fa:0b:09:1c:58:2b:3a:97:
5c:61:70:7e:e0:9b:26:77:6e:84:70:c6:7c:18:df:
ae:4e:14:d8:13:71:95:93:34:8f:b3:31:e2:e7:5e:
9f:96:d0:88:d1:0f:80:6c:be:ef:03:6a:4e:58:65:
28:dc:e1:e6:12:50:9b:02:28:73:fc:c3:1c:09:ab:
ff:3d:ee:86:b5:f0:a6:8c:0a:9c:04:97:94:d0:7e:
17:a5:d9:45:7a:2a:3f:e7:05:ee:fe:82:15:22:b2:
91:d8:45:8b:3e:f4:a1:02:70:7b:18:d7:0b:b5:77:
f9:d3:b8:43:0f:55:45:ec:08:07:f1:c2:24:54:a3:
ee:ec:da:3c:0d:ee:9d:89:24:df:57:20:0f:36:f5:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D5:32:AF:76:E1:50:37:35:30:23:52:6B:4D:A7:08:7E:33:5F:FE
X509v3 Authority Key Identifier:
keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:c6:63:18:0c:25:20:f1:51:a2:c2:26:ce:95:45:93:ad:73:
8b:dc:c4:85:dc:52:f0:4c:37:72:a1:a9:98:e1:b8:6d:4e:08:
76:ba:63:11:a0:3e:1b:f7:2d:d5:6e:91:d1:09:88:34:46:f5:
07:fe:08:2a:28:71:5a:bc:ca:5b:6a:56:fc:1a:fa:0a:44:5b:
3a:29:25:db:c8:46:83:66:0a:ef:98:6e:0d:8a:0f:91:c8:d9:
64:2c:48:13:ef:2f:7e:26:c5:4c:c1:bb:50:60:98:61:cc:57:
12:61:42:65:99:cd:ff:fa:71:08:69:dc:57:74:08:6b:8c:ca:
c3:b5:73:7a:6e:09:a7:dc:29:1b:b5:48:d4:a1:9e:62:85:6d:
64:16:b8:6b:e3:58:07:0b:c8:6b:3c:92:f2:22:49:a6:2a:cf:
78:71:dd:04:1a:fb:30:aa:f6:5d:f4:d7:8d:a3:b4:9c:3e:dc:
0b:71:82:a6:60:6b:8e:f0:36:64:35:d0:da:93:57:21:bb:49:
87:6f:2f:a3:55:84:99:92:03:18:0f:58:59:98:da:a5:bf:6d:
d7:68:de:b7:da:80:d4:eb:50:43:ab:62:6b:94:1f:a3:3e:b0:
dd:00:72:2b:09:dd:48:e9:53:08:ce:c1:2d:07:ab:12:fd:e1:
78:c0:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:21 2026 by rpki-client