
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json)
Hash identifier: 1RroaKGc66jUWhtGdP+c7HBx1fLRixp9q3qLSUqKE9Q=
Subject key identifier: B0:CE:68:FD:E8:4B:AB:7E:D5:1A:EA:1D:0D:FD:35:0D:58:0C:58:18
Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF
Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF
Certificate serial: 02DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
Manifest number: 02D4
Signing time: Fri 25 Sep 2026 01:16:37 +0000
Manifest this update: Fri 25 Sep 2026 01:16:36 +0000
Manifest next update: Fri 02 Oct 2026 01:16:36 +0000
Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: 8RshjETVTwVtSTPxx0XBvwNSOyIzMaGDioXOy83wPoQ=)
2: gpWnLj-2gskbvrnOqpg6KYODB2c.asa (hash: TiuoTk6mlE7QSw/YupJFbCYHW8Dvc9OuUmJzuhbKSEE=)
3: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: eqn9sEe4JyayU+B+c14J08VShOSA+AaQJ0q21W2uhKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl
rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF
Validity
Not Before: Sep 25 01:16:36 2026 GMT
Not After : Oct 2 01:16:36 2026 GMT
Subject: CN=6ab5cb75-b1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:84:0e:8a:87:1c:17:31:41:74:c7:9f:14:
7d:fc:82:a8:aa:0f:74:80:c0:5d:f7:3d:9a:f0:4f:
d9:b0:42:a6:8d:81:95:53:ed:0b:90:ff:1a:53:f2:
e7:d0:5a:04:96:eb:05:92:31:7f:2c:aa:0d:d2:8f:
c3:5e:a9:51:4e:98:86:d5:df:f5:f0:55:89:e4:83:
3b:0e:50:36:fa:d5:97:68:72:3d:13:52:82:b9:da:
3f:be:68:5e:5e:0e:81:60:fc:17:40:8a:c1:12:f1:
46:07:d9:9a:eb:8c:94:cc:00:3f:ed:77:28:1e:1d:
38:9f:8b:a2:ef:be:ba:a5:b6:9f:f1:98:c7:91:0f:
95:4d:6d:be:75:a7:4c:bf:02:20:e3:cb:f3:43:67:
81:aa:9b:61:f6:99:fa:47:6b:fd:94:d9:4c:12:75:
4e:06:8e:a5:71:3e:ec:35:aa:87:31:1e:b8:c5:76:
76:b3:93:37:1e:28:ab:14:0b:6f:e0:4a:3a:cc:2c:
23:07:ee:d8:71:a0:74:55:15:71:e6:bb:80:55:2b:
a5:5d:2a:b1:fa:21:ce:ad:a5:3b:ab:5c:64:70:5f:
50:5f:4d:bc:63:2f:55:fc:84:8e:d4:e6:4e:bc:67:
01:55:d0:e4:e6:80:30:9f:d7:07:97:4d:66:6e:54:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CE:68:FD:E8:4B:AB:7E:D5:1A:EA:1D:0D:FD:35:0D:58:0C:58:18
X509v3 Authority Key Identifier:
keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:99:c7:f3:50:b6:99:d1:17:6e:27:49:72:88:2c:a2:91:e6:
c0:4f:a3:ff:ac:63:60:dd:c9:ef:31:e8:f1:5e:9b:29:1c:8a:
7a:69:78:9f:eb:cc:a3:d0:8a:fd:72:7d:10:6b:91:b4:f6:24:
8a:e3:71:38:b0:53:12:78:b1:69:24:ee:13:fe:8b:e6:01:1c:
68:ba:fe:bb:81:b0:fb:ed:27:39:33:f5:1d:df:f1:a0:bf:fc:
22:af:1d:1d:9c:25:6d:58:3a:d2:cf:ce:b3:d5:6a:34:bc:38:
8b:7c:3a:33:96:f5:f7:66:c7:5f:bc:91:51:75:e7:ac:5b:3f:
da:b8:56:64:e7:7f:40:f1:92:83:02:38:c8:fb:5f:da:6f:e7:
fd:48:26:6f:ef:b0:86:ed:12:6d:7f:53:2a:4b:7a:ad:1d:db:
40:c7:63:52:da:96:67:02:de:2b:db:19:48:4b:4b:57:d0:b8:
12:e5:41:3c:a9:80:3f:3f:02:0b:9c:bf:94:c7:db:69:ff:7d:
90:67:3c:85:c0:28:bd:b8:6c:39:c5:66:59:15:d3:5c:c3:61:
e5:2b:0a:09:0e:e8:ea:06:ff:3a:40:41:b2:6c:94:d4:20:35:
13:24:ca:fc:c2:47:ea:61:da:0d:f8:c6:b2:2e:23:5a:49:42:
c2:22:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:28 2026 by rpki-client