
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json)
Hash identifier: i22vcjMBpexNVkO2wwVwbfwpQEZ0D7Yungqkz1d053o=
Subject key identifier: AC:D4:23:2C:E7:FA:20:67:A8:0C:55:CF:5A:54:57:A6:A5:91:15:1D
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial: 02AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
Manifest number: 029A
Signing time: Wed 25 Mar 2026 01:11:33 +0000
Manifest this update: Wed 25 Mar 2026 01:11:33 +0000
Manifest next update: Wed 01 Apr 2026 01:11:33 +0000
Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: PpHw5z6++JCcH0wUD98mZjrr5ltSQdy+2FoWbE+RXHE=)
2: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: 3q66unEtiXx6jKcOQRNMynBbEHvMb38v7KWWr1AaGpQ=)
3: 99E52804462E11ED90035452C4F9AE02.roa (hash: qcEi6yFXe14vxwDIXMsWeAcEI41V5KEYbNBlQcRMfIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Validity
Not Before: Mar 25 01:11:33 2026 GMT
Not After : Apr 1 01:11:33 2026 GMT
Subject: CN=69c33645-22c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:7b:3e:28:09:55:94:1a:6b:3c:84:48:90:
f0:d7:b2:ea:ab:d7:4c:83:1e:f3:d6:02:cd:3a:90:
e2:f1:66:4f:c9:57:0f:98:7d:fb:77:14:c3:f3:38:
de:56:61:00:bd:db:1a:1a:a7:d8:bc:28:07:f3:a8:
3d:2c:b3:9e:14:b8:54:de:ae:d8:cd:d7:f4:3e:a7:
cd:ec:79:e5:23:74:ba:3c:bc:d4:9a:d5:f2:8a:1a:
9b:a4:bf:ae:7f:e0:e8:b1:40:a8:4b:ab:b2:0a:11:
ae:83:91:71:e3:f0:9e:76:f0:ae:a5:68:df:ec:9a:
2b:50:9f:49:45:38:c1:c0:c3:2a:b3:08:3c:70:cb:
51:67:43:bb:db:27:ee:0c:cc:e6:a2:ea:ab:b0:1c:
7e:76:d4:91:e1:66:65:fd:c7:ca:13:49:6d:b1:b5:
df:bd:2b:d0:2f:45:6f:d4:2e:1e:16:42:17:56:02:
42:41:be:c2:7e:41:56:0a:5f:ef:41:55:0d:7e:3d:
d8:1a:8b:53:67:90:bd:71:96:4b:31:f6:14:02:a4:
56:35:5b:87:e8:52:17:71:f0:7e:4b:09:29:67:d2:
18:6e:3f:70:93:4e:0b:c9:b1:d7:96:08:0e:8b:4d:
20:3f:0c:45:71:7c:77:b7:59:9f:45:7e:4a:8b:ee:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:23:2C:E7:FA:20:67:A8:0C:55:CF:5A:54:57:A6:A5:91:15:1D
X509v3 Authority Key Identifier:
keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:1c:63:fb:a5:0d:cf:7f:2b:d9:dc:aa:14:23:ae:47:3b:02:
b8:9f:fd:50:cd:5a:c1:06:a8:c5:36:3e:c3:59:09:d7:73:26:
32:76:e0:8a:5e:70:01:f3:e6:47:ed:aa:e1:9c:91:e7:14:af:
07:dc:3a:7d:21:92:6e:72:23:bb:91:9c:7b:81:8f:1f:4b:18:
c6:85:a5:35:ce:05:ed:93:89:b8:fb:77:08:50:79:85:0d:70:
db:9a:a1:bc:6d:c2:bf:99:36:0c:6c:35:ca:69:25:40:6c:5b:
ad:86:44:ef:2c:c1:26:f4:43:78:cc:b5:f9:3d:c6:7d:4d:8b:
36:6d:f6:30:e0:c2:60:c2:47:c5:63:3e:56:3d:d5:22:33:aa:
b1:ff:57:94:24:06:23:97:f5:9f:99:3a:4e:d8:9c:14:6b:b1:
0a:c9:c0:db:97:7d:1d:6b:7a:37:b7:57:97:fd:2a:53:8c:61:
7c:61:ee:6a:49:5e:fc:0a:f1:7c:c5:8d:8e:40:80:57:a4:29:
05:59:fb:47:30:d0:97:f5:37:52:67:c6:ff:e1:19:c1:89:1d:
60:cf:be:19:8c:97:ce:7e:a1:61:7a:a9:dc:3d:56:05:3c:27:
ba:e4:98:d0:ad:f0:06:ee:84:29:ef:60:42:d9:3a:ee:9d:d5:
b9:3b:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:56 2026 by rpki-client