
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File: jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier: lj+YhWFwKuGcNALAKFDweb5+8TeRl2t4lIZ5t6uv7TI=
Subject key identifier: 90:51:78:3A:35:ED:E6:63:04:C5:2A:C1:F2:E1:2F:36:8B:B5:8B:D3
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer: /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number: 0158
Signing time: Wed 23 Sep 2026 05:08:13 +0000
Manifest this update: Wed 23 Sep 2026 05:08:13 +0000
Manifest next update: Wed 30 Sep 2026 05:08:13 +0000
Files and hashes: 1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: RigGGEPDXlSO0HJRovSi1mRc2RBEBhaHfzZ/OPHWkqg=)
2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: tFmVyxLPe9LweX5qcVeiaMmpxSpLasD23mQMkZdFpoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Validity
Not Before: Sep 23 05:08:13 2026 GMT
Not After : Sep 30 05:08:13 2026 GMT
Subject: CN=6ab35ebd-f8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:b2:65:5b:1f:99:e6:b1:3a:80:c3:7f:c1:
a3:b8:85:3c:62:4a:3c:9f:79:a0:1b:60:74:65:ea:
74:0f:13:12:ba:1f:c4:0f:51:1a:7e:e7:23:43:79:
ba:76:f9:23:d3:b3:09:97:2d:aa:7d:29:78:47:38:
ab:7e:51:db:ec:70:81:82:cc:fd:97:85:a7:13:8b:
56:54:bb:50:97:aa:f8:60:f9:51:70:c4:61:67:6a:
86:98:55:a9:e4:70:e6:fe:ac:39:65:50:44:ee:a4:
23:7f:38:b2:ac:0e:4c:05:01:38:1a:c5:37:f7:e5:
4d:78:89:86:fc:fc:b9:b2:76:cf:98:d1:d8:16:2e:
51:2f:8c:7b:79:9b:2f:b4:44:fd:af:9e:9a:bb:a8:
89:a9:94:f2:5d:3c:f4:12:49:7b:e6:19:94:35:b0:
52:a0:03:61:4d:e9:11:58:d9:c3:d3:6f:06:50:37:
24:56:79:54:2b:0c:00:3d:8a:ee:9b:1a:94:21:23:
99:9f:1d:11:65:be:68:21:a4:55:be:08:ff:dc:8c:
b1:8a:d8:ed:ff:02:9d:f0:4f:ad:fb:db:f6:cb:62:
2d:9f:54:6e:23:de:e3:18:bd:2b:26:47:61:ed:eb:
f6:a6:66:ff:98:8d:0f:6c:db:09:cd:77:62:8f:3d:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:51:78:3A:35:ED:E6:63:04:C5:2A:C1:F2:E1:2F:36:8B:B5:8B:D3
X509v3 Authority Key Identifier:
keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:cb:78:ea:87:c7:f3:64:38:e0:e6:43:68:74:dd:92:77:6c:
ac:75:db:a6:4a:11:19:d9:97:e5:06:94:be:1b:53:a0:7e:91:
9e:1b:60:6e:db:97:8b:2d:b4:ab:19:32:8d:cc:a1:fb:51:cf:
49:cc:7d:24:72:41:20:13:1b:d3:47:98:8b:0c:ff:da:73:f1:
a8:6b:3d:bd:8a:fc:f3:bc:62:4d:45:33:56:52:5c:18:f0:2a:
8d:4e:cd:cf:c7:29:86:2a:6c:d5:aa:9d:ce:fe:62:14:ed:fe:
7d:41:1f:5c:dd:fe:91:8d:b1:7f:43:d0:fe:d3:2e:55:db:df:
88:7a:b0:72:53:c4:62:39:db:f3:02:06:21:81:a9:c0:7a:4b:
71:12:e1:55:ae:00:79:06:b1:dc:65:73:50:12:2e:62:16:c4:
ea:71:40:6d:47:54:d3:38:50:17:61:d0:d2:f8:76:06:a6:b9:
b1:b4:8b:84:ac:22:be:c1:ed:82:93:a6:7a:32:5d:86:fa:cd:
bb:cf:42:f6:de:04:2a:98:f0:b3:0d:9d:f4:a3:18:25:0d:da:
ee:fe:2b:88:ed:17:bf:a8:9b:1b:cf:9b:93:c3:4a:8e:07:6a:
5a:89:82:c1:9d:11:1f:44:eb:e2:17:52:d8:c7:f9:45:c7:59:
e9:57:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:34:48 2026 by rpki-client