
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier: jg9dvdMuZapoDlDk374PXjYl40nmqXqkqqGcrXK2lyM=
Subject key identifier: CF:CF:08:62:AD:21:92:31:FB:28:D7:B4:AB:AA:54:87:D3:F2:D7:2F
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1FF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number: 1FBE
Signing time: Thu 08 Oct 2026 16:01:39 +0000
Manifest this update: Thu 08 Oct 2026 16:01:39 +0000
Manifest next update: Thu 15 Oct 2026 16:01:39 +0000
Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: pfdpBZCo/RlERc6lhdRuDpsFNehyp8SG7qEVwnDbYwQ=)
2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=)
3: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=)
4: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=)
5: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=)
6: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=)
7: IdrEhdbdlr4YcET9uFeEbYR_IiA.asa (hash: 6Cd7d2h8RBt0QX+FNb5dxifuxuFtkWPzJHDergP9oc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8185 (0x1ff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Validity
Not Before: Oct 8 16:01:39 2026 GMT
Not After : Oct 15 16:01:39 2026 GMT
Subject: CN=6ac7be63-5416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:88:c6:bd:65:06:3c:c8:a0:9c:8f:0d:d2:
65:60:85:3c:27:7b:f6:9d:25:58:8e:ca:6d:ee:87:
4a:e6:d1:ee:4e:b6:f5:84:30:9b:43:e7:82:95:c2:
b0:d9:ee:54:ad:c0:0c:a1:fb:af:52:05:ae:19:e9:
e9:86:58:4b:ed:71:22:b6:7c:9a:44:4f:e3:86:c9:
b3:66:c0:12:5a:39:fd:75:25:2f:2b:4e:fe:04:fb:
14:aa:fc:c6:3a:4b:4d:5b:e2:60:f1:3d:ae:1a:50:
b5:e2:bf:ea:6c:c6:99:1f:e8:b1:70:58:44:49:af:
fe:68:d9:d4:ca:a1:87:d9:63:b8:53:c2:ac:75:b7:
c5:2d:aa:0e:20:85:e0:40:89:5f:33:c0:25:3a:88:
df:08:d5:d8:82:61:a7:78:c4:d1:11:fb:ca:75:05:
12:1a:27:6e:fa:b2:6c:e2:e0:3d:27:bf:ff:9d:9f:
e0:33:a6:b5:ed:b6:fa:a3:02:f7:3b:e0:ca:1d:d8:
b5:ec:bb:df:69:9a:f6:ee:9f:88:83:03:67:29:fb:
df:10:6e:08:04:52:77:b9:24:ab:36:bf:03:d4:6e:
0c:81:60:49:df:14:c7:c4:ef:8b:12:ca:c7:60:d7:
d4:fa:c1:52:01:60:f9:6c:2a:ea:22:39:16:24:7e:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:08:62:AD:21:92:31:FB:28:D7:B4:AB:AA:54:87:D3:F2:D7:2F
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:09:16:5d:15:9e:0d:9f:62:10:47:db:e9:90:cd:58:94:ed:
89:32:76:d9:48:1c:1c:37:5f:53:c3:85:98:af:6c:23:ab:81:
10:44:a5:d0:76:fc:df:67:eb:51:96:13:fa:b0:a2:f0:ec:11:
ef:28:8e:ac:24:f8:ea:eb:a4:2d:53:d7:a3:6d:db:85:fe:4e:
10:ea:bb:b1:89:e3:ac:d8:36:f7:dd:85:ec:0a:0b:23:20:6e:
3f:0d:8a:e6:ec:92:13:40:3b:43:95:7e:95:0f:21:ca:3c:d8:
b1:d0:6f:75:ef:e8:19:a7:2f:77:6b:5d:04:11:e1:9a:1b:e3:
78:ca:85:0b:5d:59:74:54:06:37:3a:00:df:d3:c6:e2:34:9e:
8b:d7:e3:7b:96:34:1f:df:e5:b1:40:00:b5:4f:f7:43:76:94:
23:37:59:ca:16:f3:ce:a5:64:e1:43:3c:d7:6c:4d:38:13:f0:
1d:f7:08:17:dc:14:f3:6c:31:c5:03:cb:88:ec:5d:74:b0:6f:
f3:e4:fb:02:6f:59:29:1b:d0:87:d6:a1:4d:6e:54:d6:35:d7:
24:24:d6:56:06:a5:14:df:30:f6:f2:9e:01:43:9b:1a:9c:55:
8e:ab:30:4c:2d:fe:64:6f:84:14:ec:f2:04:81:5f:38:57:80:
6c:b0:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:06:03 2026 by rpki-client