
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier: 06Jans4mSN5b7b3+X9+tf24FTZ3kTaySAit+qdScGsc=
Subject key identifier: 2D:65:03:14:98:03:40:45:BA:7A:13:40:D5:01:9E:96:3F:6F:A1:97
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1FDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number: 1FA4
Signing time: Thu 20 Aug 2026 15:58:09 +0000
Manifest this update: Thu 20 Aug 2026 15:58:08 +0000
Manifest next update: Thu 27 Aug 2026 15:58:08 +0000
Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 5hqjph0R8J/uaBlNaO5ocxKeFVBH43jAf5ZU2OrsYt8=)
2: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=)
3: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=)
4: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=)
5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=)
6: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8158 (0x1fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Validity
Not Before: Aug 20 15:58:08 2026 GMT
Not After : Aug 27 15:58:08 2026 GMT
Subject: CN=6a872411-2f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:89:a7:be:33:34:de:b2:c8:8e:cf:c9:73:
51:fa:95:12:69:de:b6:a7:70:d4:47:57:91:c4:4b:
52:47:af:54:08:a7:9d:b1:d2:47:4c:27:35:d3:fd:
82:2e:e2:65:bc:2c:44:6b:1d:be:c4:24:31:99:0f:
ff:7d:e2:e9:c7:9b:ba:3e:b9:d7:9a:14:38:d9:32:
46:ad:66:e8:43:48:76:7c:a3:5d:c7:1c:f9:27:d4:
fd:fa:b4:38:22:8d:8e:86:ba:f8:40:ec:8c:0d:60:
01:20:23:82:52:34:7d:5c:aa:88:c2:23:88:55:57:
ef:49:e3:df:73:c3:af:ba:8e:eb:81:3e:90:61:39:
3c:67:9c:c0:cf:6b:5b:b7:07:36:34:0f:fb:f9:69:
46:dc:87:ae:58:6a:41:80:c8:e8:33:c3:8b:d3:2a:
81:c6:83:28:d1:e9:25:b5:5d:39:6a:49:12:20:aa:
23:96:3d:d8:de:3e:99:01:40:c6:49:e6:e4:48:44:
a0:f3:e4:0a:b1:d5:5b:5d:5e:f9:68:62:79:a1:4e:
c7:0b:69:f5:d7:d6:dc:ff:9e:cc:5d:83:81:83:d7:
92:e8:57:38:26:ec:e9:c1:ba:5c:9e:7b:f0:5a:5f:
8e:aa:57:b2:fc:a3:6a:17:78:d1:f6:aa:9c:54:12:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:03:14:98:03:40:45:BA:7A:13:40:D5:01:9E:96:3F:6F:A1:97
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:15:3d:9c:92:55:d3:f7:cf:99:af:5f:26:15:26:b5:31:7f:
96:05:b2:65:d0:a8:ec:a0:4b:7f:16:fc:0b:0f:e0:77:e0:de:
40:89:e0:72:75:6e:8c:f6:23:3b:26:86:35:0d:e6:48:88:e3:
b0:8f:f3:1c:3b:8d:be:2f:e1:fa:8a:f1:17:10:e1:d4:75:00:
5f:3d:74:9a:25:e6:e8:9a:5a:c4:1f:4a:a9:d8:da:80:dd:aa:
6e:c9:97:99:43:bd:24:c4:ea:ae:95:12:cd:27:24:dc:41:31:
c7:cd:99:02:a0:c4:a8:8b:ec:b4:57:6d:7b:f7:49:70:10:38:
6b:88:90:42:80:30:57:5c:ba:8e:fc:f1:ab:ce:f4:f2:5b:e4:
f6:1a:b3:16:32:da:89:7c:44:be:c0:b5:ed:9c:c4:08:ea:f2:
b4:73:c4:99:da:4e:b6:a0:ee:c5:2a:50:18:52:68:bb:f4:8e:
0e:25:de:7d:f4:52:b2:3f:fa:2a:80:13:31:3b:42:97:44:9e:
2f:36:c2:27:86:15:82:e9:ca:05:38:bb:3d:aa:af:e4:e8:a3:
20:fb:73:28:a5:2d:45:8a:db:bb:a0:1f:5e:86:71:4e:4e:b7:
d7:7f:e4:2a:75:60:3c:1c:c9:86:3d:b6:19:d6:3a:80:14:97:
d9:b0:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:21 2026 by rpki-client