
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File: IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier: vIggTQUPX4EPaxrMQX8pCNCwcWZU4p1kNdZ5bfKeaLM=
Subject key identifier: F7:EA:CB:73:5A:9E:AA:65:31:87:51:DD:44:C1:A0:62:DF:FD:6F:66
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 09C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number: 0899
Signing time: Sat 14 Mar 2026 20:52:50 +0000
Manifest this update: Sat 14 Mar 2026 20:52:50 +0000
Manifest next update: Sat 21 Mar 2026 20:52:50 +0000
Files and hashes: 1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: AGj4/+o1u35i5NaXrLLbfMlTuRZPnZ/bmd4syEa/Snw=)
2: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: VddVtwssutcMQwaR1vdtUowyAjGL/e43+cbXwtEQzwE=)
3: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: q662bjsPx3nJdseL16zopdIrZN9HkkIv4fo5ocY4d3w=)
4: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: jDWTj1CH9kzVVP1BL/M5YfXchDhUlvJZPClkLUm6R8g=)
5: 77439A048A3911F0AA9D4C75C4F9AE02.roa (hash: 2MZR2T0KrITi7+dLxd2l+2St6FA3ilw1LmxaFqkLJqE=)
6: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: tirpzoVyKOHPmHCBwgEXjgsgVN+72h1c1Jdjf2MA7uA=)
7: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: BP9dpnN3TWdDCzh67rIwfbR2WtB49rOYwybU3sKkAtc=)
8: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: PEzlowCNbhSBca+/F5UeSTEd1tPnYkzmYYMT934JTjY=)
9: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: revozRlZ1PCVY0e2+q4uiPeAwkQOj5szxn4yN6XtSiw=)
10: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: HeNa2rUU7fSr0SXxHVmsvySzBVE2weB3UDsdNqz2VU0=)
11: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ch8zqkDJwVdaN/NcJ2AtXkYx3RS7ICUp1zvi5ead2vk=)
12: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: afi+PbQC8SpdxQTIi3P8pzh5EKmbxIOg8U6Ac6zzfwY=)
13: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: jN8GeVnlqDQLhpvpkrffBeR+GAIvhCyCZ1p9jNM0gNI=)
14: 905DBCFEF76711F095EC07F7436F56BC.roa (hash: KTV5aMI+eBsx8u5I0BpvyWjCRiBuOlMzA+mZgbge6Ek=)
15: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: cw5dX24DydjnVSgn60Qr2Of5nVXYFjymiNM4+EpVYE8=)
16: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: Oi5uMTAf1h4Vei1KhlKA8uQm52ekXchQEc08BcoO+Rg=)
17: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: Q0sreTOCeSUhlAzjf4yXDHqHl5NVQ4QsOwOLV34E2to=)
18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: eerHDNQFHtFGiY3DNoZpBFzNbmKgBmt64w9ZU6aicfM=)
19: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: pCPd+tuHbqgWoaOlqAhQ6+5vWHRgmMsM/z95PxSYBkw=)
20: 55493366013C11ED9864F33CC4F9AE02.roa (hash: U+IjZMxgPEnrEU7rw7iXo1bR7Si/DV/e04ojLUsEWO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 20:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: Mar 14 20:52:50 2026 GMT
Not After : Mar 21 20:52:50 2026 GMT
Subject: CN=69b5caa2-0949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:20:10:f8:ee:52:82:d9:38:11:86:db:6f:
0b:7a:b8:1c:2b:b2:65:4b:ff:a4:4d:5a:bd:68:f2:
83:ef:47:ed:5b:90:70:d0:b0:73:d8:2a:31:e3:f2:
d3:0d:75:ec:67:7f:19:9d:f6:78:e9:25:bc:e8:e6:
3f:e9:7e:bb:a2:8a:01:5b:43:9a:d8:ad:a7:9a:b7:
53:77:fd:86:d6:6c:b0:de:b3:ab:b9:68:f9:de:78:
cb:6c:a4:ca:6b:36:4d:69:ba:3b:02:97:60:9d:f5:
64:ca:97:73:9a:d7:05:5f:e6:0b:f0:56:21:b2:78:
47:5e:4f:67:27:e3:ba:80:e1:20:8b:76:6d:d8:9a:
c8:62:03:71:33:ae:47:2d:79:4c:44:50:1f:2d:4d:
b4:c4:15:59:19:21:01:bc:11:5b:c7:0d:95:c8:00:
77:10:ea:44:15:60:4b:9f:e3:63:cc:25:b0:dd:47:
54:b6:a2:e4:0e:aa:3a:cf:d9:6a:78:56:f7:b7:43:
b3:8f:6f:77:95:3f:dc:91:9d:bb:aa:79:b0:ab:f9:
04:c5:4f:1a:a5:70:bd:5a:27:dc:1c:ec:a4:14:00:
ec:33:1d:1e:73:40:42:10:6d:dd:ba:43:24:6a:38:
2a:dd:d6:71:c2:32:76:a0:3f:fb:d1:70:15:c7:02:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:CB:73:5A:9E:AA:65:31:87:51:DD:44:C1:A0:62:DF:FD:6F:66
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:0a:0a:7c:3f:5e:e3:27:1d:5f:d2:f6:01:b3:12:d3:85:50:
75:a6:59:f1:16:93:72:67:c0:e3:2f:05:82:c2:61:4c:96:99:
58:1c:36:17:a1:62:c9:eb:ad:af:1b:3c:ce:87:16:d2:3a:ab:
11:62:20:7d:21:c8:0b:0b:3d:7f:37:95:d6:42:c1:c2:04:f7:
33:07:44:1d:62:47:f1:dc:e9:b2:bf:f2:0b:35:c7:d4:16:f5:
42:f5:c2:0a:b0:67:5e:ff:d8:11:4e:26:42:13:2b:63:a4:2f:
0b:1c:8b:0e:e1:67:08:34:e4:2d:89:63:88:79:ff:45:83:38:
bf:67:62:28:7f:e2:31:5a:5b:ac:df:fe:f8:b3:ec:de:f0:60:
75:2d:6a:58:90:0d:9a:f1:4b:34:fb:33:0f:fb:4b:76:8f:12:
4c:b5:d4:6c:24:c7:5e:c6:4c:43:0e:de:04:5b:66:bb:03:e7:
88:1c:96:6a:bf:54:b6:59:49:de:6b:ac:6a:ea:3a:d4:3c:b8:
c6:ef:40:06:0c:eb:12:08:2b:38:61:a4:f8:5e:6c:46:e4:fb:
d5:d9:26:be:17:e7:5b:ad:31:1f:ba:8e:ba:8f:38:91:39:aa:
bb:1b:6a:d5:18:58:f3:1c:56:61:1b:4f:0a:d7:5f:7b:6e:26:
c4:bf:02:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjYwMzE0MjA1MjUwWhcNMjYwMzIxMjA1MjUwWjAYMRYwFAYD
VQQDEw02OWI1Y2FhMi0wOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmZ4gEPjuUoLZOBGG228LergcK7JlS/+kTVq9aPKD70ftW5Bw0LBz2Cox4/LT
DXXsZ38ZnfZ46SW86OY/6X67oooBW0Oa2K2nmrdTd/2G1myw3rOruWj53njLbKTK
azZNabo7ApdgnfVkypdzmtcFX+YL8FYhsnhHXk9nJ+O6gOEgi3Zt2JrIYgNxM65H
LXlMRFAfLU20xBVZGSEBvBFbxw2VyAB3EOpEFWBLn+NjzCWw3UdUtqLkDqo6z9lq
eFb3t0Ozj293lT/ckZ27qnmwq/kExU8apXC9WifcHOykFADsMx0ec0BCEG3dukMk
ajgq3dZxwjJ2oD/70XAVxwJYwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfqy3Na
nqplMYdR3UTBoGLf/W9mMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REM1RC8zOUU3MTQ2QzJBMzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lT
MHJzSkFOVjJOeTB6LUVhU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANAoKfD9e4ycdX9L2AbMS04VQdaZZ8RaTcmfA4y8FgsJhTJaZWBw2F6Fiyeut
rxs8zocW0jqrEWIgfSHICws9fzeV1kLBwgT3MwdEHWJH8dzpsr/yCzXH1Bb1QvXC
CrBnXv/YEU4mQhMrY6QvCxyLDuFnCDTkLYljiHn/RYM4v2diKH/iMVpbrN/++LPs
3vBgdS1qWJANmvFLNPszD/tLdo8STLXUbCTHXsZMQw7eBFtmuwPniByWar9UtllJ
3musauo61Dy4xu9ABgzrEggrOGGk+F5sRuT71dkmvhfnW60xH7qOuo84kTmquxtq
1RhY8xxWYRtPCtdfe24mxL8Csg==
-----END CERTIFICATE-----
Generated at Sun Mar 15 04:44:14 2026 by rpki-client