
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File: IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier: C0VCvz2Llg1ZyYO2wTJig+SUjRUJPZMg/rM1Fn4hUFY=
Subject key identifier: 3C:CD:1B:67:95:FA:18:D2:02:4F:D1:F9:DF:35:AE:D5:D9:A0:80:77
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 0A45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number: 08F5
Signing time: Sun 02 Aug 2026 21:30:39 +0000
Manifest this update: Sun 02 Aug 2026 21:30:39 +0000
Manifest next update: Sun 09 Aug 2026 21:30:39 +0000
Files and hashes: 1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: /iyl9pEnbFmU9WzXVeq2phOqQAsoy4UjjfQwAOD3g+0=)
2: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: pOf18jHSrIlCS8MsqZr3koU2o4NfkJMNEEUjyJhtpf4=)
3: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: e4PaPaIGfeEjWJrLMNgyuRU0kpQiU601Wyvi2XedInU=)
4: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: 9fJsixBz402odlRlfQdhV0Tct1C7z6svHnJF9v/NoNg=)
5: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: wzOeSk95+FIp1++rJ896WpHFBE5UmU4zjMr2v+ReMP8=)
6: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DKHKJMlXE3kfU6KpynmJnX051vsn4dmPwQ3lQS8ztCc=)
7: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: SZjNJJxFZGYs9kBjtxrtoU7e94jnRWXiq+KnN9B48vI=)
8: 55493366013C11ED9864F33CC4F9AE02.roa (hash: uBaw5Q6jikAq0eKkm9ajQdmiDr9wO4JgcYfCq8WV99U=)
9: D639BFB2493C11F1BB06F727B5833773.roa (hash: +xjyWiXAPuMyN7WoeT0wc49pkcSZv2KyhxblHxHc3jw=)
10: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: oJNsjq9Y4VhPpY0cEBG8Az3riEvrFg4R1aJ2LK7rw0M=)
11: 77439A048A3911F0AA9D4C75C4F9AE02.roa (hash: CTs9n7viBa3uJK6RJStfQYgdiqE/WR/SlxMvBecUEN8=)
12: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: 4xlm+4cjqsIYvlYtLdT0vdOhZBUEzgGYdXITfmNyAMg=)
13: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: CNOj0GV3yTNOoa4uTZ15rSH2i+edARwqeYpz74QPgyc=)
14: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: JKVrBvxYrW2Xf38uGa9ZdaR5gFu9Id2/OSEdGm5pf0g=)
15: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: tsAgRpOvf6pIv0KW7Z6kKl2tMDKvhUuMGG0BhjylBAQ=)
16: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: JCSj0q+FNmMexjbnKyX5RfnJl2tQObdxpSVEIWFfcvQ=)
17: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: uwvNFJBonGplfttO0ptzG1Xhgj1Q8apfIBhdWvhyjhU=)
18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: IYzl503Th7eQGxgyYeIBU3+djE4udByXVptX5V6S3As=)
19: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: s9m5MA/YhpH+FpVir7bX1Gnp+fOQDHAC585kZczTBcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 21:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: Aug 2 21:30:39 2026 GMT
Not After : Aug 9 21:30:39 2026 GMT
Subject: CN=6a6fb6ff-a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:49:a6:53:b9:02:7e:9e:7f:38:a2:5a:70:
6c:ec:4e:8e:9b:81:7a:43:51:ea:97:14:cd:35:23:
28:70:5d:b8:76:98:45:bf:01:55:d4:83:f6:c4:45:
5f:44:17:2f:b9:32:a0:77:8a:d7:63:79:6a:04:cf:
79:30:d0:c4:c4:a2:39:3b:5b:78:0a:60:be:5f:9c:
52:e7:6c:73:f4:9b:c3:c4:b0:fe:03:45:b8:4a:9f:
c6:c1:69:e9:29:8f:8e:b9:22:ad:6c:69:a0:60:9a:
83:5e:53:96:67:01:aa:68:0b:97:14:ce:08:98:7d:
0c:28:1b:50:f6:c7:4d:95:19:db:83:87:cf:f6:5b:
7e:8c:5f:8f:2b:ca:83:b4:94:75:4e:fd:6b:2b:0f:
bc:73:1a:44:33:68:d2:47:45:ba:ae:af:5a:79:25:
46:91:a2:d4:88:23:f9:28:9b:0a:82:3a:ca:cb:48:
13:ee:0c:d8:db:20:db:44:e5:8b:74:07:65:dd:ae:
e5:06:30:db:44:c7:d0:54:bd:19:17:a6:07:be:21:
24:0b:23:aa:b4:15:f5:a3:9c:d7:09:bc:bb:39:e9:
22:8b:cc:b6:f2:ed:57:d9:c4:7b:3c:49:f3:0c:76:
19:84:b3:bb:e9:6f:4d:bd:0f:49:08:e4:61:23:9a:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CD:1B:67:95:FA:18:D2:02:4F:D1:F9:DF:35:AE:D5:D9:A0:80:77
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:73:52:b5:43:5a:a6:40:c0:ff:aa:79:f8:37:cf:6b:b3:f2:
48:bb:d3:9d:27:05:c9:3f:ef:ea:17:b0:1e:d3:cf:c1:fa:70:
06:f9:88:fa:dc:d4:af:1c:39:5e:51:55:49:28:b9:8a:b7:72:
d9:85:6d:00:7e:98:23:6d:90:71:ed:1b:07:2b:7c:d7:5d:77:
c2:fd:64:d6:3e:58:a8:a5:7a:7f:e6:72:9f:ee:6a:3d:36:68:
b8:d6:13:00:eb:b8:a6:9e:e1:55:05:81:af:08:de:93:34:1a:
e0:67:f3:15:9a:03:92:ed:b0:ae:21:3d:b0:99:cd:d0:cb:bf:
de:7a:76:96:70:ea:e1:ea:da:19:e7:5a:9a:ab:4f:79:c9:be:
60:70:71:02:de:34:cb:3c:77:e1:b2:e1:62:1d:50:e7:98:6c:
ce:f3:f5:21:32:34:19:aa:d2:16:dc:d2:5e:5b:d6:5a:14:92:
46:3a:33:15:93:89:fb:d0:a7:c6:8a:07:36:5b:98:61:1c:c0:
4a:34:23:d0:24:55:ff:0f:71:1a:4c:55:97:24:4b:1d:6d:48:
91:a9:a9:45:34:1a:7d:c0:ea:01:d0:84:d3:65:05:4f:8a:c9:
bd:2d:63:9d:1f:1d:be:85:81:fd:a6:53:45:cb:8f:cc:a5:f8:
1b:c4:09:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjYwODAyMjEzMDM5WhcNMjYwODA5MjEzMDM5WjAYMRYwFAYD
VQQDEw02YTZmYjZmZi1hNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzOBJplO5An6efziiWnBs7E6Om4F6Q1HqlxTNNSMocF24dphFvwFV1IP2xEVf
RBcvuTKgd4rXY3lqBM95MNDExKI5O1t4CmC+X5xS52xz9JvDxLD+A0W4Sp/GwWnp
KY+OuSKtbGmgYJqDXlOWZwGqaAuXFM4ImH0MKBtQ9sdNlRnbg4fP9lt+jF+PK8qD
tJR1Tv1rKw+8cxpEM2jSR0W6rq9aeSVGkaLUiCP5KJsKgjrKy0gT7gzY2yDbROWL
dAdl3a7lBjDbRMfQVL0ZF6YHviEkCyOqtBX1o5zXCby7Oekii8y28u1X2cR7PEnz
DHYZhLO76W9NvQ9JCORhI5oNgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzNG2eV
+hjSAk/R+d81rtXZoIB3MB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REM1RC8zOUU3MTQ2QzJBMzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lT
MHJzSkFOVjJOeTB6LUVhU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtXNStUNapkDA/6p5+DfPa7PySLvTnScFyT/v6hewHtPPwfpwBvmI+tzUrxw5
XlFVSSi5irdy2YVtAH6YI22Qce0bByt81113wv1k1j5YqKV6f+Zyn+5qPTZouNYT
AOu4pp7hVQWBrwjekzQa4GfzFZoDku2wriE9sJnN0Mu/3np2lnDq4eraGedamqtP
ecm+YHBxAt40yzx34bLhYh1Q55hszvP1ITI0GarSFtzSXlvWWhSSRjozFZOJ+9Cn
xooHNluYYRzASjQj0CRV/w9xGkxVlyRLHW1IkampRTQafcDqAdCE02UFT4rJvS1j
nR8dvoWB/aZTRcuPzKX4G8QJBw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 18:56:09 2026 by rpki-client