
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier: FOthGswFevb4zxvdTIsDO8l/igKWsf+wFEPmXZVrqbg=
Subject key identifier: 70:0B:BC:5F:DD:49:FA:C9:F9:F3:81:1D:92:4C:03:97:87:A9:E2:51
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number: 01F8
Signing time: Mon 05 Oct 2026 03:40:49 +0000
Manifest this update: Mon 05 Oct 2026 03:40:48 +0000
Manifest next update: Mon 12 Oct 2026 03:40:48 +0000
Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: /Pm+6vWROVOpBCr0XYwTOoAYSB6Gi0YyL0RSq1axiIw=)
2: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: 0E4qYTpBck7zqd7XOVsdpYAiDLiP6vH0ev4CSQjnfXI=)
3: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: owQYw9h+uccODUhkikEdlCDKK/hYVX6MWumcBf31Hrw=)
4: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: /8Gd5gZ758sNArtTS8yRpNug05q/Okyd5D7W2BUqcNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Validity
Not Before: Oct 5 03:40:48 2026 GMT
Not After : Oct 12 03:40:48 2026 GMT
Subject: CN=6ac31c41-4ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:03:65:14:a2:45:cb:28:2f:2b:1e:03:34:c7:
b7:45:93:2a:4e:7c:46:a3:5b:95:6f:64:7e:5d:0b:
ff:67:40:87:a1:9f:07:b5:91:12:f2:65:c3:b2:1f:
01:c3:9e:ee:d7:74:1e:c8:1c:d3:bc:71:7f:f5:e0:
00:b9:df:61:d7:83:82:d8:00:be:05:82:64:57:12:
5b:02:32:7d:fa:69:1a:c4:90:03:0c:f4:d0:ef:f3:
92:9e:73:af:0b:dc:dc:50:af:7f:10:3b:33:11:6d:
26:86:3c:9e:47:01:7c:e0:08:56:99:5c:6f:63:a5:
62:18:f7:7a:c8:80:59:0f:13:00:03:91:27:7a:37:
ec:fb:2a:b7:f8:4a:c0:b7:ad:d6:03:bc:24:e9:b4:
90:4b:81:30:b7:23:85:1a:ba:d7:2a:e7:88:69:bf:
86:5a:15:96:38:e7:c7:50:96:84:36:18:4d:a8:98:
ed:75:1a:69:af:e3:67:1e:81:9c:7c:ce:66:4a:27:
5a:bd:f0:a8:3e:8a:e7:38:13:92:83:96:23:fc:0c:
3e:78:ee:64:5d:59:fc:7e:c1:e8:f2:64:64:c1:47:
89:e9:11:dc:c6:d1:18:be:41:5d:69:fa:be:9e:4c:
5e:dc:ad:e3:95:f8:b6:86:41:cb:39:e1:5a:77:90:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:BC:5F:DD:49:FA:C9:F9:F3:81:1D:92:4C:03:97:87:A9:E2:51
X509v3 Authority Key Identifier:
keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:90:4e:16:17:81:57:52:2c:98:81:05:22:a0:ca:f5:cd:
e7:d9:e8:e7:19:65:1b:98:5b:43:b4:75:40:ff:2c:57:64:51:
43:78:5b:41:4f:29:8e:da:d7:c6:84:08:a5:92:33:05:3a:8f:
7d:8a:0d:ee:de:4f:73:fe:5b:d8:8f:6d:fd:3f:9c:d6:b4:d8:
96:19:b1:57:e8:a6:50:28:05:d3:a5:20:a2:9d:a6:bf:e6:fa:
eb:3e:e2:8f:6a:65:d5:e0:85:22:8b:03:6b:a7:e8:d6:01:ab:
25:04:82:2f:36:63:8f:17:65:5c:32:4d:d8:ae:6d:91:b2:ef:
e2:b6:10:31:a0:60:8d:81:fd:38:28:60:1b:74:de:1b:83:c6:
9e:1f:3b:53:2b:a2:ed:a8:ad:8e:ef:8a:a7:50:89:a3:35:ab:
9e:5d:87:b3:90:5d:48:88:6e:0c:0f:91:94:0f:d5:a8:fb:1e:
35:09:bf:00:88:97:5a:79:72:e9:b5:cf:70:92:25:c9:20:e7:
ad:d8:88:a6:35:41:4d:60:e4:93:15:57:ed:0a:e8:63:cf:fc:
3c:99:ec:7e:73:81:e8:15:60:2d:20:1f:dc:25:6b:f8:8b:49:
a3:93:e1:d8:71:96:13:98:2d:dc:a7:d2:5b:9b:0e:6a:84:2c:
97:d8:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:48 2026 by rpki-client