
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier: 7c7nwGMDRYU4WmOL0p+V1XXxSrBX/YGwe3LY3nGpL+I=
Subject key identifier: C5:D1:CF:AB:FA:52:AD:DD:73:4A:07:79:80:9E:90:DA:C9:F4:81:ED
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0CEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number: 0C22
Signing time: Fri 22 May 2026 19:11:48 +0000
Manifest this update: Fri 22 May 2026 19:11:48 +0000
Manifest next update: Fri 29 May 2026 19:11:48 +0000
Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: Dm/89D25O5In1fmIOVI3zFxaep/b3yZkpBvcDZm0XPc=)
2: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: TjrXzvrlWANf8JvFU1WnxrTztuxOH43IK3Zl85V0kH0=)
3: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: EykGpXwalZSOBcmCqBPjJofqYixjM46Qzlbp8WB+N/Q=)
4: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: BZMmvsi1yqiTsCVctnffOHMNepndBiyB42ybFXbXkIE=)
5: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: I8QsExkkx/lQXZrUI8Q7vR9Vux4YkSdHgTIl8y+WbMk=)
6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: utuJrvT7k0aAp1PIv4kJ0yTf9B0xorguSm8sns4EFRw=)
7: E8819018178811EC876F5F50C4F9AE02.roa (hash: vUBN3WiPziWGZpfHV/nuh0lxaXpR2pUDXk1dHU8ebwE=)
8: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: lU4qj9qhMKsVAQxIlEtzz2s2LN2qpGRwvCOWleMDdN8=)
9: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: whrOto6YdWxD5nUJi5RhnyhfSKeLupBw4gHNI11xyhI=)
10: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: RupCODMCVn7fipZVaU8cDxGLwLhz8c3cckM5d5QL83Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 19:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3306 (0xcea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: May 22 19:11:48 2026 GMT
Not After : May 29 19:11:48 2026 GMT
Subject: CN=6a10aa74-71cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:66:b4:99:07:7d:72:9c:6e:b5:07:4f:15:
9f:67:da:b1:7e:4e:a6:4c:79:b8:62:ee:08:5c:ed:
8e:54:8e:14:8a:67:95:5c:28:d6:6e:5c:a1:d4:57:
2f:b7:0d:21:bd:8a:30:51:8e:19:9b:2c:7d:4d:b9:
7b:7a:3f:8a:6e:55:43:a7:28:16:25:c3:53:bd:c1:
d0:a0:89:f1:84:34:25:e2:6a:c0:c6:b1:a9:08:ee:
2f:4e:6c:58:ee:97:8f:2f:97:3e:65:fe:10:85:6f:
b5:ac:32:16:63:20:ed:15:d0:84:22:e0:1f:b7:71:
eb:99:5b:a9:df:58:8a:d3:f7:eb:2e:68:d4:f9:a9:
85:ce:b9:ab:5d:99:8c:23:51:4a:ce:ed:c1:14:c5:
35:ad:85:2e:82:16:a5:8d:f7:47:6b:a0:0d:52:58:
03:bc:9c:67:8d:c2:a9:fb:9e:98:90:2a:86:96:da:
c0:a0:7d:36:65:7b:1f:aa:f5:eb:2b:a2:e4:5b:70:
e6:b4:32:d6:b6:9f:b4:a3:f4:34:48:4c:88:66:d3:
02:ec:ab:31:c7:dd:b4:5b:89:7c:09:b7:97:ea:5b:
6b:f3:05:2e:18:c0:f6:d7:18:2f:25:31:88:8a:06:
c0:10:c3:63:3d:f4:db:6e:15:10:a0:c3:78:d1:ca:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D1:CF:AB:FA:52:AD:DD:73:4A:07:79:80:9E:90:DA:C9:F4:81:ED
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:8d:be:07:b3:10:9f:1c:ae:27:1c:45:ac:d4:40:05:24:0f:
b9:69:ba:fe:cb:90:4b:f7:64:8e:6a:e1:fe:d9:81:8b:2b:89:
11:eb:b6:4c:fa:cc:0d:72:5d:96:e1:64:29:6b:72:78:03:0c:
17:3d:2d:91:2a:b5:b5:ac:25:e9:ed:33:f9:f0:57:9b:89:4f:
f0:c3:99:99:b5:3f:16:cc:c8:50:77:b5:0c:38:8d:6b:fe:b4:
36:2c:86:32:9d:09:bf:4d:a4:82:59:99:d9:f7:31:db:be:39:
61:cb:41:0a:82:79:4e:61:4b:4c:71:e6:54:a2:fb:cf:51:ab:
e7:a1:00:8f:73:20:41:af:c3:1f:0b:5a:4b:7c:8b:61:ac:82:
4b:37:5e:c5:07:84:ef:1e:a1:5a:42:23:b8:fa:77:69:b8:9b:
e0:1d:c5:81:89:3e:36:30:43:e2:d7:42:ed:b9:af:8a:ea:c5:
46:7a:09:13:6d:38:10:cc:73:2f:40:aa:f8:8d:a7:e5:40:ab:
3c:07:08:5d:45:c7:f4:4e:7a:25:1a:2d:af:14:2a:6e:81:85:
b4:4c:aa:44:a7:46:e9:34:a0:6a:3b:53:96:0f:09:69:2b:50:
c9:e5:b4:87:56:a1:81:54:8d:87:7e:e9:77:a9:90:02:26:81:
51:2b:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:21 2026 by rpki-client