
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier: 24vpH6SahRbsRJdqpaeDXZHIgLYNurEB6TaXb/ZhLKE=
Subject key identifier: 0E:99:CD:04:4C:C6:52:7E:CC:4D:EC:5C:F5:66:15:99:E5:83:58:72
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1FD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number: 1F98
Signing time: Tue 28 Jul 2026 16:05:24 +0000
Manifest this update: Tue 28 Jul 2026 16:05:24 +0000
Manifest next update: Tue 04 Aug 2026 16:05:24 +0000
Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 55quB5mk4/RTW3L10tQSIzqwyvsk+8nV1ly6U1MblW0=)
2: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=)
3: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=)
4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=)
5: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=)
6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8146 (0x1fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Validity
Not Before: Jul 28 16:05:24 2026 GMT
Not After : Aug 4 16:05:24 2026 GMT
Subject: CN=6a68d344-8d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:6b:0f:4c:9c:70:3a:2b:5a:8b:f3:d6:8f:
98:eb:cd:57:7a:0d:38:17:16:d0:14:59:06:3a:41:
4e:24:a9:9c:d7:12:83:70:97:60:95:b2:3c:a1:5b:
29:aa:64:79:e9:22:c3:9b:53:39:fa:8d:d3:55:94:
db:d2:a9:07:90:71:c2:70:e2:8b:58:a3:8f:27:4d:
43:3c:05:c9:66:83:a8:9f:4f:d0:5c:56:c2:25:dd:
aa:a5:27:ab:ef:38:6b:87:e5:7a:09:db:38:a6:e1:
3d:e0:53:cb:a5:0c:80:26:d3:57:d9:10:e6:20:8f:
a5:10:cb:6e:07:20:64:83:09:76:25:c7:16:4a:2b:
87:a3:1f:c0:8c:1f:ac:3f:e8:d8:35:66:d0:03:8a:
e3:0e:85:0c:a5:ee:74:09:47:f6:d2:2b:44:e6:49:
b3:82:e4:54:bb:32:d4:55:f1:ca:ae:fa:40:a3:5a:
2d:73:b2:92:e3:c2:c3:aa:4f:07:31:89:bc:bb:45:
80:d0:f2:5c:72:e2:6e:7a:52:f1:3a:c0:2d:db:3a:
24:23:ee:c0:3a:3c:9b:9b:16:f4:85:d3:ca:c3:10:
8a:62:91:7b:53:d2:da:0d:e3:81:c9:5f:eb:d5:59:
f4:7d:94:b1:88:97:e1:8b:1c:b9:23:e8:13:88:36:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:99:CD:04:4C:C6:52:7E:CC:4D:EC:5C:F5:66:15:99:E5:83:58:72
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:ef:a8:d7:4c:f5:c3:62:54:9f:d0:40:f3:f4:38:fe:0f:
98:a9:64:16:b0:b4:2c:95:a4:de:e3:d9:49:ba:e1:a6:82:15:
55:0a:fc:c9:0d:eb:45:00:5d:ae:ed:10:54:be:8b:cc:7c:97:
a7:15:a9:9f:41:83:08:aa:1e:26:0c:8e:7a:8c:f2:eb:1f:82:
a8:7f:4c:f3:1e:2f:f0:24:bd:0c:f4:b9:4a:3c:f4:bc:57:29:
2b:18:84:ca:67:28:02:b2:8a:ef:05:5a:4e:3b:42:33:8e:7a:
e7:fc:aa:86:36:91:9a:25:cf:c7:36:09:88:a6:57:58:05:ed:
d4:46:a7:a8:5f:50:8c:7a:02:15:7d:e9:c4:04:f7:e0:b7:8e:
3a:22:26:f1:4f:de:b2:78:5b:7f:4e:99:77:e0:86:c3:b8:ab:
74:c5:d7:ef:d9:77:46:28:7b:bb:45:86:63:75:d9:90:93:be:
1f:b1:c9:21:54:6a:af:b4:12:b8:c4:7b:53:17:7d:2a:6b:97:
cc:87:6e:05:84:74:ab:d4:14:12:69:29:37:76:63:5a:5e:77:
71:c8:76:7b:22:49:f8:69:cf:0a:37:c1:f3:5e:75:ba:4d:36:
37:81:04:2c:8c:fe:71:f5:a0:f5:5a:1a:29:4b:82:4e:66:08:
69:ae:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:17 2026 by rpki-client