
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier: frXC3HkpIYg1QpI1qQhDYwbSD9TMx3yEyoRL7BR7E0w=
Subject key identifier: 03:FD:AF:87:3B:CF:40:62:32:76:FD:CC:4E:61:01:CE:37:09:BD:6A
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1F9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number: 1F64
Signing time: Thu 16 Apr 2026 15:58:08 +0000
Manifest this update: Thu 16 Apr 2026 15:58:08 +0000
Manifest next update: Thu 23 Apr 2026 15:58:08 +0000
Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: YjdjvBkOU6+Lto6TMkirnRkc16CZ5BvwyAUvdrneIsM=)
2: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=)
3: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=)
4: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=)
5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=)
6: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8094 (0x1f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Validity
Not Before: Apr 16 15:58:08 2026 GMT
Not After : Apr 23 15:58:08 2026 GMT
Subject: CN=69e10710-e78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:a2:1e:49:fb:94:ec:58:4a:75:70:42:d1:
6d:04:b3:5d:8d:44:77:88:ba:d6:68:23:10:6b:06:
53:97:08:7e:f0:79:1a:b2:23:22:fe:ae:60:c1:39:
1f:6f:b4:f3:80:ca:23:ae:30:e0:16:43:f1:3c:85:
c4:bc:23:55:1a:40:ff:8b:23:3c:51:d5:5d:46:01:
49:35:bf:10:f8:18:8e:b2:4d:9b:7c:87:11:86:09:
15:70:3a:12:ad:fa:f9:1d:3c:22:3c:bd:d5:14:b0:
b0:f1:a9:dd:23:17:23:3f:c8:7f:02:02:ea:9a:45:
6c:47:f1:a5:1c:e0:3d:c8:7e:cb:23:4f:03:b7:1c:
b2:c2:91:34:0d:d3:95:08:8c:d9:c5:8e:60:0b:d9:
9a:9c:3f:fc:55:bf:81:9a:52:90:00:9e:5d:e0:c7:
12:fe:47:c8:8e:b0:6a:4b:77:24:c5:22:2e:24:9f:
00:02:57:01:38:95:6a:ee:05:b8:24:a2:01:35:23:
94:56:f3:e8:8a:6c:b6:14:2b:d9:94:41:e8:1a:6d:
6e:0f:d8:74:81:ec:3b:4b:35:2f:a0:cd:70:68:02:
3c:bb:f9:89:f6:df:a5:89:2a:16:76:d9:a1:f8:91:
42:9e:13:b3:02:56:d0:96:f1:70:5c:3b:d2:c7:ba:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:AF:87:3B:CF:40:62:32:76:FD:CC:4E:61:01:CE:37:09:BD:6A
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:84:ca:26:45:97:5c:c5:c3:13:5e:5e:86:57:96:b6:31:d5:
48:70:62:10:7d:db:f9:db:29:4d:16:80:7e:bd:ec:48:ce:65:
34:26:65:f9:5b:bb:9d:33:b9:8f:8d:57:62:92:1a:b3:da:5c:
83:1f:97:73:09:fb:8c:4b:58:28:3d:d9:6e:36:1b:cd:c9:54:
32:54:a7:e4:37:89:e0:86:05:1d:d9:39:46:75:cb:6f:27:41:
e6:77:29:78:38:8c:92:d1:cf:35:4a:b8:b0:51:33:8c:e5:2a:
69:b9:08:12:20:92:e7:da:4a:60:2c:df:37:fd:a7:7b:d9:55:
36:c4:27:50:d2:b8:d6:55:97:a4:2c:66:66:c5:51:1f:ba:c6:
23:af:0f:ec:e5:a1:d2:16:b7:8d:74:1f:1b:fd:09:80:89:fe:
e2:c3:10:4f:cd:06:b2:6c:c2:ad:50:80:c2:b4:71:94:9d:c1:
69:4e:b0:ad:74:c6:92:45:c2:b3:b9:68:7d:5f:1b:3a:a2:54:
fe:ba:c3:a9:b4:fb:b8:07:ea:d7:bb:c9:c4:ee:b7:71:51:36:
9c:b9:80:2c:d4:65:bf:6d:37:e9:3c:35:c1:36:78:65:f4:cb:
e5:f7:7c:fc:7d:86:d8:c3:0e:76:0d:82:7e:81:15:e3:71:c4:
c2:ff:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:12 2026 by rpki-client