
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier: PEp7FzC3BFoKDYib7T/c1FuJXUfDL6oSAi22HYpF8ss=
Subject key identifier: EF:49:08:24:E8:8D:27:DE:9D:3A:25:5B:F5:32:08:B4:35:73:43:BF
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1F86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number: 1F4C
Signing time: Mon 02 Mar 2026 00:58:43 +0000
Manifest this update: Mon 02 Mar 2026 00:58:43 +0000
Manifest next update: Mon 09 Mar 2026 00:58:43 +0000
Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: oxKJ0kSpd2nYZFl4jynLEt3PSkseTRrzKjPTkGqntFM=)
2: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=)
3: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=)
4: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=)
5: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=)
6: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8070 (0x1f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Validity
Not Before: Mar 2 00:58:43 2026 GMT
Not After : Mar 9 00:58:43 2026 GMT
Subject: CN=69a4e0c3-9cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:67:66:87:d1:94:8d:af:09:fa:e7:d8:c0:
47:ef:a0:51:35:99:fa:33:e8:05:d7:90:75:61:07:
82:47:51:97:41:f4:40:d6:f5:bb:fd:26:1c:d2:ff:
ad:32:27:ac:4d:e6:97:7d:56:f9:9b:a1:fd:78:78:
ba:f0:48:49:af:06:2c:c5:8d:d3:76:54:8a:e4:64:
e4:f1:ac:36:ec:96:2f:ed:55:1d:54:61:70:f6:cb:
5a:20:f8:17:c2:01:9a:c5:35:f1:d0:6c:00:dc:41:
d0:de:13:ae:17:24:17:17:1d:36:41:e8:76:73:7d:
1c:f6:7d:23:17:be:16:27:c9:21:9c:d8:81:84:8f:
cf:b1:00:56:80:e8:0a:bf:a7:0e:01:b4:8e:2d:2d:
78:d0:21:3b:11:0d:bd:0d:80:f1:e4:6e:65:88:da:
23:51:ce:eb:11:dd:cd:dd:c6:62:a4:01:36:64:d0:
21:e3:c7:57:3e:ac:b8:d0:4a:da:b3:93:54:48:9b:
a4:e6:c2:5d:d0:f0:26:8c:da:50:dc:e6:33:81:dd:
5a:db:67:4b:f6:f2:cb:5a:e7:fc:91:bb:f8:e1:44:
46:dc:a9:e4:ba:90:f3:29:12:fd:01:be:59:54:89:
90:8d:70:03:85:ef:79:dc:1b:04:9a:df:2e:c4:6b:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:08:24:E8:8D:27:DE:9D:3A:25:5B:F5:32:08:B4:35:73:43:BF
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:75:32:4a:0f:ec:b5:8e:38:60:1f:65:44:2f:65:29:84:c7:
79:5b:c4:15:9d:cc:d7:c0:89:f4:27:18:32:71:86:07:53:3b:
b4:ef:a3:53:76:26:9d:9c:f8:14:d0:03:4f:d4:6a:37:4a:3a:
aa:7f:04:80:b9:97:3a:20:a0:2b:c6:f9:e6:93:ef:ef:9a:b4:
23:22:e1:ec:c8:ea:3a:fe:0d:e9:fb:7c:14:07:ac:b8:4b:a3:
82:70:98:22:a0:f6:9e:9f:de:86:a4:d0:bd:28:e0:1d:0a:9f:
dd:d5:8f:d5:93:e5:78:45:4e:4f:db:47:4a:4c:5b:2d:e8:a2:
51:e8:6d:f2:0c:d8:09:84:41:cb:92:68:e1:c6:1e:41:5d:8a:
1a:11:58:0b:69:d5:20:c1:c2:38:4f:42:33:89:be:29:28:7c:
6e:90:ac:78:2a:a0:00:cd:ca:b3:63:e6:e9:55:ca:4f:e7:77:
d4:2a:55:c2:18:07:eb:aa:bd:27:60:b9:42:8c:f6:d7:0d:5e:
f2:2a:4a:56:38:de:93:b4:ad:ca:7c:ec:77:a9:eb:44:c6:03:
41:c9:36:bc:b7:62:8b:dd:e8:4e:a4:b5:47:bd:71:f6:39:14:
05:bd:42:3e:9b:05:68:80:10:7d:62:ac:91:9e:c7:41:af:a5:
a0:77:e8:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1
MDM2ODI0NkYwHhcNMjYwMzAyMDA1ODQzWhcNMjYwMzA5MDA1ODQzWjAYMRYwFAYD
VQQDEw02OWE0ZTBjMy05Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGNnZofRlI2vCfrn2MBH76BRNZn6M+gF15B1YQeCR1GXQfRA1vW7/SYc0v+t
MiesTeaXfVb5m6H9eHi68EhJrwYsxY3TdlSK5GTk8aw27JYv7VUdVGFw9staIPgX
wgGaxTXx0GwA3EHQ3hOuFyQXFx02Qeh2c30c9n0jF74WJ8khnNiBhI/PsQBWgOgK
v6cOAbSOLS140CE7EQ29DYDx5G5liNojUc7rEd3N3cZipAE2ZNAh48dXPqy40Era
s5NUSJuk5sJd0PAmjNpQ3OYzgd1a22dL9vLLWuf8kbv44URG3KnkupDzKRL9Ab5Z
VImQjXADhe953BsEmt8uxGtYXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9JCCTo
jSfenTolW/UyCLQ1c0O/MB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC
MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn
UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMnUySg/stY44YB9lRC9lKYTHeVvEFZ3M18CJ9CcYMnGGB1M7tO+jU3YmnZz4
FNADT9RqN0o6qn8EgLmXOiCgK8b55pPv75q0IyLh7MjqOv4N6ft8FAesuEujgnCY
IqD2np/ehqTQvSjgHQqf3dWP1ZPleEVOT9tHSkxbLeiiUeht8gzYCYRBy5Jo4cYe
QV2KGhFYC2nVIMHCOE9CM4m+KSh8bpCseCqgAM3Ks2Pm6VXKT+d31CpVwhgH66q9
J2C5Qoz21w1e8ipKVjjek7Stynzsd6nrRMYDQck2vLdii93oTqS1R71x9jkUBb1C
PpsFaIAQfWKskZ7HQa+loHfoIw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:55 2026 by rpki-client