
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier: J18CxaAIvHImgwbxlFhg5Ji/WWJi7JBBViYc8QwiTOI=
Subject key identifier: 87:42:7A:95:0B:D9:BC:F0:85:D3:35:0C:3D:84:76:FF:4B:3D:81:AC
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number: 01D4
Signing time: Mon 27 Jul 2026 05:24:08 +0000
Manifest this update: Mon 27 Jul 2026 05:24:08 +0000
Manifest next update: Mon 03 Aug 2026 05:24:08 +0000
Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: uig+Apn1865DLJZ/sj/p2itb+vzL5OG+LygTTfOUJzU=)
2: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: /8Gd5gZ758sNArtTS8yRpNug05q/Okyd5D7W2BUqcNk=)
3: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: 0E4qYTpBck7zqd7XOVsdpYAiDLiP6vH0ev4CSQjnfXI=)
4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: owQYw9h+uccODUhkikEdlCDKK/hYVX6MWumcBf31Hrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Validity
Not Before: Jul 27 05:24:08 2026 GMT
Not After : Aug 3 05:24:08 2026 GMT
Subject: CN=6a66eb78-d557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:65:ea:8c:28:ff:f7:94:99:4a:b4:e4:a6:
da:51:12:f0:fd:aa:4f:f9:53:4b:be:a7:4d:d4:22:
ca:6e:9a:8f:95:03:01:65:24:02:e2:98:a9:70:4b:
13:35:22:9b:f6:0e:60:c6:ba:4e:cd:4a:50:84:28:
dd:72:a3:0c:8d:a5:f5:cc:ed:ab:64:ec:af:8d:85:
b3:c7:d4:4e:e3:f4:01:e1:e2:db:d0:a8:f0:85:7d:
42:06:a4:08:7a:3e:8f:20:d3:56:6e:85:2b:64:5e:
35:a4:14:95:26:54:d0:dd:2e:b8:bb:3e:23:3d:fb:
3e:92:4b:11:19:cd:de:6a:24:fd:87:08:ae:47:18:
ca:f3:02:52:8e:f1:fc:24:24:57:e4:2a:4c:aa:02:
6a:01:2a:05:77:52:a0:d0:c1:55:29:93:d7:8a:f7:
24:d7:a3:60:4e:cf:f1:0b:69:04:9a:a2:1c:db:4e:
12:4e:bb:5c:b9:dc:4f:63:b1:d3:8b:7f:80:1e:74:
99:2d:15:06:27:59:71:82:7e:73:53:2d:4d:c1:3d:
19:64:96:45:92:17:b9:b3:a0:1f:cb:0e:b6:74:fb:
79:6c:f8:8e:65:6a:c6:21:e9:31:d8:b0:4b:c3:69:
36:89:68:54:0c:e2:e4:18:76:8a:32:42:e0:b1:54:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:7A:95:0B:D9:BC:F0:85:D3:35:0C:3D:84:76:FF:4B:3D:81:AC
X509v3 Authority Key Identifier:
keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:21:a0:b9:b6:5a:b7:9e:3d:be:c6:fa:fa:1b:1f:a2:6b:d0:
63:b0:b6:62:7e:4f:7e:82:81:5f:b0:f0:d7:48:47:49:f3:4d:
35:25:4c:03:c9:42:f6:35:ed:2b:0c:3d:d0:c4:2b:27:1a:63:
4c:48:13:37:98:86:68:f2:cc:69:ba:e5:eb:ae:c1:5c:37:0f:
3f:e5:e8:8a:f1:59:1e:08:61:57:c1:2a:d0:e0:fc:4b:60:5e:
38:ae:2b:92:45:39:48:00:12:74:69:3f:80:46:9d:e0:2b:fd:
1e:03:5d:6a:0e:91:43:63:ed:0a:ee:2b:05:7e:6f:08:ab:26:
48:5f:dc:7b:ea:d0:17:e7:4b:a8:10:18:44:87:d9:62:af:c9:
b3:0f:d8:6a:81:3c:75:3a:a7:6d:fa:b1:9b:12:d6:d2:49:94:
6e:50:0a:cc:04:6d:21:d4:83:f6:2b:dd:e5:4e:cb:bf:e8:5a:
60:31:21:3a:9c:11:55:59:d5:91:97:b3:a3:a0:95:e5:dd:be:
e2:45:01:44:f1:2a:d4:35:1c:88:50:10:57:b3:04:c6:09:83:
48:62:35:c4:43:c9:63:9e:60:c0:85:c2:50:ab:de:fe:7e:63:
02:f1:3d:cf:26:93:22:2c:45:04:1c:aa:5e:f2:42:1f:b6:9d:
b2:85:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:56 2026 by rpki-client