
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier: l2L1gkMTbw9ug9lCYheYgbZ4lGOV/xMI22nsPvy7SgI=
Subject key identifier: 75:FE:39:2F:F7:38:02:0E:FA:F8:D9:5F:C5:B6:AE:09:18:E3:B8:AA
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1FAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number: 1F71
Signing time: Tue 12 May 2026 16:00:39 +0000
Manifest this update: Tue 12 May 2026 16:00:39 +0000
Manifest next update: Tue 19 May 2026 16:00:39 +0000
Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: GGVvMBgf/t67G+eRt4vkANBcNVXEhTGKMAWOj6Mt3hY=)
2: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=)
3: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=)
4: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=)
5: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=)
6: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8107 (0x1fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Validity
Not Before: May 12 16:00:39 2026 GMT
Not After : May 19 16:00:39 2026 GMT
Subject: CN=6a034ea7-cde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:1d:ea:42:d0:c7:59:7c:b2:79:d0:f4:ea:
61:2f:27:80:3b:b7:43:ba:f9:8d:07:02:1f:53:e7:
5f:2f:48:c6:95:8a:c7:48:0e:df:b1:a9:e5:20:63:
4a:6a:9a:7d:45:75:8c:e3:ac:cb:06:3a:30:05:90:
99:86:53:89:cc:60:5a:47:ce:f5:3c:bd:05:42:c6:
4e:6c:ca:11:19:d9:35:9c:18:03:08:c8:96:42:1f:
06:f0:0c:0d:a7:65:7d:d1:df:26:e9:3b:96:fb:b6:
33:0b:54:c5:68:af:e4:3d:7a:a1:30:f5:a7:66:e3:
54:c0:b4:6c:7d:41:7c:68:ac:b3:93:75:db:a0:ef:
8a:ba:4d:82:07:91:82:03:3e:8b:bd:4b:4b:01:5f:
be:ca:01:26:77:c3:47:dc:5d:fd:1f:1d:f5:cf:0d:
8f:f8:c7:83:a7:46:24:cc:c4:a9:75:68:56:00:2b:
e3:b1:d1:d3:24:a2:f7:ee:29:dc:9d:15:6f:a6:36:
58:d9:ec:35:ae:6f:c2:90:79:19:7f:61:00:25:a3:
60:3f:8b:e4:63:d9:f9:e8:92:0a:25:55:01:e8:d9:
90:2c:cc:e6:83:3b:ad:be:3f:e3:1a:7e:81:63:b2:
d0:b4:94:71:b0:db:d0:a0:42:d2:9f:82:b0:54:59:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:39:2F:F7:38:02:0E:FA:F8:D9:5F:C5:B6:AE:09:18:E3:B8:AA
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:0b:d0:f6:a3:b1:4a:e3:be:7f:0f:c8:2c:67:e9:bd:3a:97:
1b:2f:1f:5f:63:76:f1:44:7e:11:c6:7e:9a:1d:1e:67:6a:e4:
61:c9:fa:da:e8:d9:b8:f0:a5:73:6a:98:e3:d1:50:fd:13:ff:
9a:de:07:ad:a6:05:3d:71:ee:ae:a9:b2:50:c8:f5:6f:4c:47:
b7:c9:d0:63:ad:7e:ce:63:25:cb:60:15:48:ec:f5:2f:0a:a9:
7b:6d:0a:c5:6e:15:e7:0b:dc:31:c9:52:4f:80:0c:d3:f5:4f:
72:4e:f6:3b:5a:ba:79:17:fc:12:d1:9b:17:c8:8f:b3:2d:da:
52:bb:c3:6d:11:9e:8b:18:3f:7c:41:bf:a8:79:f8:67:81:29:
8b:ac:7b:b0:35:5a:6e:e6:b1:03:c8:e0:d8:5d:52:b6:47:f1:
ce:c9:0f:d0:64:a7:66:05:56:fd:c2:f8:b9:a1:48:09:6b:96:
ac:23:ec:a5:5b:03:54:ea:aa:cb:5e:05:4a:4b:4a:d3:9c:88:
26:ba:64:52:16:db:95:42:2a:83:94:ed:c2:ec:9b:5a:ba:09:
0a:19:1c:f8:0e:bd:c6:da:78:19:35:f5:aa:00:f8:48:5d:14:
48:78:6d:75:ec:72:74:35:05:8a:64:a0:e3:7d:b6:1c:5b:c5:
43:d9:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:09 2026 by rpki-client