
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File: IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier: a4mB58ExKXnncoBPIQqLrmm8CmVmHyr/9CiT3jm+cHQ=
Subject key identifier: 75:B4:A8:B9:F3:F3:D4:2E:BA:71:95:44:C6:B1:59:10:1E:F7:66:31
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 09CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number: 089E
Signing time: Tue 24 Mar 2026 21:02:20 +0000
Manifest this update: Tue 24 Mar 2026 21:02:19 +0000
Manifest next update: Tue 31 Mar 2026 21:02:19 +0000
Files and hashes: 1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: bTCMfnxdi+yTldvIH8RMDbOshA77StviEK+dz7o7rkg=)
2: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: afi+PbQC8SpdxQTIi3P8pzh5EKmbxIOg8U6Ac6zzfwY=)
3: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: pCPd+tuHbqgWoaOlqAhQ6+5vWHRgmMsM/z95PxSYBkw=)
4: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: cw5dX24DydjnVSgn60Qr2Of5nVXYFjymiNM4+EpVYE8=)
5: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ch8zqkDJwVdaN/NcJ2AtXkYx3RS7ICUp1zvi5ead2vk=)
6: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: BP9dpnN3TWdDCzh67rIwfbR2WtB49rOYwybU3sKkAtc=)
7: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: PEzlowCNbhSBca+/F5UeSTEd1tPnYkzmYYMT934JTjY=)
8: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: q662bjsPx3nJdseL16zopdIrZN9HkkIv4fo5ocY4d3w=)
9: 905DBCFEF76711F095EC07F7436F56BC.roa (hash: KTV5aMI+eBsx8u5I0BpvyWjCRiBuOlMzA+mZgbge6Ek=)
10: 77439A048A3911F0AA9D4C75C4F9AE02.roa (hash: 2MZR2T0KrITi7+dLxd2l+2St6FA3ilw1LmxaFqkLJqE=)
11: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: VddVtwssutcMQwaR1vdtUowyAjGL/e43+cbXwtEQzwE=)
12: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: jN8GeVnlqDQLhpvpkrffBeR+GAIvhCyCZ1p9jNM0gNI=)
13: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: eerHDNQFHtFGiY3DNoZpBFzNbmKgBmt64w9ZU6aicfM=)
14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: Q0sreTOCeSUhlAzjf4yXDHqHl5NVQ4QsOwOLV34E2to=)
15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: revozRlZ1PCVY0e2+q4uiPeAwkQOj5szxn4yN6XtSiw=)
16: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: tirpzoVyKOHPmHCBwgEXjgsgVN+72h1c1Jdjf2MA7uA=)
17: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: jDWTj1CH9kzVVP1BL/M5YfXchDhUlvJZPClkLUm6R8g=)
18: 55493366013C11ED9864F33CC4F9AE02.roa (hash: U+IjZMxgPEnrEU7rw7iXo1bR7Si/DV/e04ojLUsEWO4=)
19: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: Oi5uMTAf1h4Vei1KhlKA8uQm52ekXchQEc08BcoO+Rg=)
20: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: HeNa2rUU7fSr0SXxHVmsvySzBVE2weB3UDsdNqz2VU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508 (0x9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: Mar 24 21:02:19 2026 GMT
Not After : Mar 31 21:02:19 2026 GMT
Subject: CN=69c2fbdc-51a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:14:b1:14:b8:8e:3d:5d:98:34:d4:6d:3e:
5e:da:cd:64:68:d7:f5:d3:64:b5:6f:94:5b:57:26:
f9:ad:6b:fb:f8:46:85:05:b5:77:e5:ec:cb:3f:02:
a7:10:dd:ae:3a:8c:3a:70:17:1a:4c:29:50:aa:20:
97:64:28:36:ff:fc:52:73:8c:7b:cb:d4:97:3f:0b:
b1:ca:d7:dd:48:e7:8c:c6:7a:7f:97:2e:f0:b4:79:
3d:d8:47:50:82:9c:60:6e:16:49:86:fc:bc:cf:97:
39:6f:14:b1:b9:1e:a5:56:e7:13:6a:79:0d:8b:cf:
a1:ea:b6:43:90:51:0f:55:1c:9b:7a:eb:cd:04:25:
0c:cb:e6:02:5b:4a:be:3f:fe:5e:e6:75:cf:c6:17:
55:21:18:e5:e1:58:18:46:fa:d9:28:8b:e3:39:4a:
9e:f9:46:22:d4:ad:45:a1:2b:87:93:b6:19:0a:e0:
8d:4c:74:d2:ae:37:34:25:93:48:b5:af:f9:57:df:
5c:77:ee:97:fc:c9:78:e4:e2:8e:e9:47:1e:5c:3b:
61:a9:f4:fb:56:b6:57:b1:19:ba:ec:e3:1f:69:54:
05:2f:ff:ba:50:3f:e8:b1:bc:fd:e4:eb:9c:82:e7:
5d:fd:d7:d4:be:e8:78:23:13:9c:59:da:52:df:fe:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B4:A8:B9:F3:F3:D4:2E:BA:71:95:44:C6:B1:59:10:1E:F7:66:31
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:70:ae:8e:f0:c8:42:c2:07:32:4e:5c:e0:3e:81:c9:a0:
5b:17:dc:92:b9:4f:51:8f:c8:1b:5a:23:6c:7a:95:91:09:82:
c9:ed:07:99:e3:de:c1:a8:18:7c:ea:40:21:c5:64:b3:a6:c6:
61:ba:07:31:91:83:07:85:52:5c:5e:33:56:8a:f9:96:f8:e2:
e0:c9:6b:d3:b0:61:b4:af:8d:53:e3:89:29:fd:7d:9f:32:2e:
51:6e:ae:d8:1f:2f:ea:3e:88:47:6c:da:f6:2e:98:1b:a2:51:
b2:4f:1b:da:d0:8c:b7:d5:84:8f:07:a0:53:35:ea:67:4f:1a:
5c:57:72:5a:23:bf:3d:cb:f0:3c:c3:dc:11:26:3f:4c:df:bc:
4c:04:7b:5f:ec:e1:3c:a2:4e:8e:15:0a:9f:e2:1c:67:2d:8b:
a4:1d:22:6f:32:45:11:5c:e5:d1:3f:de:c4:ed:8b:ac:5b:66:
36:7b:67:c5:ce:ed:e5:d8:df:a7:d2:5a:d5:40:22:35:d2:2c:
a2:be:f2:93:e8:84:42:e9:bb:e0:42:4b:80:b2:1e:f7:53:5f:
76:28:d0:9d:57:42:87:06:a9:97:a5:27:55:9e:d1:f4:5b:fb:
f2:72:d1:26:38:c5:f4:30:3d:67:75:16:83:55:54:3d:15:07:
16:8c:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:33 2026 by rpki-client