
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier: i/9r6r+bvkaDx+r1MgBVXHPF0a+oJYYudMJ42s2bY5w=
Subject key identifier: DC:1A:8C:B7:29:FA:5C:D5:8D:2D:CF:8C:10:75:CA:24:65:9D:C1:B1
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number: 01AE
Signing time: Mon 11 May 2026 04:10:56 +0000
Manifest this update: Mon 11 May 2026 04:10:56 +0000
Manifest next update: Mon 18 May 2026 04:10:56 +0000
Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: WbW2lW/ggGMbtz5rN9/AFGS1rU4Dq8idXB5d4hIerYw=)
2: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: owQYw9h+uccODUhkikEdlCDKK/hYVX6MWumcBf31Hrw=)
3: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: 0E4qYTpBck7zqd7XOVsdpYAiDLiP6vH0ev4CSQjnfXI=)
4: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: /8Gd5gZ758sNArtTS8yRpNug05q/Okyd5D7W2BUqcNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Validity
Not Before: May 11 04:10:56 2026 GMT
Not After : May 18 04:10:56 2026 GMT
Subject: CN=6a0156d0-ca4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:00:48:a3:f6:d9:2e:47:85:fa:96:52:d3:
5e:f7:fb:3c:80:6c:d5:f2:2d:07:97:12:bd:0d:a0:
6d:ef:c4:92:58:fe:1a:a5:fd:4c:58:a0:f2:2a:b5:
b6:87:1e:a1:2c:a5:05:e4:6b:b8:28:e8:ca:69:18:
59:f1:22:02:f4:8e:4a:ad:67:b0:cb:d5:68:da:fd:
53:4f:f7:e6:b0:db:ae:4b:88:09:ac:dd:ca:c2:69:
04:2c:bf:0a:4d:1b:4e:b0:68:b2:70:72:1a:f7:b6:
e1:b4:51:e1:53:25:4e:fa:98:e0:70:9f:9e:a0:aa:
ee:38:8e:ca:29:29:af:ca:bb:75:19:f0:16:ae:2f:
d3:e0:69:83:62:30:4d:4f:c8:21:08:4b:82:92:43:
a0:a9:bc:da:f0:41:cc:13:2c:0b:f9:aa:77:69:6b:
4f:aa:11:ae:dc:fd:f0:82:90:15:fd:fc:a8:48:14:
01:f0:68:13:c4:85:4b:ec:31:0c:12:e0:2b:bb:17:
ae:e1:c1:e2:e1:44:c8:a5:0c:3e:c4:c7:6f:15:ff:
40:61:fc:d2:a6:cf:cf:2a:34:82:b6:09:24:ed:95:
28:3e:87:3b:3f:79:80:a9:1a:9b:a9:1d:88:af:e3:
f0:53:c5:76:62:8f:72:be:c6:db:27:d0:a5:3b:20:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1A:8C:B7:29:FA:5C:D5:8D:2D:CF:8C:10:75:CA:24:65:9D:C1:B1
X509v3 Authority Key Identifier:
keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9d:11:e6:3d:f6:4a:a2:b7:8d:ab:5e:e8:dd:0c:fd:b5:a3:
65:65:b0:ea:4a:15:60:f5:1d:95:09:6d:10:5c:c8:a1:35:0c:
3f:bd:19:d8:ad:ef:26:3c:b3:8f:01:92:24:64:7b:b8:c9:f5:
00:03:4b:6f:6a:15:15:b7:8a:e0:a1:68:59:82:f6:89:b4:86:
e7:03:15:a8:8a:a5:40:da:3a:64:62:cc:80:00:75:98:56:dc:
2e:d4:12:7f:88:f9:2d:2a:c2:4d:3e:74:24:4d:9f:dd:b5:8e:
56:e1:5c:57:3a:f0:18:7e:58:a2:0a:d1:dc:d0:00:57:74:d8:
77:51:f7:3c:0b:ff:c4:a6:15:1e:ad:9b:89:83:6d:f6:8f:84:
12:ee:0e:6f:63:b9:61:51:f3:a5:8d:36:23:b1:93:bd:85:57:
cd:57:dd:d8:91:06:9c:8e:42:72:01:9d:1c:2a:5b:78:0b:86:
2c:f4:f9:4c:0a:b1:ab:c7:bc:f1:c5:38:07:1d:96:d2:fd:4f:
c7:b1:19:0b:c1:e4:90:91:7b:99:75:d4:cd:c9:e5:fc:2a:74:
90:4d:cf:03:83:54:7a:b2:06:26:41:91:64:7d:cd:be:e7:b1:
1d:7d:de:43:f0:47:7b:12:38:92:ea:a9:88:39:61:f3:3a:1a:
6b:28:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:31 2026 by rpki-client