
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier: IcGHDb89zYqwqUUstmR0Cn/9jS0lAXsxYUk1s/7+WQ4=
Subject key identifier: DF:5E:F9:E4:4D:2C:7B:AB:6B:AE:15:E9:72:48:9B:54:A6:22:95:2D
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0CE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number: 0C1D
Signing time: Tue 12 May 2026 19:14:52 +0000
Manifest this update: Tue 12 May 2026 19:14:51 +0000
Manifest next update: Tue 19 May 2026 19:14:51 +0000
Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: M5OEc5MbfclmGtc+HenxmJgh/nYdGNgyYhHsTGQSEJM=)
2: E8819018178811EC876F5F50C4F9AE02.roa (hash: vUBN3WiPziWGZpfHV/nuh0lxaXpR2pUDXk1dHU8ebwE=)
3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: whrOto6YdWxD5nUJi5RhnyhfSKeLupBw4gHNI11xyhI=)
4: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: EykGpXwalZSOBcmCqBPjJofqYixjM46Qzlbp8WB+N/Q=)
5: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: lU4qj9qhMKsVAQxIlEtzz2s2LN2qpGRwvCOWleMDdN8=)
6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: utuJrvT7k0aAp1PIv4kJ0yTf9B0xorguSm8sns4EFRw=)
7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: RupCODMCVn7fipZVaU8cDxGLwLhz8c3cckM5d5QL83Q=)
8: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: BZMmvsi1yqiTsCVctnffOHMNepndBiyB42ybFXbXkIE=)
9: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: I8QsExkkx/lQXZrUI8Q7vR9Vux4YkSdHgTIl8y+WbMk=)
10: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: TjrXzvrlWANf8JvFU1WnxrTztuxOH43IK3Zl85V0kH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3301 (0xce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: May 12 19:14:51 2026 GMT
Not After : May 19 19:14:51 2026 GMT
Subject: CN=6a037c2c-5be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:79:64:40:a4:1e:43:01:61:76:61:00:79:
b4:92:e4:a9:02:37:33:8f:2c:58:41:97:ba:0c:c5:
99:40:1c:20:f2:25:06:22:44:d4:98:70:d1:e9:15:
dc:95:eb:49:cf:44:b8:f5:f8:b0:c4:76:13:ea:30:
be:bf:d4:1b:4f:24:f9:0e:7a:57:67:d7:b8:72:70:
86:35:c7:ce:b4:8f:18:0b:82:c7:e6:49:b3:1c:1b:
2e:e2:f9:42:e2:9b:92:6b:a6:4d:38:ea:d9:c6:29:
e2:1c:13:c0:6e:f7:7f:02:05:f3:d7:a4:17:02:0d:
fa:c3:f2:01:e9:5a:db:1f:1e:23:39:12:0b:a5:c0:
a8:fa:92:a4:ad:7c:2b:bf:db:71:8a:98:10:5c:de:
d9:70:a1:1d:6d:da:f2:b9:ac:a6:88:4f:71:09:f4:
7d:9d:13:d3:21:7c:37:7a:ce:af:f5:e2:28:91:e5:
22:db:17:b0:ae:c7:98:c7:69:20:f9:62:d9:24:00:
63:1c:50:4d:53:8b:41:a2:68:ef:f5:76:35:ff:32:
93:e5:c7:43:07:01:3c:ff:98:23:0a:7f:99:9b:d9:
9b:16:59:ba:c6:af:03:9f:c2:40:4a:4a:54:30:23:
ff:26:6a:c6:22:a1:dc:80:f9:39:4a:a1:a3:e2:3d:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:F9:E4:4D:2C:7B:AB:6B:AE:15:E9:72:48:9B:54:A6:22:95:2D
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:78:57:43:97:55:48:51:40:64:6b:53:c3:7e:f0:f3:2b:
90:88:03:57:34:63:6c:38:90:9d:17:2a:3b:3f:dd:43:60:37:
75:9b:16:39:c6:96:11:e8:8b:52:fb:6f:aa:e6:cc:f5:18:2d:
3f:49:d7:e2:74:6b:66:95:c1:29:7e:09:08:79:91:0c:a1:4d:
91:97:7a:72:f6:f9:1d:3a:79:c8:41:51:eb:4c:e7:8c:7c:5b:
1d:8a:46:06:23:7d:03:20:c9:0c:a7:cb:61:10:50:a8:42:cc:
22:e0:db:bb:6d:81:23:4a:38:f7:74:52:23:4f:f7:1b:31:38:
ea:1e:d9:e3:33:ab:33:91:cf:e6:75:23:33:1b:b0:6f:55:06:
b9:62:d4:21:dc:9c:1f:31:b9:35:b2:6a:ae:34:88:2a:61:00:
94:56:fc:d7:d2:a4:8e:df:60:14:f8:c2:42:ac:61:e1:ea:24:
c9:7c:77:12:3c:36:c1:b6:28:11:00:bd:ef:ec:4f:6a:b2:f6:
8b:78:ab:70:0f:89:68:40:8a:13:92:52:ab:a4:a2:07:a2:18:
b8:35:90:d4:75:1e:e3:dc:34:fc:57:60:2a:56:01:b5:c3:d8:
3d:84:1f:97:6e:cd:d4:5f:24:27:33:62:65:ea:a1:3e:01:28:
77:d9:4f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:13:24 2026 by rpki-client