
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier: 2aJ/krWjHh4Osi8+3v1B7HlFTGhsDjIDJIpOvhoP91Q=
Subject key identifier: 74:EC:2D:39:A6:90:19:1D:6F:1C:AB:01:2C:AE:51:62:09:1F:FA:97
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial: 0E88
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number: 0E78
Signing time: Tue 24 Mar 2026 15:33:28 +0000
Manifest this update: Tue 24 Mar 2026 15:33:28 +0000
Manifest next update: Tue 31 Mar 2026 15:33:28 +0000
Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: VDP0NIDZCtoHd5OML2Q3vtrM3sW9jA9sd16QQezFhvY=)
2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: +AnMnxmKTZyscWe5AeUEPNU2Nvb8Uu/NJlADVWANwr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Validity
Not Before: Mar 24 15:33:28 2026 GMT
Not After : Mar 31 15:33:28 2026 GMT
Subject: CN=69c2aec8-fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:c1:bc:72:79:9c:9b:a7:f9:c9:57:62:3b:
ea:94:9c:b2:b4:91:b0:41:01:e9:11:33:e5:46:49:
45:9b:3c:60:d5:bf:99:5c:3c:f1:e2:de:f2:59:85:
92:c0:2c:b8:32:8c:d5:fc:fe:aa:cc:2b:3c:c5:07:
09:ed:1a:dd:72:3f:a7:19:fd:30:c1:e2:bf:d4:4b:
ce:cc:69:01:5c:a3:d9:5e:f1:35:4f:a2:3d:16:64:
0e:8c:79:76:3e:ea:4a:2e:4e:03:8b:41:87:cb:6a:
bd:13:55:90:bf:0c:5c:d3:8d:e5:be:cf:85:2a:21:
ee:77:81:e9:4c:3b:35:4b:b6:f7:41:ca:7f:4f:a7:
0d:09:63:49:a8:69:e4:b8:bc:bd:16:7f:8a:10:45:
b6:1f:2f:79:54:3b:af:ab:89:a8:59:ed:53:7e:ec:
7e:c5:4a:1d:fe:bc:9b:81:9d:da:c0:dd:79:ba:0f:
fa:1d:d5:9b:9a:79:6d:08:3a:e7:a4:da:15:84:0e:
01:bb:f4:0a:c2:0c:ca:56:4f:9c:dd:49:cb:b7:8c:
72:0a:2c:d1:4c:ae:53:c5:c4:c4:a3:0e:89:de:56:
0c:58:9f:51:a2:48:62:b3:a9:e2:2d:5f:1a:af:5d:
c9:86:ea:e3:05:45:30:31:67:03:2c:f2:7b:20:6c:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:2D:39:A6:90:19:1D:6F:1C:AB:01:2C:AE:51:62:09:1F:FA:97
X509v3 Authority Key Identifier:
keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:40:47:0a:9c:af:ba:f8:44:78:0d:8c:b6:f3:49:0a:27:
f4:6f:ad:08:80:38:19:a7:30:e5:f3:c8:41:d0:31:5d:99:8e:
dc:f6:c5:9c:42:a5:9b:f4:f0:2e:14:44:2c:d5:76:6f:24:85:
a3:5b:c7:91:6a:b3:72:38:3e:8a:39:bc:3c:6b:fe:4e:15:8a:
ec:6d:6f:eb:b8:ca:bd:29:23:e4:a2:9d:41:49:d2:81:3d:f3:
08:9a:41:b8:a4:9e:6b:3f:7c:00:d2:a2:96:64:c0:d1:eb:28:
d7:8c:72:59:7d:6a:dc:a1:15:e2:1c:fa:63:bd:ee:30:ae:e7:
06:a3:04:01:43:c6:6b:19:f2:39:54:42:95:92:af:9e:68:05:
1d:9d:4f:54:2a:09:16:cf:34:51:c0:bf:b6:8f:74:ed:fe:a3:
40:dd:aa:90:63:27:54:20:e9:b6:d7:f0:0e:80:a2:89:1e:0d:
65:e0:3d:ee:57:c1:85:f2:5c:a3:46:c9:af:cf:9d:32:2f:2b:
86:47:ee:13:22:14:eb:a3:54:31:5e:84:fa:3a:5c:53:c2:94:
2e:f0:32:78:a6:28:e5:70:62:f8:aa:6a:5c:ec:36:40:c8:97:
e3:ef:94:63:f4:90:e5:6b:d1:dc:51:9c:5d:b3:62:2b:09:d5:
85:a4:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:48 2026 by rpki-client