
$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json)
Hash identifier: srrDXsWttD2aF+cvhntbqGJolBxLqguzHn7OWq4Si/4=
Subject key identifier: 23:3E:A9:77:DE:39:10:01:64:B4:32:58:6E:32:BE:97:5B:2C:1C:F1
Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
Manifest number: 01B2
Signing time: Wed 25 Mar 2026 03:18:42 +0000
Manifest this update: Wed 25 Mar 2026 03:18:41 +0000
Manifest next update: Wed 01 Apr 2026 03:18:41 +0000
Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: K2qj+j7pubSCWfXP2UnVdngLxD4cAyHUju2ii256d1s=)
2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: XjFhck5MvAQTRA+OOGEV3q9Dar3ZejU3wR1JyHT6FLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl
rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Validity
Not Before: Mar 25 03:18:41 2026 GMT
Not After : Apr 1 03:18:41 2026 GMT
Subject: CN=69c35412-c45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:fd:8e:5c:ea:d2:b6:cd:6c:e4:77:08:6a:
92:35:a5:94:df:36:42:d5:64:9c:2c:7c:31:37:94:
a8:5d:36:13:4d:cd:6e:3d:a2:fe:ec:1b:9f:05:ed:
b7:29:73:d8:22:63:11:eb:11:19:73:f2:1e:2c:76:
95:83:16:2a:6c:a2:21:eb:4a:9d:69:0b:f9:db:47:
ce:da:88:f9:9c:a2:93:45:a5:80:b5:8d:7b:9c:73:
c7:33:d4:fb:e6:ee:1d:e3:0c:65:a2:3e:c5:46:6e:
5b:10:0f:44:f6:8b:e1:ed:91:bd:35:d4:be:09:ba:
81:b3:f8:8d:9a:0f:62:06:d0:b3:5e:a5:87:aa:b4:
42:59:49:3e:51:fa:34:46:2a:60:18:21:4f:a3:6b:
a2:db:7d:e7:40:08:23:d2:50:87:d7:2e:cd:be:62:
4f:3a:90:08:24:e0:c1:80:5b:ac:4e:c3:27:54:99:
97:b8:24:ca:f2:ab:07:d9:ca:60:b6:ec:dd:81:0b:
16:74:91:42:9b:99:ab:d1:e7:55:e6:93:d2:c1:87:
22:be:1b:65:9d:1c:71:88:c0:4b:ba:72:e4:9a:34:
13:70:b5:ed:1a:83:5c:a3:c4:9d:7c:ce:5e:50:b0:
c0:3d:2d:e8:4c:4e:ef:73:14:b0:17:47:1f:25:fb:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:A9:77:DE:39:10:01:64:B4:32:58:6E:32:BE:97:5B:2C:1C:F1
X509v3 Authority Key Identifier:
keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:21:be:a8:d6:39:11:81:eb:e1:40:01:50:bc:7d:c8:b2:69:
a7:d1:3f:25:55:a1:38:2a:5b:cb:15:57:18:05:e0:5c:d9:69:
14:1f:51:d3:85:96:d4:f9:b2:db:de:3f:1b:ab:19:42:c5:64:
06:e4:b1:ea:cd:58:43:3d:82:6d:7c:08:68:a5:2d:ee:82:0a:
d2:f7:23:e6:ba:9b:6c:17:f7:6c:b2:c2:77:e9:5d:99:c3:d5:
b9:41:35:d3:da:2f:ae:d0:de:21:54:1f:a8:ec:69:fc:48:7b:
2c:6d:69:dd:84:b4:f5:f3:30:92:1a:40:dc:d9:4f:71:76:43:
f0:8e:cf:37:6c:6d:40:73:54:37:21:27:47:29:51:64:d8:f5:
28:a6:2e:9d:6a:10:57:08:7c:ab:5c:88:ff:f3:2a:f6:3f:16:
59:ac:3a:f8:89:3a:ad:ae:35:41:3a:d9:d9:e9:03:43:3c:37:
af:98:62:dc:70:66:10:ae:2c:b4:dc:2e:04:6e:0c:d0:bb:3e:
bf:d7:2e:14:40:3c:b0:78:6e:51:5f:24:85:ec:f5:e2:5c:0e:
28:47:36:a7:ca:1f:a8:93:d8:aa:e1:b1:a6:0b:5c:77:3c:a6:
52:ed:bc:f5:11:af:46:33:a6:ad:02:05:e9:a0:8c:b1:a0:30:
ef:ce:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:33 2026 by rpki-client