
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier: xdbVBDZsao6NTYEblhaM+hdllH+g6by4yGQy0szl5sg=
Subject key identifier: 05:62:4F:81:5C:17:DE:17:14:FF:44:4A:AB:A1:49:D2:AC:1D:13:45
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial: 0BD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number: 0BB0
Signing time: Tue 24 Mar 2026 18:51:44 +0000
Manifest this update: Tue 24 Mar 2026 18:51:43 +0000
Manifest next update: Tue 31 Mar 2026 18:51:43 +0000
Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 2gFqO8xriJEUhHbahM8Vt3sksTjw4P70L5h71QiL1aU=)
2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: SjDMXf0lNYFwt4BBzRLFS/hu859BDfy4g/4gUtj/7is=)
3: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: lFd0f/s6tWl8ssWZElmWFK2IFMinINueCRCwnr4LqZQ=)
4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: guSkTmy7FKfWkl3HEYDSdBxGCgfTJVTz0fMgkLGtNzk=)
5: DE437646F8A911EB98242219C4F9AE02.roa (hash: MmgfA3qYqHflBFSU79GcWhbhyjAjfee+uU1hKepl8Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Validity
Not Before: Mar 24 18:51:43 2026 GMT
Not After : Mar 31 18:51:43 2026 GMT
Subject: CN=69c2dd40-1bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:71:b7:a1:89:db:89:0b:2e:98:d4:e3:4d:
f4:1d:b0:b1:6a:2f:d4:68:52:c7:ce:a6:87:53:4a:
45:16:f8:ff:30:a1:ec:f7:70:55:2c:59:dc:d5:8e:
59:68:90:35:26:5d:23:fa:7f:f1:95:6b:b6:3b:82:
bf:38:aa:1c:bc:b4:03:26:37:28:62:87:23:88:5f:
22:24:62:34:3a:a0:93:c1:b2:f2:b3:54:a8:73:79:
45:11:fc:fe:6c:f1:df:7b:55:7f:fe:f8:ee:ce:f1:
ff:c1:86:41:d7:6a:3f:8a:b4:39:2c:23:f5:cd:20:
6f:58:8d:42:45:ed:15:38:fc:cf:a9:16:57:68:43:
82:5b:95:52:64:02:c5:10:e2:12:13:e7:b9:49:2a:
92:c4:a0:3d:8f:26:50:b4:0a:cb:76:3f:83:cb:47:
98:7d:10:8c:85:c8:43:9c:8b:81:67:00:60:6a:8c:
a7:8a:74:10:bc:b9:66:cd:d0:70:4d:90:a4:44:fe:
51:b5:7c:ee:95:ff:f8:27:ca:98:aa:48:4b:c1:12:
cf:d0:1c:b4:b4:b0:51:f4:d7:a3:1a:8b:e3:9e:88:
d6:bb:5a:1e:b6:f5:0c:1e:1f:cb:2a:7a:a6:2d:d3:
d9:7f:7c:f2:7d:ba:f3:27:15:b1:4b:50:17:05:e4:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:4F:81:5C:17:DE:17:14:FF:44:4A:AB:A1:49:D2:AC:1D:13:45
X509v3 Authority Key Identifier:
keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:39:91:92:c7:e4:90:43:56:d1:b1:5f:14:81:62:34:ea:33:
a7:bd:94:fd:83:dd:9c:e0:76:df:c6:55:34:b6:fc:e4:77:33:
9b:f7:d2:83:23:82:d1:5a:a5:6d:72:a3:4b:7f:7b:b0:b9:cf:
ca:2a:f4:46:ea:e4:6e:91:7e:2f:81:5c:6f:a7:a5:e4:0d:0d:
57:48:3c:21:ee:ab:cc:9a:4b:cf:e9:f9:8b:8d:22:0c:63:34:
67:47:74:9b:b3:a8:90:9a:06:6f:1f:86:a8:f8:b1:1f:5e:17:
8f:c6:8f:15:84:ec:89:be:73:7a:a4:22:c3:a6:3b:29:02:75:
d8:58:67:33:e0:79:24:b3:bf:4a:e3:a8:c4:ae:34:cb:37:8d:
ba:e9:73:6c:15:06:ef:7a:a9:4f:a7:d1:3f:cf:4f:79:28:8e:
0b:cd:8f:f5:9b:21:63:22:89:a2:27:e4:22:51:42:e3:bf:a3:
49:e2:dd:a4:af:f5:55:e9:b9:38:f3:89:67:27:1b:20:22:3d:
c5:d5:8a:99:92:67:cb:35:ba:3a:63:90:60:c9:34:e2:da:fc:
cd:79:37:a4:42:9b:18:82:77:ae:62:bb:92:fa:2b:65:51:c3:
3c:7f:f9:f1:ec:a9:9a:ec:83:78:1d:dd:c1:19:6f:c4:85:b6:
b4:3a:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:39 2026 by rpki-client