
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: i61tabccH8UEAzNEPo50zXxYv4Cw222nhwJprRnhNtM=
Subject key identifier: 28:5C:0A:9F:65:86:0E:1C:3E:AB:A0:1A:69:3B:2A:D1:2D:62:E7:7A
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 0352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 033D
Signing time: Wed 13 May 2026 01:11:06 +0000
Manifest this update: Wed 13 May 2026 01:11:06 +0000
Manifest next update: Wed 20 May 2026 01:11:06 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: yFBjIdB7d4jqivDLLjstMQLrRIEkIpJhXAbWhDropXI=)
2: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: Wcc8ygmv+LZchyHQ4KBBITZJAV+Up2qfVQ07bd9vNtw=)
3: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: 26lbZitWRiEfeoyruNKhZHO3TiLuflGgqtfn2ftoTxQ=)
4: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: May 13 01:11:06 2026 GMT
Not After : May 20 01:11:06 2026 GMT
Subject: CN=6a03cfaa-a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:06:27:a7:6b:ef:24:3f:7a:12:3f:08:d1:
f8:ef:92:b4:e7:4d:0b:ae:78:1b:6b:73:d7:43:8e:
af:d0:5f:9c:51:8e:36:37:92:1b:23:17:bf:d0:26:
ea:d4:e6:38:5d:21:df:77:b5:e7:e8:7a:04:1a:95:
a9:17:36:6a:5e:62:e5:4d:76:58:58:33:7f:92:43:
7c:b1:f8:d6:dc:38:f3:6e:20:61:c0:d1:25:1d:d0:
66:6e:72:d7:7e:af:e2:c7:22:f4:39:69:6f:23:95:
0f:b9:18:eb:46:c2:bd:81:10:f0:47:6c:6a:fd:53:
3b:3c:50:d0:96:ae:5c:cf:e2:ef:1e:d7:e1:b4:cd:
43:21:4d:b2:dd:2e:c0:ad:fc:c2:8a:34:52:8d:69:
2d:ea:09:bb:ee:00:b0:bb:21:82:da:a1:f4:1e:90:
b1:db:33:a9:b9:69:79:4c:52:7d:cb:bf:0d:f5:6f:
26:a8:f7:04:f0:c5:c4:f5:f2:63:aa:5a:b7:0a:01:
f2:74:1c:df:18:a9:e7:0e:76:f7:f5:f2:f9:36:c3:
e2:88:4f:5b:93:80:37:6c:7f:5d:ec:6d:2a:b1:57:
6b:70:e9:3c:75:6f:be:20:ec:34:e8:ed:3c:21:4c:
c2:dc:8b:cb:c3:85:31:b1:27:96:b0:a9:2c:e3:4e:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5C:0A:9F:65:86:0E:1C:3E:AB:A0:1A:69:3B:2A:D1:2D:62:E7:7A
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:be:56:d6:ed:d6:76:49:1f:7c:b9:8b:b1:4a:0d:a7:ef:
54:18:8a:6d:18:90:0d:8d:65:44:a7:4f:c3:c6:08:77:3c:a3:
c3:0f:ad:74:b4:88:56:f9:0d:bc:52:ac:e9:f7:cc:6c:81:ba:
a7:f4:d6:62:91:2d:70:9c:ad:4c:29:6e:04:8d:7b:a6:41:e5:
9c:0f:18:46:5a:95:56:ec:0a:6a:a8:59:e2:63:67:d0:45:84:
4b:59:cd:86:be:2f:2c:60:a2:bd:4e:ed:de:e4:17:56:90:03:
eb:c6:ce:b8:7c:08:14:6c:55:a3:29:0d:b3:bf:70:83:01:c2:
cb:03:72:c3:04:51:e1:13:4b:be:ee:d2:fc:9d:8e:f9:7f:4c:
2a:ce:10:7b:78:f8:8f:c6:a0:e4:15:73:26:79:8f:0b:14:bb:
b3:6e:58:77:6f:64:1a:5d:68:2a:28:4c:f6:39:eb:b1:b7:f3:
6d:d7:ee:45:7e:e3:00:5f:26:d8:26:12:bb:3e:f1:fc:4b:76:
43:48:a9:0a:6a:d9:68:b1:d7:cf:e4:cf:ef:ff:09:9a:60:d1:
aa:e4:a8:ef:89:b4:b8:e8:b4:4e:70:e9:2d:52:b0:0f:b3:2f:
a0:98:de:ed:a6:8d:c8:b4:44:fe:8b:e4:ab:73:a8:d5:80:4d:
d7:98:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:40 2026 by rpki-client