
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: 2f9SMyacWCYtuHM5C+Io9dRYMJc6kod1wcm/b/boqVs=
Subject key identifier: 68:B6:54:5B:AD:7D:4F:A5:61:8F:9A:FB:2F:16:DA:2F:7C:CD:D8:D7
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 0376
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 0361
Signing time: Thu 23 Jul 2026 01:51:20 +0000
Manifest this update: Thu 23 Jul 2026 01:51:19 +0000
Manifest next update: Thu 30 Jul 2026 01:51:19 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: qX5OX9NNbD/DQJik224W15QVKMqn3EmOkBb5G3ej57U=)
2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: 26lbZitWRiEfeoyruNKhZHO3TiLuflGgqtfn2ftoTxQ=)
3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=)
4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: Wcc8ygmv+LZchyHQ4KBBITZJAV+Up2qfVQ07bd9vNtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Jul 23 01:51:19 2026 GMT
Not After : Jul 30 01:51:19 2026 GMT
Subject: CN=6a617398-2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:a1:5b:81:83:14:f1:55:34:ab:9c:da:cf:
73:25:0d:ec:75:c5:37:fe:f1:b2:a0:11:c3:7d:a0:
58:16:6c:18:63:32:49:d0:12:4a:82:f9:f6:eb:63:
64:6e:ad:9b:33:54:ae:1c:03:bb:71:13:b0:3d:c9:
f7:21:37:d0:ad:b9:4c:e4:38:22:be:cc:fb:f3:67:
27:67:0d:cf:52:6c:aa:19:35:8c:ab:aa:b9:a5:8a:
6c:ad:59:b7:98:0b:a7:8a:bd:fa:8a:da:d2:14:4e:
22:90:14:78:b9:78:9f:4c:f9:36:80:c8:b0:a4:ff:
ae:eb:fe:f3:0d:bb:4c:33:90:2b:84:6b:c2:5c:dd:
0c:e9:21:a4:24:ee:45:c6:48:6b:26:dc:bf:9d:38:
59:c8:1f:13:d4:2e:3d:ae:59:46:38:be:c7:06:36:
70:94:6b:db:2d:8b:80:6a:b7:24:9a:c0:ed:3b:87:
c2:97:97:a2:ef:2b:0d:b2:d0:9e:9e:72:b4:91:4a:
c2:2e:66:97:bb:d7:ce:06:33:a2:1d:a1:77:ea:14:
7c:d1:5b:c8:1b:d6:1a:ac:ac:ba:b2:18:90:37:16:
8b:78:89:6a:54:3f:77:2c:25:35:f4:8c:6c:1c:ee:
5a:c9:59:85:b0:40:41:e0:b4:64:74:5c:9c:9b:a8:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B6:54:5B:AD:7D:4F:A5:61:8F:9A:FB:2F:16:DA:2F:7C:CD:D8:D7
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:77:60:75:72:6b:9f:e7:4e:55:ff:02:fc:97:06:92:1b:bd:
58:b1:47:32:c1:41:76:a0:d6:02:1e:33:45:2e:ed:9a:aa:c4:
26:cf:40:45:c9:8d:d6:6e:44:d2:2f:d4:99:ac:04:c8:c9:2c:
b6:18:77:d2:b8:88:b3:93:61:e7:ad:6f:5a:14:09:ea:d3:f2:
cd:29:37:c7:71:67:de:8c:c3:40:de:3d:c6:f8:dd:84:86:df:
26:52:4c:83:47:d8:5e:fb:f7:0c:cd:e8:ec:db:9d:92:69:a9:
1d:70:f5:33:ba:37:9b:01:16:f6:99:f5:65:89:e7:9a:a3:eb:
80:94:79:06:f2:e4:de:f6:87:83:2c:07:92:ec:45:cd:a2:74:
0e:58:a7:92:a5:b8:a0:60:4d:b8:e5:87:29:b6:1c:4a:07:00:
70:46:b7:89:c2:e3:b3:77:3e:62:03:d6:9e:4b:6c:3f:86:63:
fb:ee:a9:cc:c0:9c:82:9f:73:6a:69:57:b1:b9:aa:f8:f3:e7:
11:4a:05:0f:9d:c0:66:a9:59:65:0b:46:5f:94:11:e3:64:9f:
e9:a6:4a:0e:8a:28:a5:16:4c:dc:e2:45:a2:fc:70:77:a2:35:
a6:a9:e2:75:f9:ce:b9:4c:a8:bd:43:2f:72:ac:64:42:3b:42:
b1:f5:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:58 2026 by rpki-client