
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier: +jCpHWoALiaF2JsFBGc4SAq6DRPvG5WTMhTz2Q+4im8=
Subject key identifier: BB:7F:86:15:BC:74:A4:E5:EA:E7:41:3D:74:C5:80:04:FE:1F:F3:A0
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial: 0BDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number: 0BB6
Signing time: Sat 04 Apr 2026 18:51:41 +0000
Manifest this update: Sat 04 Apr 2026 18:51:41 +0000
Manifest next update: Sat 11 Apr 2026 18:51:41 +0000
Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 7jZ8yHBq1sLkN/JQvUJ6MbAxbfDLgZpYhymOpgqMIfA=)
2: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: guSkTmy7FKfWkl3HEYDSdBxGCgfTJVTz0fMgkLGtNzk=)
3: DE437646F8A911EB98242219C4F9AE02.roa (hash: MmgfA3qYqHflBFSU79GcWhbhyjAjfee+uU1hKepl8Bg=)
4: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: SjDMXf0lNYFwt4BBzRLFS/hu859BDfy4g/4gUtj/7is=)
5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: lFd0f/s6tWl8ssWZElmWFK2IFMinINueCRCwnr4LqZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Validity
Not Before: Apr 4 18:51:41 2026 GMT
Not After : Apr 11 18:51:41 2026 GMT
Subject: CN=69d15dbd-9ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:33:53:e6:a6:5a:94:d0:cc:c5:18:44:e2:
d0:68:3b:e5:28:97:b0:4f:2d:0b:fd:67:cd:d5:4b:
2a:f5:7b:c3:01:c5:61:62:f4:04:5b:81:2d:61:5c:
36:32:4a:8b:3e:a8:af:22:45:58:94:13:51:90:d9:
86:e8:3b:16:39:b1:37:3f:7d:c9:f1:e5:de:63:af:
01:88:e3:74:6f:e3:81:15:27:4b:f8:03:03:67:a7:
17:be:8b:bf:f4:aa:87:8b:34:e8:e8:15:41:10:df:
81:78:5e:4e:e6:7c:cd:57:8d:79:d0:12:55:01:91:
1e:62:07:6d:cc:ef:4e:36:0b:5b:a7:19:bf:ec:f4:
82:da:4f:1b:74:89:33:e2:59:99:10:55:d8:fe:7f:
9f:11:fd:c6:d5:d0:f2:cf:88:23:12:1e:5f:ec:ca:
45:e4:f6:3f:30:15:ad:12:55:22:2b:ac:5c:66:a0:
19:3d:f7:2b:47:70:82:cf:2c:f8:2f:a3:d4:91:6e:
21:be:c6:d4:02:7d:3e:a9:2e:2e:81:ea:f6:a8:ab:
ad:47:7a:e2:9c:43:86:fa:18:f2:b2:db:68:a7:c8:
71:84:8a:2c:cc:cd:be:f9:a6:6a:b4:da:fe:e5:65:
a1:0b:e8:2e:79:db:9b:94:bd:42:ff:91:cd:eb:c8:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:86:15:BC:74:A4:E5:EA:E7:41:3D:74:C5:80:04:FE:1F:F3:A0
X509v3 Authority Key Identifier:
keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:78:b6:7f:2c:cb:41:b4:51:14:74:bf:35:25:28:6c:c5:f6:
b5:23:98:fd:33:7c:fa:66:3d:fc:67:6e:e3:33:17:50:05:8e:
92:0a:d1:77:d5:61:f1:99:6d:17:ac:61:50:f5:e6:ce:e5:4d:
b2:ef:00:2c:9c:da:c3:44:2c:9e:51:0b:16:90:0c:92:99:e6:
ea:52:1e:91:ec:8f:33:c1:b2:d1:22:79:9a:9a:f6:bd:0a:82:
bc:eb:14:76:e2:16:ec:aa:34:a4:c1:13:02:b9:a1:1a:16:36:
14:ef:82:91:97:62:63:17:a9:30:3e:ad:93:d7:71:ab:b7:85:
41:48:88:c8:ac:b0:ed:43:f1:ed:da:90:26:6f:ab:06:7b:25:
f9:0d:2e:a1:98:11:dd:18:a1:f3:20:8c:55:af:d6:14:eb:96:
1c:44:2f:f7:0a:4f:70:a6:6f:25:05:3e:db:fc:b4:aa:ba:43:
69:6b:eb:9d:09:95:cc:4b:ff:28:dd:12:b0:05:3b:fe:9f:a2:
36:f4:90:dc:17:36:f7:8d:37:ef:97:da:24:65:fc:3f:e8:bb:
6a:cf:b6:75:a6:40:82:55:de:45:05:cb:ad:06:c8:ea:95:b4:
2f:ec:cd:b3:50:ee:2f:4b:a8:3f:42:9d:55:ee:e2:30:a5:31:
f2:37:ff:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4
OEQwMTQwRkUwHhcNMjYwNDA0MTg1MTQxWhcNMjYwNDExMTg1MTQxWjAYMRYwFAYD
VQQDEw02OWQxNWRiZC05YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjcUzU+amWpTQzMUYROLQaDvlKJewTy0L/WfN1Usq9XvDAcVhYvQEW4EtYVw2
MkqLPqivIkVYlBNRkNmG6DsWObE3P33J8eXeY68BiON0b+OBFSdL+AMDZ6cXvou/
9KqHizTo6BVBEN+BeF5O5nzNV4150BJVAZEeYgdtzO9ONgtbpxm/7PSC2k8bdIkz
4lmZEFXY/n+fEf3G1dDyz4gjEh5f7MpF5PY/MBWtElUiK6xcZqAZPfcrR3CCzyz4
L6PUkW4hvsbUAn0+qS4uger2qKutR3rinEOG+hjysttop8hxhIoszM2++aZqtNr+
5WWhC+guedublL1C/5HN68jzNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLt/hhW8
dKTl6udBPXTFgAT+H/OgMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy
RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1
NThSVnZkczFGWmFJMEJRUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuXi2fyzLQbRRFHS/NSUobMX2tSOY/TN8+mY9/Gdu4zMXUAWOkgrRd9Vh8Zlt
F6xhUPXmzuVNsu8ALJzaw0QsnlELFpAMkpnm6lIekeyPM8Gy0SJ5mpr2vQqCvOsU
duIW7Ko0pMETArmhGhY2FO+CkZdiYxepMD6tk9dxq7eFQUiIyKyw7UPx7dqQJm+r
Bnsl+Q0uoZgR3Rih8yCMVa/WFOuWHEQv9wpPcKZvJQU+2/y0qrpDaWvrnQmVzEv/
KN0SsAU7/p+iNvSQ3Bc2940375faJGX8P+i7as+2daZAglXeRQXLrQbI6pW0L+zN
s1DuL0uoP0KdVe7iMKUx8jf/+w==
-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:02 2026 by rpki-client