
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier: Z9sjTutJ9vM3vvpg0qQYZrTL/ugndQO2WxN9ePedois=
Subject key identifier: 6B:E1:2B:17:56:03:4D:CB:DE:8B:BB:1D:76:53:44:D5:D4:D2:DD:54
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial: 3567
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number: 3544
Signing time: Sat 04 Apr 2026 14:28:14 +0000
Manifest this update: Sat 04 Apr 2026 14:28:13 +0000
Manifest next update: Sat 11 Apr 2026 14:28:13 +0000
Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: 7ixnvSgXUXolOSRVkjgOYnLHeJPLr34gP/lJ8fnL6ck=)
2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: TVT+VrCwN+2S5FW1bm5sxd84i0yBJ4gQw0ij0DCJg48=)
3: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: Bvg0itv7DhSkjmjfsA+zszmnSYp5+LIVofcg3GzlFNs=)
4: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: fyCoCiiO7y+EBJPoJkxpBcTZgIDn8vB5c7S2G4eTbPo=)
5: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: pQqJ0LAppl5pw39LUl73K9sswzlGslgb4MnLz8TkjEE=)
6: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: Uqjl/yz6bKUW7WJIpt5tUN6JC1ETFbt55O9WS9w0YmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13671 (0x3567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Validity
Not Before: Apr 4 14:28:13 2026 GMT
Not After : Apr 11 14:28:13 2026 GMT
Subject: CN=69d11ffe-f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:32:5f:c4:2f:74:45:86:3f:b6:d5:69:96:
9b:0b:a5:34:5c:9c:e6:6d:57:45:e7:92:e0:78:4c:
96:98:af:d8:1b:eb:d2:e8:45:a6:1f:33:6e:6a:2a:
d0:98:a4:99:be:14:e6:a7:9f:e7:df:5f:99:f1:5a:
83:2d:ec:08:b9:e0:94:a0:2c:91:43:61:f2:42:3f:
5f:f7:46:91:ee:b4:f3:c7:a2:3a:2a:e0:75:9f:d7:
2f:ac:5a:8f:a7:88:09:d0:b0:62:98:b2:c4:a9:e9:
14:92:f9:0a:79:a3:c6:f5:98:b9:1a:01:b9:c8:8c:
f9:3a:ce:57:69:a7:9e:19:d8:b0:1e:4e:bd:9e:b6:
56:e2:3f:ce:4e:aa:9a:3d:f3:47:16:5d:87:4b:b4:
a0:c7:08:85:12:db:f6:95:21:e9:a6:6d:35:ba:15:
22:ab:4e:54:c0:f6:91:2c:b4:f5:2d:74:70:f1:5e:
d0:2f:f6:fe:7c:50:31:15:aa:e0:48:83:26:17:fb:
6d:bf:b0:09:4a:77:90:65:97:6b:63:4b:c9:04:4a:
a3:33:26:7a:19:e5:2c:6c:48:1e:3b:6f:b3:c3:8c:
52:5d:9c:35:41:62:7d:46:56:cb:77:48:7a:7e:df:
da:2c:e0:30:e4:8d:6c:69:b2:71:d6:e0:4a:9f:5a:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E1:2B:17:56:03:4D:CB:DE:8B:BB:1D:76:53:44:D5:D4:D2:DD:54
X509v3 Authority Key Identifier:
keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:27:75:1a:52:cf:44:ac:86:60:38:0e:63:e0:8b:a0:62:
79:94:ca:40:c2:bb:6d:65:32:43:6b:0f:0b:e3:12:1c:c9:fe:
0e:0a:c5:9b:32:29:a4:24:2e:00:2d:b3:5f:b8:b9:7c:7c:06:
ee:ec:b5:c7:75:4f:6c:21:fe:b2:c3:49:88:ec:61:35:ee:61:
4e:61:69:03:ee:f5:b5:97:b2:45:83:c5:8b:48:ee:1f:fc:5c:
0e:51:82:36:57:c3:83:18:ae:0c:6c:f0:4c:c7:62:01:7a:03:
cd:30:2f:b6:65:6d:a6:06:bc:30:77:3c:f7:02:d4:a1:6b:a1:
fb:38:f8:d1:15:a8:ae:05:6a:e2:23:ad:ab:af:de:e4:36:f2:
55:5f:40:c1:ad:f2:62:14:87:07:f9:bc:a4:16:08:ab:c4:d8:
9c:de:6a:f4:0e:62:3b:f3:e7:f9:90:87:2a:2f:06:88:94:38:
26:23:46:88:0a:9e:34:db:90:35:d9:59:7e:7e:d4:2b:77:10:
6d:7b:c9:96:0f:74:67:87:cb:93:56:ca:00:8f:7f:4d:c3:8a:
74:eb:19:0e:5b:6f:bc:29:0c:aa:ff:21:d5:bb:3f:78:07:61:
e1:6c:c4:31:ee:ad:93:09:92:b3:1b:9b:f7:ff:5c:c0:1f:5f:
bc:fb:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:23 2026 by rpki-client