
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json)
Hash identifier: cPmabVR+cRl6sFN3sdigbXCzDZrTOsT8jJyXweVfFAw=
Subject key identifier: A5:7F:37:98:75:76:3C:30:3A:19:B8:4B:25:68:3D:1E:ED:46:39:40
Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Certificate serial: 0680
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
Manifest number: 067A
Signing time: Sat 04 Apr 2026 22:17:52 +0000
Manifest this update: Sat 04 Apr 2026 22:17:51 +0000
Manifest next update: Sat 11 Apr 2026 22:17:51 +0000
Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: 0vsWS8D64v63S4DzzbN/atv1ZIVqLkZTF1H1+tXue2s=)
2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: AhupnDtMSD4TtHr+//XndsYvjztQztws6hAAHBlZ7Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1664 (0x680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Validity
Not Before: Apr 4 22:17:51 2026 GMT
Not After : Apr 11 22:17:51 2026 GMT
Subject: CN=69d18e0f-f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:9c:fd:af:0d:9e:70:9a:54:1e:c2:c4:0b:
d3:e1:36:58:52:47:82:6a:a9:f9:e8:80:5c:17:49:
42:aa:21:73:66:10:19:f5:a8:44:81:14:ec:56:6d:
4c:17:3f:08:dd:b5:59:55:e6:b4:65:40:db:10:d5:
ff:14:a0:5b:26:9b:a9:92:1e:04:9b:47:fc:75:22:
5d:8d:3a:98:05:9c:51:c2:60:0a:9d:5a:41:bd:ff:
dd:8e:bb:57:8d:06:27:cd:31:91:b3:2c:ba:0a:cb:
ec:e2:69:07:ef:87:a8:ff:24:6a:55:1a:8a:61:b3:
f5:dc:b7:63:8c:76:21:f5:02:35:c6:71:76:00:ea:
e3:d4:38:77:4b:96:25:88:1b:37:b3:3d:98:82:c8:
ab:56:36:25:cf:cb:94:28:68:33:30:b5:ff:f8:02:
59:0a:fe:39:32:88:a0:e2:17:a8:57:ec:80:b8:b3:
46:34:98:1a:31:08:de:71:1d:cf:f2:4d:73:61:42:
e9:65:74:a3:e7:50:94:64:76:68:8f:dd:34:2f:9c:
32:da:be:8b:41:05:53:3a:9d:3f:07:43:30:4f:92:
09:68:ef:c3:a5:c8:bf:51:7d:ab:bb:88:48:df:73:
fc:04:6d:36:c1:08:15:f4:db:8e:4a:52:a9:64:40:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:37:98:75:76:3C:30:3A:19:B8:4B:25:68:3D:1E:ED:46:39:40
X509v3 Authority Key Identifier:
keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:3e:75:06:47:51:1a:70:73:4e:39:dd:d3:d0:33:f6:35:c5:
b4:e0:66:a1:37:97:8b:f0:a1:48:b3:26:b1:dd:47:a2:d7:f4:
f1:ae:85:17:f4:74:dd:90:d8:70:b9:28:43:55:e6:fd:ff:7d:
17:7f:14:87:e0:2f:ac:72:65:cc:af:b2:42:ab:00:6f:3a:04:
1d:2a:bb:aa:23:95:9b:ce:a1:30:16:f9:20:ec:39:88:81:a9:
e7:cc:7f:c4:6d:d2:e0:7a:0a:db:39:2c:8e:58:45:49:5d:e3:
59:2e:d4:12:a1:a5:cd:11:12:e1:ec:38:39:6f:a4:33:2e:0e:
db:80:96:44:c4:8a:e9:21:0f:01:7f:e9:6a:1b:14:d1:33:00:
16:5c:7a:a2:36:7e:a6:2a:06:29:5b:4a:16:b8:b0:5b:62:a4:
64:3c:3a:a8:91:c8:8c:b9:17:af:c5:6a:af:84:79:89:46:86:
5a:cc:2d:b3:52:d3:0a:3a:ba:ca:94:e5:0a:33:f5:34:f1:cc:
34:25:4d:c7:42:bb:04:e7:6c:27:5d:0b:6f:52:1f:bf:c3:20:
e6:57:61:3a:f5:0b:ee:66:f6:1f:42:00:ed:38:66:f5:bf:79:
af:6f:1b:1f:ee:4a:51:44:60:d2:01:eb:72:6a:6f:8b:6c:f5:
e3:21:fd:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5
MzM2QzgyQjgwHhcNMjYwNDA0MjIxNzUxWhcNMjYwNDExMjIxNzUxWjAYMRYwFAYD
VQQDEw02OWQxOGUwZi1mNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzpWc/a8NnnCaVB7CxAvT4TZYUkeCaqn56IBcF0lCqiFzZhAZ9ahEgRTsVm1M
Fz8I3bVZVea0ZUDbENX/FKBbJpupkh4Em0f8dSJdjTqYBZxRwmAKnVpBvf/djrtX
jQYnzTGRsyy6Csvs4mkH74eo/yRqVRqKYbP13LdjjHYh9QI1xnF2AOrj1Dh3S5Yl
iBs3sz2YgsirVjYlz8uUKGgzMLX/+AJZCv45Moig4heoV+yAuLNGNJgaMQjecR3P
8k1zYULpZXSj51CUZHZoj900L5wy2r6LQQVTOp0/B0MwT5IJaO/Dpci/UX2ru4hI
33P8BG02wQgV9NuOSlKpZEBdTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKV/N5h1
djwwOhm4SyVoPR7tRjlAMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3
QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu
cWQwV0Q5WUppWmlUTnNncmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANT51BkdRGnBzTjnd09Az9jXFtOBmoTeXi/ChSLMmsd1Hotf08a6FF/R03ZDY
cLkoQ1Xm/f99F38Uh+AvrHJlzK+yQqsAbzoEHSq7qiOVm86hMBb5IOw5iIGp58x/
xG3S4HoK2zksjlhFSV3jWS7UEqGlzRES4ew4OW+kMy4O24CWRMSK6SEPAX/pahsU
0TMAFlx6ojZ+pioGKVtKFriwW2KkZDw6qJHIjLkXr8Vqr4R5iUaGWswts1LTCjq6
ypTlCjP1NPHMNCVNx0K7BOdsJ10Lb1Ifv8Mg5ldhOvUL7mb2H0IA7Thm9b95r28b
H+5KUURg0gHrcmpvi2z14yH9LA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:38 2026 by rpki-client