
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier: iZmkFeTxXmXWc8ZF+GYn8EDXQYkSB/YLiMchWgWCm+Q=
Subject key identifier: 94:08:D1:DA:D7:BA:8A:A5:13:4A:CC:D5:1C:98:C3:7B:B5:41:A2:E1
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial: 0C42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number: 0C16
Signing time: Tue 06 Oct 2026 19:00:13 +0000
Manifest this update: Tue 06 Oct 2026 19:00:12 +0000
Manifest next update: Tue 13 Oct 2026 19:00:12 +0000
Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: ymbP+p4JqQ7B3EROvxBCJZDCo1nux3uCf7yI5duvSbU=)
2: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: 84SKbcYJYQpkdPhgKDfKJZGQMSbK1foRAoBLyJS3rw8=)
3: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: zr9WgE2KmAHV01j5bTwejKCZJZ/f953lXlW3VV/8nH0=)
4: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: RFpssbMsMYAgstv88gTpUDNVcPFKgB5u5+7fNcGeiow=)
5: DE437646F8A911EB98242219C4F9AE02.roa (hash: C2BWvQ+C/+Sn9VLF0lBp78gdjNkGbixDoXI6j4xdzH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Validity
Not Before: Oct 6 19:00:12 2026 GMT
Not After : Oct 13 19:00:12 2026 GMT
Subject: CN=6ac5453c-7f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:fc:85:53:7c:b6:cd:01:42:64:e2:5b:5e:
4a:6a:a1:41:b9:2c:59:b1:8d:1f:06:43:5f:7e:c4:
7e:22:52:88:cd:57:49:59:fa:13:a6:8c:ef:30:16:
06:5d:63:69:c6:11:ca:a8:2a:f0:c2:fe:ee:28:5b:
77:fa:cc:77:4a:82:49:44:1f:42:20:2b:e3:12:c9:
d5:5c:44:90:18:64:90:2f:58:73:ad:6f:1f:38:79:
00:99:c6:48:a4:be:d9:d2:1f:65:c5:d0:f6:4c:7d:
25:54:28:40:64:0c:d2:68:32:13:86:0d:a9:fb:56:
96:20:dc:6f:f9:d7:f5:e8:fd:f9:b8:bc:f5:76:59:
21:c4:4a:c2:f5:c2:48:63:0a:59:87:1c:87:79:e7:
9a:2f:1f:aa:4c:99:02:77:0d:49:a3:7a:c5:b8:d2:
a7:69:3c:8c:bf:fd:2b:5d:a7:e2:95:d5:ec:c9:93:
75:74:10:c5:53:73:bb:ae:c1:a5:97:a7:72:ff:da:
57:9a:dd:4b:b4:08:41:e5:a9:df:65:98:fb:69:37:
38:92:65:d6:17:e7:58:99:fc:4b:7a:8a:10:e4:af:
cb:ef:71:25:69:4d:0c:54:2c:98:5a:39:9b:fe:ec:
05:6f:a9:cf:31:e3:56:e1:bd:5b:ae:3b:2d:c1:21:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:D1:DA:D7:BA:8A:A5:13:4A:CC:D5:1C:98:C3:7B:B5:41:A2:E1
X509v3 Authority Key Identifier:
keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:5e:30:82:27:1c:89:43:fc:49:53:3a:cc:a9:2f:29:67:
5d:ae:cd:e6:d1:a9:08:37:e5:d0:64:68:e2:2d:ae:07:a9:d9:
c9:21:f0:3e:bb:cd:81:a5:bd:cc:d4:02:1f:25:e8:be:e9:d8:
ed:2b:35:de:4f:ca:b5:d1:65:5b:7f:ae:02:aa:fe:16:43:ca:
cc:1e:68:ad:ea:fb:18:2d:73:8d:4c:39:90:8c:7e:85:4b:d8:
1f:13:9f:b3:d7:d3:97:d3:09:59:1e:d9:95:d8:10:ec:cc:4c:
51:b2:57:27:07:eb:3f:2b:a9:ea:a9:49:aa:46:f2:90:0b:5e:
f9:1d:c9:b5:96:04:e1:91:de:20:c4:48:8e:78:68:e9:cd:20:
51:9b:ae:43:2c:fe:52:75:70:be:df:83:52:71:82:73:13:99:
39:34:d2:18:6c:25:c9:8d:cf:47:d3:c8:db:57:9c:3f:74:ca:
37:20:06:95:ab:7b:80:ff:30:63:83:d3:d5:59:bb:f2:82:38:
17:c3:90:a7:73:c2:b5:d5:3a:bd:cd:a6:59:ed:18:7b:57:21:
97:fd:b4:65:a2:e6:c9:8e:61:42:ab:47:05:1e:de:f2:df:4d:
8b:17:4d:a5:3a:11:f1:35:3d:ec:3d:a5:90:5c:15:de:f7:da:
5d:bb:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:30:10 2026 by rpki-client