
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: dAjdc4S3nx6JO/gNlSLwj5OREzpTzQNM9l0r0WMnCfg=
Subject key identifier: 0D:84:0D:3F:F5:0F:3B:E3:BF:39:30:A3:13:64:66:18:DD:CB:69:B3
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 033F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 032A
Signing time: Sun 05 Apr 2026 00:52:44 +0000
Manifest this update: Sun 05 Apr 2026 00:52:43 +0000
Manifest next update: Sun 12 Apr 2026 00:52:43 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: uJ4L+/Ett8GsUg0hzfxOkkT+XOJPtkqCipd23ElrLsU=)
2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: 26lbZitWRiEfeoyruNKhZHO3TiLuflGgqtfn2ftoTxQ=)
3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=)
4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: Wcc8ygmv+LZchyHQ4KBBITZJAV+Up2qfVQ07bd9vNtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Apr 5 00:52:43 2026 GMT
Not After : Apr 12 00:52:43 2026 GMT
Subject: CN=69d1b25c-d418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:d4:bf:35:86:91:0f:5e:65:2e:e6:a0:e8:
6c:6a:99:8a:1f:6b:1c:f1:82:f0:ec:f0:79:a2:99:
d0:72:a1:10:16:ab:20:67:f8:e4:70:c9:71:d6:49:
6e:a3:b3:e4:4b:e1:c5:02:0a:87:2a:00:36:34:f0:
cc:60:76:f4:3b:b2:cc:3d:e0:f5:43:1b:d0:a2:79:
97:85:34:ca:1d:21:e0:ec:7c:8e:ce:e2:9d:98:85:
c7:4e:04:73:4b:ec:41:72:40:9c:7b:0f:2c:bd:dd:
94:e8:d0:19:38:87:5a:6b:51:12:ee:3b:ce:40:74:
3b:29:2e:e2:b7:4b:3b:16:a8:6f:81:f7:f0:17:df:
77:aa:a5:6f:28:12:bb:3b:21:dd:80:0e:7e:93:b3:
b6:07:53:9b:f9:da:83:77:7c:ef:6a:5f:29:5c:be:
6d:94:94:ef:75:b4:fd:47:28:e6:70:8a:be:6d:a3:
76:3e:3c:f5:d8:65:97:37:68:85:61:2b:b7:73:42:
01:6b:24:7b:c2:49:81:fb:8f:cf:21:dc:5b:0b:0a:
d7:a4:cd:3c:de:d7:ad:55:ad:f1:24:13:d2:ee:3b:
e6:64:8d:38:e3:78:75:2a:ce:10:34:a3:4b:cf:a6:
fb:b6:3e:30:23:c2:59:17:41:2d:ac:e9:05:7d:38:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:0D:3F:F5:0F:3B:E3:BF:39:30:A3:13:64:66:18:DD:CB:69:B3
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c2:0c:d7:8c:d0:b2:df:ab:70:9d:f5:95:6b:39:1b:24:0b:
e0:e7:c2:ca:8c:b8:31:0e:7a:73:c9:e1:45:d7:de:a2:56:af:
6b:3b:b1:66:51:61:c9:41:3e:b7:4f:da:38:6d:1b:d0:3e:6e:
10:36:59:6d:53:86:23:bd:d3:8f:28:95:1b:b5:a2:98:9b:88:
cd:fe:d3:fe:22:ef:2c:6c:e2:7f:91:22:bd:c8:e3:e9:6e:94:
25:01:44:86:1b:76:a3:d7:73:33:81:04:7d:33:0b:e5:46:f8:
8b:51:0d:cf:6a:d6:f8:62:f9:35:69:ec:75:67:1e:c5:d5:39:
4b:84:12:b7:0b:f5:84:56:f8:ba:a9:2c:ce:c9:78:d4:b7:a2:
b9:e9:96:78:d0:44:f8:46:28:ff:12:40:b5:0e:10:2f:12:95:
e0:2e:1c:c8:20:c1:ec:56:f1:de:fd:16:d3:81:59:08:c4:c6:
fb:0c:c2:ee:62:85:99:39:91:e9:1e:c3:26:d0:34:bd:66:54:
e5:cc:d0:06:20:6c:30:49:92:11:a9:6d:52:fa:42:54:f4:75:
a6:09:55:e0:5a:f5:23:88:f6:a7:44:5c:bd:3f:97:42:57:0d:
b4:d5:b2:de:9b:ef:48:28:e7:f6:b9:f9:6f:a7:84:02:4c:17:
e8:40:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:20 2026 by rpki-client