
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier: aS1Mcz0y25R7j4xsqrBn1v/sjsRz6gDOMW3e0/kI0/8=
Subject key identifier: 2B:4C:11:79:64:5D:70:02:18:36:9B:43:CA:7B:18:FA:27:16:85:4E
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial: 3555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number: 3532
Signing time: Sun 01 Mar 2026 23:32:34 +0000
Manifest this update: Sun 01 Mar 2026 23:32:30 +0000
Manifest next update: Sun 08 Mar 2026 23:32:30 +0000
Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: 2JDjiRRha6HKCKxr8oOMrYMTaAmN2TBivu/C5CNooYQ=)
2: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: Bvg0itv7DhSkjmjfsA+zszmnSYp5+LIVofcg3GzlFNs=)
3: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: Uqjl/yz6bKUW7WJIpt5tUN6JC1ETFbt55O9WS9w0YmU=)
4: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: TVT+VrCwN+2S5FW1bm5sxd84i0yBJ4gQw0ij0DCJg48=)
5: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: fyCoCiiO7y+EBJPoJkxpBcTZgIDn8vB5c7S2G4eTbPo=)
6: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: pQqJ0LAppl5pw39LUl73K9sswzlGslgb4MnLz8TkjEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13653 (0x3555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Validity
Not Before: Mar 1 23:32:30 2026 GMT
Not After : Mar 8 23:32:30 2026 GMT
Subject: CN=69a4cc91-eb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:ea:a3:e7:ed:e3:b9:b8:b7:db:53:a0:24:
1c:77:bd:34:28:bf:ea:ee:59:4b:69:78:e1:48:00:
a1:d4:a9:bd:ee:8f:bd:d4:67:10:18:bf:da:76:80:
c3:0a:56:fb:9d:0c:0d:c9:ce:35:43:5c:b6:e6:32:
0a:e8:fe:8e:db:c6:30:91:56:a7:05:3b:a8:6b:55:
46:25:99:82:ec:c7:57:17:b0:2c:f5:ec:46:2c:b4:
d4:2d:62:04:0d:12:7e:d7:27:41:9a:e0:45:f5:39:
ef:51:5a:51:2c:cb:94:0c:a8:0c:4b:d8:5a:4f:c5:
a6:8c:28:96:c4:fa:66:e9:51:c4:66:4f:83:61:da:
4e:f1:87:bd:c4:22:5f:df:d8:51:c3:df:83:f5:f6:
1d:7a:38:6c:48:65:52:f6:f6:1d:d0:d1:89:c6:2d:
78:34:d4:95:58:ee:d6:69:e5:dc:27:6f:8c:29:16:
95:50:00:ba:8c:f9:74:d0:05:ab:61:5a:c4:86:9e:
cf:f4:a8:f9:38:1a:2b:c8:a2:03:25:c9:3d:4e:c3:
91:be:a1:16:dc:45:8d:30:18:58:bc:c2:16:8c:06:
17:a3:67:a6:52:fb:f6:89:61:97:01:bf:77:f4:ba:
9f:38:20:d8:8e:26:a3:b2:e3:19:45:c6:88:97:6b:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:11:79:64:5D:70:02:18:36:9B:43:CA:7B:18:FA:27:16:85:4E
X509v3 Authority Key Identifier:
keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:65:32:cc:26:5c:01:14:08:81:64:4c:3e:cc:59:4b:6a:f3:
f1:37:7e:2a:a0:30:b6:e6:17:00:cc:94:cb:d8:c0:6a:b1:21:
c6:6d:11:0d:65:52:84:f3:8c:82:55:00:bd:f0:ac:54:49:a8:
6d:5e:12:a6:11:c8:ef:02:f7:da:69:5b:6d:6b:c0:6e:e8:41:
52:72:f2:ce:24:6f:4a:c1:87:6b:4f:51:d6:fb:d9:cc:b7:5b:
92:17:26:04:85:51:a5:aa:34:48:23:5a:d0:69:bf:74:69:d8:
b0:bd:7a:80:92:54:1e:2e:bf:f4:a9:b9:80:4d:23:0b:e7:c0:
b2:b4:7c:51:47:8c:38:ad:50:4d:67:50:73:6a:c9:ce:df:47:
da:45:3d:6b:6e:e5:cb:cf:33:99:ae:ca:13:ea:56:b8:8a:ed:
40:d8:f6:e4:e3:4f:41:7f:3f:32:16:0a:93:17:81:b2:aa:00:
44:0f:8c:ba:87:d2:2e:bd:14:bb:d3:59:17:15:65:c5:f2:e9:
b1:0f:7b:7e:04:0d:f3:5c:ae:bf:02:5f:a6:f9:1c:e0:d1:be:
39:41:a9:08:ac:b3:e4:ba:e8:bb:fe:46:74:4a:82:fb:7a:eb:
7d:a6:83:48:67:e1:69:cf:ca:76:81:cf:45:64:f9:2c:c2:50:
ad:13:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:52 2026 by rpki-client