
$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json)
Hash identifier: tx2j9XM1QqAP2p4xVqs+vxj7lcIjN4mnwpbbnOZqLm0=
Subject key identifier: 51:A4:84:A9:01:62:10:9D:17:C1:A9:32:D3:0C:E2:5E:CD:E4:08:44
Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
Manifest number: 01A6
Signing time: Sun 01 Mar 2026 23:25:02 +0000
Manifest this update: Sun 01 Mar 2026 23:25:01 +0000
Manifest next update: Sun 08 Mar 2026 23:25:01 +0000
Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: Ht5x63AnoxnAraW109FZlc808M0MM6uKz0N/6FGYI7Q=)
2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: XjFhck5MvAQTRA+OOGEV3q9Dar3ZejU3wR1JyHT6FLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl
rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Validity
Not Before: Mar 1 23:25:01 2026 GMT
Not After : Mar 8 23:25:01 2026 GMT
Subject: CN=69a4cace-2fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:9b:20:52:ed:ff:e1:99:56:1b:3f:28:fe:
b2:b9:54:82:82:ac:ef:3b:2c:b7:a9:40:16:db:c8:
bb:81:85:6a:36:cf:bf:19:3f:1f:d7:a8:47:4e:49:
ff:5a:24:47:9f:50:cb:2c:09:a3:9a:0f:cd:ee:66:
17:03:87:1f:5a:c4:60:45:98:04:e8:46:da:fa:1e:
2a:aa:f6:5b:60:3a:1a:40:0b:55:9a:01:70:36:f4:
0c:35:71:73:2a:e1:da:6c:db:ab:da:e6:14:ce:d1:
96:2a:f9:72:62:ec:0f:ba:91:76:ad:fe:b5:0f:0c:
27:1b:6f:18:ef:b8:fe:6d:e0:1f:80:39:1b:fb:c0:
e1:d4:d6:39:05:ea:1a:9e:16:ad:ab:c4:65:3f:09:
e2:6f:4c:73:a8:36:6d:d2:b5:23:86:11:36:01:57:
13:35:0e:1b:6f:4b:2a:9d:48:c7:30:5d:db:6a:f9:
6a:4d:18:40:eb:17:bb:64:05:0e:7f:ab:46:a8:0d:
66:ea:d7:1e:9f:cd:43:3b:fc:f8:62:cb:4f:02:6c:
fd:98:16:db:ea:36:ff:18:2b:64:77:89:ca:38:4f:
ac:86:1b:74:7e:f5:25:6d:ff:e7:a8:ab:24:60:01:
e2:87:fb:2a:93:42:ab:5b:9a:0f:f3:44:87:33:ef:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:84:A9:01:62:10:9D:17:C1:A9:32:D3:0C:E2:5E:CD:E4:08:44
X509v3 Authority Key Identifier:
keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:07:55:f3:a7:ee:65:e1:a7:a1:65:e1:85:24:21:06:ad:01:
7c:02:9a:23:1f:10:57:0c:af:ef:11:8a:02:ed:b7:99:04:82:
37:f6:03:71:15:1a:25:3b:53:0b:d4:f0:e0:49:9b:eb:3e:8b:
0f:90:be:f1:46:58:2b:e9:75:d8:05:9c:36:78:f5:fb:25:0e:
29:9f:0e:de:1f:91:f5:5d:ea:f8:48:b4:c0:8b:3d:56:02:c1:
bb:bd:d6:99:48:e3:e5:f8:cb:f0:f8:95:7d:98:76:19:b4:c8:
b3:b0:97:1a:64:15:bf:f6:46:3c:bb:f5:3f:d0:a9:c7:6b:ab:
81:ab:b7:d9:03:90:39:aa:8b:73:9f:47:9d:32:a0:15:1d:b7:
4b:59:98:f2:53:ed:4e:84:d3:4f:8f:97:ad:2a:d9:6e:9f:6f:
52:07:05:c0:24:a0:6b:6f:22:ab:9d:53:e1:74:07:7d:d9:a7:
a7:0f:59:a5:b8:bd:fa:6e:9c:e5:c9:0b:80:c6:1d:01:64:ab:
cc:cb:5d:13:f1:fb:81:59:b5:a0:92:e6:a1:53:1d:71:ed:e8:
10:e9:8d:12:28:6e:96:59:bb:69:9d:3f:69:72:2a:24:b5:34:
d4:b6:d2:3b:b1:fc:d1:19:e1:f1:61:3f:4d:34:81:ae:90:e3:
46:1d:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:44 2026 by rpki-client