
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier: jIZi7FI1uhGbGGZb2DO1wp/7nE7VMHhdBrTgtjErSgU=
Subject key identifier: FD:42:CB:36:91:FF:2A:32:31:BA:63:E5:33:A0:74:51:79:BE:37:99
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial: 0BC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number: 0BA2
Signing time: Sat 28 Feb 2026 19:17:31 +0000
Manifest this update: Sat 28 Feb 2026 19:17:30 +0000
Manifest next update: Sat 07 Mar 2026 19:17:30 +0000
Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 5fYoYYpx4IBAZ36T2jlonhejHmWQrvZJ+/pzpHUgiYY=)
2: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=)
3: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=)
4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=)
5: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Validity
Not Before: Feb 28 19:17:30 2026 GMT
Not After : Mar 7 19:17:30 2026 GMT
Subject: CN=69a33f4b-da52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:9e:3f:96:70:67:18:f8:16:8e:1a:2b:56:
d4:c4:93:a2:05:f2:1a:36:7c:2b:68:7f:17:69:47:
6f:f7:22:ac:fb:f3:80:c5:16:fa:70:65:ae:fd:d3:
13:c9:0e:e0:04:74:9f:da:90:23:c8:ac:31:4a:db:
49:81:f7:36:88:e0:ec:ab:65:c3:f8:78:17:aa:94:
38:9a:c3:d1:41:65:6b:e2:9d:06:a5:38:69:50:51:
3d:a5:d0:ed:05:03:d7:6d:00:38:0b:7a:92:8a:b9:
39:7f:d3:5b:c9:ab:bb:db:e7:8d:73:ec:1c:82:9a:
4e:ab:24:98:45:33:9e:67:fd:0a:48:cf:32:37:f9:
25:6c:68:60:14:94:41:33:2c:50:f3:c6:7a:29:ca:
9c:6a:42:54:ad:59:84:16:b6:f8:05:bb:78:8e:e3:
c4:63:95:3f:6b:e5:0a:f3:a5:16:58:88:b2:b4:88:
8c:ec:24:90:cd:8b:5e:d7:98:27:bf:05:38:53:bd:
82:4d:38:2c:b9:23:4f:3a:0f:44:e5:ce:18:cf:01:
c7:91:74:80:9a:44:08:65:9e:19:35:e1:56:8e:4f:
ae:e9:53:c5:77:b4:a6:44:c0:b8:a3:62:e5:3b:b9:
5c:7b:3b:65:8f:03:43:81:9b:91:ba:aa:57:7d:35:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:42:CB:36:91:FF:2A:32:31:BA:63:E5:33:A0:74:51:79:BE:37:99
X509v3 Authority Key Identifier:
keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:f6:2c:97:ea:7a:0f:45:16:40:24:b0:67:bf:d7:64:dd:
51:6c:9a:f9:be:3d:7f:01:1d:81:c9:76:f8:38:87:bd:55:e9:
a2:03:e7:43:14:eb:a2:10:1f:85:1f:c8:39:83:7b:25:5a:9c:
a8:68:41:fb:5e:cf:6f:1c:f8:10:d8:e8:de:22:07:d8:21:90:
43:67:a2:0b:5b:77:b2:6a:8b:66:33:60:72:b2:60:8b:05:12:
8d:10:4d:78:d3:28:44:a6:8e:25:9e:f4:c8:1c:38:c6:1a:d8:
43:f3:fa:f8:85:4a:73:90:da:8e:05:4f:6c:7f:cc:53:d0:f8:
57:7a:2b:f7:b6:81:90:4e:8e:54:2b:13:d7:8e:3e:e3:22:89:
2c:93:b1:8f:ca:a4:1a:7b:13:46:d9:9a:82:60:96:16:04:27:
d0:d0:48:f7:c7:07:6d:1b:0b:3f:55:91:60:04:1b:cb:01:df:
f4:03:03:50:e7:51:29:b6:27:1f:33:e8:4d:dd:14:57:a9:7b:
da:77:61:9e:4f:6a:f6:81:8c:61:e8:dc:94:8c:72:a2:72:19:
be:59:d6:79:37:6e:d8:5f:9b:5a:56:67:bc:6a:5b:5a:fc:77:
0b:a2:88:9f:13:9c:9c:f3:df:19:59:f2:b6:ac:b4:d8:96:a6:
9f:10:83:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:26 2026 by rpki-client