
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier: /S7J1Gm8GTCAwcHENYeNV+jH4J/kb6xk+gVrYn5fVjQ=
Subject key identifier: E2:7A:D2:CB:61:54:DA:ED:94:85:96:67:0C:A0:D1:03:1E:75:71:E0
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial: 0C1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number: 0BF1
Signing time: Sun 26 Jul 2026 19:21:21 +0000
Manifest this update: Sun 26 Jul 2026 19:21:21 +0000
Manifest next update: Sun 02 Aug 2026 19:21:21 +0000
Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 3yo0bRybFjw4ymGgfFm7DZL9g0zIK/LdnfckpuiK164=)
2: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: zr9WgE2KmAHV01j5bTwejKCZJZ/f953lXlW3VV/8nH0=)
3: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: 84SKbcYJYQpkdPhgKDfKJZGQMSbK1foRAoBLyJS3rw8=)
4: DE437646F8A911EB98242219C4F9AE02.roa (hash: C2BWvQ+C/+Sn9VLF0lBp78gdjNkGbixDoXI6j4xdzH0=)
5: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: RFpssbMsMYAgstv88gTpUDNVcPFKgB5u5+7fNcGeiow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Validity
Not Before: Jul 26 19:21:21 2026 GMT
Not After : Aug 2 19:21:21 2026 GMT
Subject: CN=6a665e31-2535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:7f:ff:5f:6f:55:e6:14:e9:c8:25:90:d9:
78:b2:39:57:d0:15:fe:2f:01:bb:09:23:92:fe:76:
2e:d8:c9:4c:56:74:15:c7:f9:5c:71:b9:05:dc:fa:
8c:84:2b:2c:ee:de:bb:0e:dd:05:5e:b8:f8:12:2f:
95:86:d7:a7:73:25:92:07:da:a7:f3:76:7b:c1:f2:
9f:d9:09:75:22:df:e3:eb:d7:c0:3c:35:48:b4:46:
0f:b2:ca:28:33:a1:20:94:99:53:7e:ec:9b:94:17:
63:cb:f5:16:ef:33:d9:88:59:49:6c:bd:e1:7d:8a:
9f:20:26:a6:4a:bd:33:2c:d9:95:b6:8d:49:08:57:
ae:56:ae:79:23:cd:9a:f4:1e:64:86:56:d0:b6:de:
b1:af:61:4a:a4:d7:4c:e9:c5:5b:a2:ee:e7:f1:5a:
60:e4:4e:90:93:fd:b2:1c:f7:b6:d0:02:8a:e9:ec:
57:fe:2c:78:db:ec:0d:d3:a1:61:a2:47:ec:64:c5:
a0:8a:d2:f4:72:67:13:83:1c:8a:b2:3f:24:a5:92:
c5:0d:13:63:3e:cd:c6:a9:48:61:fd:22:2d:9d:0b:
69:95:59:af:b5:b5:9c:22:33:41:52:13:8f:5c:21:
09:cc:02:e2:87:25:a5:0e:c3:84:26:f5:86:05:eb:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:D2:CB:61:54:DA:ED:94:85:96:67:0C:A0:D1:03:1E:75:71:E0
X509v3 Authority Key Identifier:
keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:5a:5a:cc:fd:66:2a:01:2d:51:fe:1f:13:02:10:ef:06:44:
be:9e:be:1b:03:b3:e6:71:92:e0:18:84:20:01:14:23:d1:25:
ed:0d:4c:50:07:9c:6d:60:a0:8f:53:7d:e4:fb:36:cd:7e:68:
a8:f6:12:df:f0:b5:22:35:fa:cc:e2:96:78:24:b9:b0:94:25:
65:dc:5c:21:00:43:a4:f8:1c:29:c5:7a:7a:68:c6:b8:14:35:
b8:59:17:d3:70:ac:97:ca:28:0a:de:3b:7c:d7:40:1f:29:2f:
e2:2f:4e:e8:54:ee:8d:d8:7a:68:13:76:f3:ac:57:28:78:59:
eb:99:fa:2e:b0:44:cf:14:30:76:99:c3:3b:58:2d:cd:a2:4f:
52:a3:4e:db:e6:d1:16:54:94:6c:8b:1c:f1:d3:74:1c:c9:6f:
29:47:5a:e8:e8:62:f1:cd:b6:ae:1f:b0:8e:42:3b:97:df:dc:
0c:da:b0:5b:58:4b:ae:22:f8:05:08:80:ef:6f:3f:55:4d:70:
4e:45:e7:46:e2:39:b1:fe:e1:5f:0f:43:44:3e:aa:1d:d1:53:
dd:d9:75:ac:77:1e:f9:a9:5a:81:70:6e:c1:fa:6a:e3:eb:49:
1b:72:6e:1e:df:a0:d2:50:e4:fb:5b:20:36:a9:1d:46:43:a8:
70:2c:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:47 2026 by rpki-client