
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier: oP0ZYluRmaN29bPYjGyyjnnUk/tlQ9yOD+pbpr0kPwk=
Subject key identifier: 94:E3:E9:AD:2D:06:A2:EE:39:BB:AB:28:6B:54:9C:20:D5:A1:8B:C2
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial: 0C3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number: 0C0F
Signing time: Tue 22 Sep 2026 18:45:48 +0000
Manifest this update: Tue 22 Sep 2026 18:45:47 +0000
Manifest next update: Tue 29 Sep 2026 18:45:47 +0000
Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: mM+5ialiJvRdm597i0osPVQ035ILQfferNXXf92hKkQ=)
2: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: 84SKbcYJYQpkdPhgKDfKJZGQMSbK1foRAoBLyJS3rw8=)
3: DE437646F8A911EB98242219C4F9AE02.roa (hash: C2BWvQ+C/+Sn9VLF0lBp78gdjNkGbixDoXI6j4xdzH0=)
4: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: RFpssbMsMYAgstv88gTpUDNVcPFKgB5u5+7fNcGeiow=)
5: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: zr9WgE2KmAHV01j5bTwejKCZJZ/f953lXlW3VV/8nH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Validity
Not Before: Sep 22 18:45:47 2026 GMT
Not After : Sep 29 18:45:47 2026 GMT
Subject: CN=6ab2ccdc-39f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:35:7e:df:82:d8:5b:ef:40:cf:8e:2f:88:
00:f8:82:8e:47:0a:d5:01:52:ce:37:29:b2:84:13:
a8:86:af:47:a1:0f:7a:de:37:e1:82:9e:c7:dc:79:
ce:39:74:33:9f:67:e4:1b:31:ba:91:2d:36:89:91:
46:7f:96:9c:2c:05:f5:63:cb:8f:05:ed:4e:84:e2:
a3:db:c7:d2:e4:36:b2:fa:1c:51:31:c2:2e:7e:61:
d9:7e:8c:8a:4d:36:5b:da:94:9d:f8:d4:63:9a:a1:
0b:f3:25:2d:21:e0:84:63:55:28:4f:ba:5e:dc:f7:
02:69:41:f5:40:54:18:89:e5:b0:48:54:d9:02:60:
67:c7:f1:39:e0:49:ec:8b:e4:4d:99:82:88:8a:99:
9a:6f:76:c8:f0:25:3e:81:c5:d5:9d:dc:05:c0:02:
fc:17:a7:4e:11:d5:72:91:c2:5b:22:f5:69:57:bc:
4c:3c:9d:05:b8:ed:55:03:79:04:98:5a:d1:99:48:
02:41:91:de:40:2b:b1:28:76:bb:cc:a1:99:a7:93:
ac:94:09:72:3b:75:b7:6e:22:91:7a:da:cb:a8:79:
5f:ab:00:a7:cc:fc:2b:40:8f:b0:35:c8:2b:95:4e:
e4:3d:68:05:3f:ae:fa:82:21:22:cd:4b:19:3c:79:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:E9:AD:2D:06:A2:EE:39:BB:AB:28:6B:54:9C:20:D5:A1:8B:C2
X509v3 Authority Key Identifier:
keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a4:16:9d:41:d0:11:99:d4:a4:d2:1b:5c:b0:eb:f5:cd:02:
33:0f:62:ae:55:2a:fb:d0:82:c8:d3:33:aa:1b:51:fc:f6:95:
32:67:2d:a9:9e:e7:90:2c:be:a0:96:76:dc:3a:b2:f7:c1:c5:
44:4e:d9:c3:1c:9b:c3:10:42:eb:2e:00:1c:d4:3c:40:9b:c1:
5b:5f:d1:7f:14:ac:8c:35:05:25:84:4d:4f:9a:41:4b:93:69:
03:5c:02:9f:a4:61:ec:80:3f:1e:ce:dc:1e:24:10:12:b0:3d:
d0:3f:10:09:a3:8d:96:84:9d:90:ca:ed:a6:2a:75:4c:bc:ab:
73:16:14:d4:d2:ff:14:9e:b4:f9:2e:48:c9:2f:0d:49:88:ca:
8e:87:38:42:80:1b:40:bb:39:6b:bc:b5:cf:90:72:f4:31:37:
47:33:09:c8:51:da:3c:b5:97:70:51:81:a6:eb:66:43:d6:d3:
29:14:98:9e:06:cf:5d:0f:b9:06:34:3d:2c:e2:b6:15:dd:17:
c3:91:26:cf:ee:b8:25:c3:8b:7b:d3:57:b4:52:76:02:20:05:
f3:df:c6:3d:f6:af:dc:d3:3d:e3:f2:7d:6e:35:d1:31:67:94:
b2:f3:37:96:b8:62:5a:d3:b9:49:b7:31:2f:30:80:af:1c:0e:
80:7d:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:16:21 2026 by rpki-client