
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier: fXGlF03dHQuW97AfE1FxUz5Z4uQZIzAXSUdhYdtGaes=
Subject key identifier: FF:2F:5C:74:B6:DE:93:8E:FC:F7:09:95:DA:24:53:27:B4:40:ED:18
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial: 0C07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number: 0BDB
Signing time: Fri 12 Jun 2026 19:00:38 +0000
Manifest this update: Fri 12 Jun 2026 19:00:37 +0000
Manifest next update: Fri 19 Jun 2026 19:00:37 +0000
Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: y6Wx71ZOWw9LgU/74ccCJddf/sOqrGmeGwdc6XJfAuk=)
2: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: zr9WgE2KmAHV01j5bTwejKCZJZ/f953lXlW3VV/8nH0=)
3: DE437646F8A911EB98242219C4F9AE02.roa (hash: C2BWvQ+C/+Sn9VLF0lBp78gdjNkGbixDoXI6j4xdzH0=)
4: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: RFpssbMsMYAgstv88gTpUDNVcPFKgB5u5+7fNcGeiow=)
5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: 84SKbcYJYQpkdPhgKDfKJZGQMSbK1foRAoBLyJS3rw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Validity
Not Before: Jun 12 19:00:37 2026 GMT
Not After : Jun 19 19:00:37 2026 GMT
Subject: CN=6a2c5756-e98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:ad:b4:f0:04:02:f7:cc:4c:8d:b8:9d:a2:
1c:65:48:18:8e:11:89:1a:62:69:19:84:49:cc:cb:
fa:5c:2a:e4:a0:d3:e3:66:42:c3:a2:13:2a:66:18:
a3:e8:38:02:14:5e:d2:16:95:a1:20:97:13:ae:78:
fd:e9:32:3c:ba:a1:08:bd:6b:33:dc:e3:09:35:53:
83:69:d3:9f:3b:9a:50:06:d4:88:30:7e:30:ec:ae:
10:1d:16:70:04:9f:48:e9:bb:9b:3b:cb:4e:30:fe:
d2:7f:69:28:ae:47:c3:74:c8:c0:c1:63:0f:00:fc:
68:2f:dd:f9:57:fa:3a:32:97:fc:ff:ec:3d:20:6d:
c1:5c:d2:84:26:a6:3b:02:2d:58:65:30:81:2c:bd:
85:c7:5a:63:1a:a2:1e:48:22:47:20:28:02:12:70:
c0:b3:77:3b:83:e6:48:a6:9d:45:e1:3e:72:97:85:
fc:41:6a:0d:8e:d5:b4:8e:6d:65:90:d3:7d:c0:e0:
18:95:a8:76:75:1e:bb:21:57:d7:98:05:51:59:68:
bc:55:75:31:5a:e9:5b:d7:18:d2:a5:30:57:23:11:
bc:43:00:91:8c:40:35:e4:0c:1a:3c:c2:da:04:15:
7d:ff:d7:a0:37:10:53:13:ab:78:9e:3b:09:fc:2c:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:5C:74:B6:DE:93:8E:FC:F7:09:95:DA:24:53:27:B4:40:ED:18
X509v3 Authority Key Identifier:
keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:85:e1:0f:fb:5d:26:57:0e:83:1b:c3:8b:d5:fd:c6:d2:66:
d5:65:8e:64:e3:3a:67:12:45:f7:b8:84:ef:6e:61:8f:f7:13:
6c:51:97:e4:5c:f2:21:78:37:04:a3:1d:54:e6:64:b5:16:8b:
82:bb:d0:10:b0:ff:ef:2b:4c:b6:72:b5:cc:55:da:01:8c:92:
84:23:85:96:2f:af:fa:35:3c:25:45:af:24:47:6a:3f:be:41:
3c:13:2d:94:a0:ca:ec:d3:5a:e3:f1:9b:15:62:e9:85:1a:ed:
ec:e9:d7:82:02:e0:fe:d9:25:eb:60:7d:fd:e5:05:a9:63:75:
77:00:5f:7f:5d:a7:c4:b6:e5:5e:77:18:dd:d1:2f:e3:ce:75:
6a:22:d9:f9:44:69:ff:71:43:49:a0:e4:4b:62:ba:3e:e4:4c:
64:26:2c:34:3f:dc:4b:35:48:3e:82:e7:9a:34:dc:66:59:7a:
a8:ce:4b:ea:02:27:3a:7f:31:50:cb:8a:4e:6b:9b:fc:31:5f:
ad:86:0a:df:c4:f4:22:2c:54:2a:70:91:5f:fe:d7:4c:87:3d:
eb:a0:37:65:f4:7d:af:80:61:ec:30:48:85:18:67:07:c2:0f:
f1:0e:e7:6c:69:1f:e6:f4:7b:0c:dc:16:c4:91:a1:10:3b:c6:
b5:2e:f3:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4
OEQwMTQwRkUwHhcNMjYwNjEyMTkwMDM3WhcNMjYwNjE5MTkwMDM3WjAYMRYwFAYD
VQQDEw02YTJjNTc1Ni1lOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytittPAEAvfMTI24naIcZUgYjhGJGmJpGYRJzMv6XCrkoNPjZkLDohMqZhij
6DgCFF7SFpWhIJcTrnj96TI8uqEIvWsz3OMJNVODadOfO5pQBtSIMH4w7K4QHRZw
BJ9I6bubO8tOMP7Sf2korkfDdMjAwWMPAPxoL935V/o6Mpf8/+w9IG3BXNKEJqY7
Ai1YZTCBLL2Fx1pjGqIeSCJHICgCEnDAs3c7g+ZIpp1F4T5yl4X8QWoNjtW0jm1l
kNN9wOAYlah2dR67IVfXmAVRWWi8VXUxWulb1xjSpTBXIxG8QwCRjEA15AwaPMLa
BBV9/9egNxBTE6t4njsJ/CwHVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8vXHS2
3pOO/PcJldokUye0QO0YMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy
RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1
NThSVnZkczFGWmFJMEJRUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPoXhD/tdJlcOgxvDi9X9xtJm1WWOZOM6ZxJF97iE725hj/cTbFGX5FzyIXg3
BKMdVOZktRaLgrvQELD/7ytMtnK1zFXaAYyShCOFli+v+jU8JUWvJEdqP75BPBMt
lKDK7NNa4/GbFWLphRrt7OnXggLg/tkl62B9/eUFqWN1dwBff12nxLblXncY3dEv
4851aiLZ+URp/3FDSaDkS2K6PuRMZCYsND/cSzVIPoLnmjTcZll6qM5L6gInOn8x
UMuKTmub/DFfrYYK38T0IixUKnCRX/7XTIc966A3ZfR9r4Bh7DBIhRhnB8IP8Q7n
bGkf5vR7DNwWxJGhEDvGtS7z9g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:14 2026 by rpki-client