
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: Xbd9tBhj1zHQkz7N8KTTexBiQNVVwpHhIXbuTBB+0+s=
Subject key identifier: CA:96:0C:11:E8:1C:D7:B1:0A:2B:D8:D0:71:CF:E7:15:04:AA:C3:60
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 034D
Signing time: Sat 13 Jun 2026 01:01:25 +0000
Manifest this update: Sat 13 Jun 2026 01:01:24 +0000
Manifest next update: Sat 20 Jun 2026 01:01:24 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: RHd+H4i8nQRe5DOr9nv85KX9s5xZAzdzEiHg6hBYkpI=)
2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: 26lbZitWRiEfeoyruNKhZHO3TiLuflGgqtfn2ftoTxQ=)
3: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: Wcc8ygmv+LZchyHQ4KBBITZJAV+Up2qfVQ07bd9vNtw=)
4: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Jun 13 01:01:24 2026 GMT
Not After : Jun 20 01:01:24 2026 GMT
Subject: CN=6a2cabe5-b568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:4a:53:1e:f7:1f:68:a9:e9:a8:12:30:da:
5f:eb:58:8f:43:68:c9:61:c1:cf:21:2f:d2:44:61:
54:77:66:0c:75:23:6e:38:45:3e:60:2b:10:f3:35:
09:69:00:98:d8:ae:c6:15:55:ee:4e:e5:e3:b6:d9:
da:53:f6:85:e5:b2:b6:95:d8:1a:28:52:cb:bb:34:
a0:11:e7:cd:c5:91:36:22:f0:08:b0:39:16:d0:b7:
39:3c:c2:f7:62:8e:85:e2:06:4e:6c:1a:c6:5b:ab:
c1:60:1c:73:36:cf:3e:56:81:4d:f8:62:a3:b9:09:
ec:91:e2:e3:5a:01:6e:96:2e:9c:6d:35:3f:80:b7:
a7:82:49:50:3b:f6:1e:29:54:61:b9:1d:78:64:5e:
bd:e0:fa:e4:f6:fb:4e:45:30:f4:01:f4:72:04:65:
f9:b4:1c:1c:86:0d:82:50:23:c7:5c:a7:9d:c6:f6:
fe:ec:7c:e6:2f:b0:ca:55:cb:43:25:6b:6f:84:e0:
4b:2c:3f:f7:14:9e:83:fc:d3:e9:f6:48:11:e4:fd:
fa:d9:a1:b5:13:cd:ff:c0:9f:b6:62:55:bc:72:44:
2a:4c:c9:1f:e8:bf:11:81:85:aa:69:30:09:27:08:
bf:23:20:f0:c6:03:b3:5d:0e:c0:7b:eb:a9:72:21:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:0C:11:E8:1C:D7:B1:0A:2B:D8:D0:71:CF:E7:15:04:AA:C3:60
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:8f:19:91:79:b1:05:eb:d4:74:50:d6:b0:2b:23:cf:ce:
64:a0:a3:83:54:fa:d5:14:60:a0:72:79:e2:91:7f:9d:a2:5e:
e8:62:14:fe:e8:58:fe:32:ff:98:0f:5a:9d:88:51:a0:a7:c8:
6b:30:f0:38:d3:b8:13:15:7e:4f:de:6c:7f:79:8d:05:d8:11:
11:db:fb:23:d0:34:91:73:1d:b2:63:62:95:5b:27:97:49:2f:
4a:50:49:2e:a1:5a:e0:b4:09:d7:49:93:d6:c0:1e:c6:12:c0:
a5:39:9a:2f:f8:4c:18:61:8a:fc:9b:a3:8e:96:d2:1c:04:35:
fd:b3:96:54:e1:bf:a0:24:8f:3c:38:55:3c:e5:84:78:ed:c2:
08:b4:ff:70:31:4e:49:e2:d5:63:4a:92:9b:5b:64:83:f7:64:
de:18:88:cf:a7:52:d1:29:ba:ae:96:3b:97:bc:a9:1b:3c:1a:
be:66:0a:5e:c1:75:b5:89:9b:23:cf:8c:7c:1e:1c:2d:97:b0:
a2:31:84:5f:f7:c1:45:51:64:fc:1d:e6:e3:29:e7:e3:ff:b9:
97:d5:96:9c:00:8d:d7:23:79:a3:71:7e:8a:3a:5d:4d:00:1e:
ff:7c:4f:45:46:b9:49:0b:ed:b0:d4:9d:8f:70:1d:e2:72:b0:
98:69:92:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUxRjExMTAvBgNVBAUTKEYzRjI3M0YzRUZDRTU1MUVFMzNDODQ0RDQ0MEFBMzBF
REEwODdFMkMwHhcNMjYwNjEzMDEwMTI0WhcNMjYwNjIwMDEwMTI0WjAYMRYwFAYD
VQQDEw02YTJjYWJlNS1iNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAZKUx73H2ip6agSMNpf61iPQ2jJYcHPIS/SRGFUd2YMdSNuOEU+YCsQ8zUJ
aQCY2K7GFVXuTuXjttnaU/aF5bK2ldgaKFLLuzSgEefNxZE2IvAIsDkW0Lc5PML3
Yo6F4gZObBrGW6vBYBxzNs8+VoFN+GKjuQnskeLjWgFuli6cbTU/gLengklQO/Ye
KVRhuR14ZF694Prk9vtORTD0AfRyBGX5tBwchg2CUCPHXKedxvb+7HzmL7DKVctD
JWtvhOBLLD/3FJ6D/NPp9kgR5P362aG1E83/wJ+2YlW8ckQqTMkf6L8RgYWqaTAJ
Jwi/IyDwxgOzXQ7Ae+upciFQzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqWDBHo
HNexCivY0HHP5xUEqsNgMB8GA1UdIwQYMBaAFPPyc/PvzlUe4zyETUQKow7aCH4s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFGMS80RkVCRjI0QTA5
REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZSN2pQSVJOUkFxakR0b0lm
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfSno4LV9PVlI3alBJUk5SQXFqRHRvSWZpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTFGMS80RkVCRjI0QTA5REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZS
N2pQSVJOUkFxakR0b0lmaXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALsCPGZF5sQXr1HRQ1rArI8/OZKCjg1T61RRgoHJ54pF/naJe6GIU/uhY/jL/
mA9anYhRoKfIazDwONO4ExV+T95sf3mNBdgREdv7I9A0kXMdsmNilVsnl0kvSlBJ
LqFa4LQJ10mT1sAexhLApTmaL/hMGGGK/JujjpbSHAQ1/bOWVOG/oCSPPDhVPOWE
eO3CCLT/cDFOSeLVY0qSm1tkg/dk3hiIz6dS0Sm6rpY7l7ypGzwavmYKXsF1tYmb
I8+MfB4cLZewojGEX/fBRVFk/B3m4ynn4/+5l9WWnACN1yN5o3F+ijpdTQAe/3xP
RUa5SQvtsNSdj3Ad4nKwmGmSvw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:58 2026 by rpki-client