
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: 3VCpkNDmL9fSJ9RdB2z/dDfw5+O3xxTABdzFUoCzUUo=
Subject key identifier: 49:91:B0:AC:56:71:80:F3:04:E2:C3:3F:D8:B6:FA:C4:04:22:56:86
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 0326
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 0317
Signing time: Sun 01 Mar 2026 23:31:36 +0000
Manifest this update: Sun 01 Mar 2026 23:31:34 +0000
Manifest next update: Sun 08 Mar 2026 23:31:34 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: +JTsQNV2h1OPfxZ16rUq86vebHJftoKdDRLaEgwWeRc=)
2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: NeNLEWs48p2lioiKT2J3ps7UOEiJA4wkGqbLsVS/UVI=)
3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: xFC28v5UWT7Q3EvTeNVvDz0nPDxJaAuJAejlh2w2fns=)
4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: f/KJzPtE5DhAN8MxPkZ/p+zkW8uVVZhQWMpOA1Tk7TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Mar 1 23:31:34 2026 GMT
Not After : Mar 8 23:31:34 2026 GMT
Subject: CN=69a4cc57-4f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:c2:ee:e9:be:7e:c5:8d:b8:20:14:88:3b:
9d:20:65:02:cf:33:07:bc:62:7d:25:eb:25:00:47:
e7:7f:b8:10:8b:c0:fb:75:80:a9:dd:6b:cb:45:81:
37:48:9f:39:27:42:34:7a:86:97:08:65:bc:74:5b:
94:64:1c:b8:1c:d6:f3:d6:75:b0:59:f9:00:18:c2:
4e:06:99:ab:0d:bd:73:30:e1:15:5d:14:b3:94:47:
4c:f6:55:a8:49:12:6d:ce:4f:6d:3c:5d:f4:9e:51:
c6:c2:93:c9:ae:16:9f:6f:aa:9d:1c:e2:85:39:01:
c3:bf:c0:f2:1b:55:9d:8c:db:f3:1c:3a:78:46:4c:
dd:76:ab:bf:2d:15:d4:fa:1b:1d:5a:f6:73:9b:14:
c5:ce:0a:02:c3:54:42:da:03:6d:85:35:42:43:39:
b0:45:c1:3e:eb:a5:80:41:ad:3b:a9:60:7c:e2:81:
ab:80:a7:26:7c:99:d4:5e:33:63:ab:6f:8c:e5:6e:
78:29:93:32:78:4d:df:f7:8e:7b:66:55:45:9f:6e:
1c:e4:c4:27:06:68:14:89:3c:ce:a3:b8:cc:86:fe:
6b:35:ec:f8:f8:ed:2e:0b:05:44:c5:de:0c:4f:e1:
8a:86:52:16:9e:0b:69:94:08:1e:15:9c:1b:89:b4:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:B0:AC:56:71:80:F3:04:E2:C3:3F:D8:B6:FA:C4:04:22:56:86
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:84:02:af:85:2b:6f:d7:26:27:ce:22:63:ec:26:45:9a:c8:
84:6e:ea:13:97:54:97:08:cf:12:ea:fe:95:7f:d6:08:c1:df:
23:35:1d:53:5c:3d:50:6e:cf:7c:6e:bc:b6:1a:b9:e1:91:c0:
56:bc:33:ae:88:61:a8:9d:3d:75:33:56:30:cf:99:af:13:da:
67:93:e2:26:1a:56:63:94:87:2d:4b:7a:e7:08:27:dc:e4:f3:
c1:56:ba:d0:33:8b:40:fb:35:ea:d2:22:57:f0:ec:f0:04:86:
02:8f:65:35:7d:2e:63:0a:cc:0e:01:6f:13:59:f4:e6:fb:57:
72:31:ff:a6:b0:1e:a5:b7:15:26:48:19:35:c4:c8:07:5e:17:
56:49:6c:79:a7:19:9d:39:89:25:e6:24:08:12:8a:1e:21:b1:
d6:93:7a:a1:15:c7:a3:6b:60:a2:3a:45:9f:38:03:59:5e:d4:
7a:02:fe:9f:e5:6f:29:53:eb:41:db:19:06:d2:8c:6a:e6:59:
99:3c:b7:5c:48:28:a5:ce:22:4e:55:d7:50:a1:f7:65:1c:cd:
ca:b1:fe:71:65:81:e1:d6:a8:65:95:89:2c:b5:07:6d:32:0b:
da:69:c5:ab:ef:75:62:35:e1:9e:c5:78:81:2d:c3:97:e0:3b:
b7:2e:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:47 2026 by rpki-client