
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: +hwEd++f+U9cX2N1JXHxgXhHANq7xGwWQuCvMrN36V0=
Subject key identifier: 8E:7B:C4:F9:23:89:29:2A:FA:A1:02:EA:B1:1D:76:C1:44:48:58:EA
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 0345
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 0330
Signing time: Fri 17 Apr 2026 01:00:17 +0000
Manifest this update: Fri 17 Apr 2026 01:00:17 +0000
Manifest next update: Fri 24 Apr 2026 01:00:17 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: T5pMl6u6oOXxplrSsITzMhCBj4zbTqQgKLZz5nk8iTY=)
2: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=)
3: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: Wcc8ygmv+LZchyHQ4KBBITZJAV+Up2qfVQ07bd9vNtw=)
4: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: 26lbZitWRiEfeoyruNKhZHO3TiLuflGgqtfn2ftoTxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837 (0x345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Apr 17 01:00:17 2026 GMT
Not After : Apr 24 01:00:17 2026 GMT
Subject: CN=69e18621-54cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:3e:2f:28:b3:f1:87:e4:08:3f:1b:0a:15:
d3:1d:bd:92:bd:1e:4b:e5:fd:13:99:ed:18:1d:4b:
28:26:f6:c3:88:85:0b:5c:4d:99:b8:33:b7:e1:2a:
f0:7e:b6:86:12:0c:67:e6:b1:6e:79:09:e7:62:b6:
d8:a1:52:41:51:07:1f:98:45:d3:03:66:dd:81:50:
a8:ee:1d:c2:1b:a6:a2:6e:81:bb:a8:80:f7:e5:2c:
54:3e:0c:4f:4b:1e:bd:c8:f1:f1:1f:79:5c:31:84:
e8:ad:0f:bf:a6:e5:11:0a:7f:b5:5d:91:30:cc:39:
7e:ad:5c:4f:47:ac:bb:b5:f6:23:79:88:9e:f9:60:
af:68:66:58:ca:e1:01:be:9a:81:af:f6:4c:1a:ac:
54:7a:57:90:0f:da:cb:a9:06:e1:5d:65:21:0d:22:
ad:6d:50:47:b3:93:e7:48:fd:e9:a4:5f:3d:03:43:
c6:c1:da:0e:11:32:24:b7:9a:5b:af:f6:8c:81:02:
31:25:a0:84:43:31:5d:17:b9:b5:37:f3:55:a9:12:
e9:19:44:e0:fa:2d:9d:2f:b9:d9:ef:56:6d:cd:94:
77:45:8f:d4:d0:41:2a:08:91:ad:d6:0e:b4:cb:c7:
e5:52:51:41:fc:ee:01:56:c1:6a:c0:8c:44:3b:24:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:C4:F9:23:89:29:2A:FA:A1:02:EA:B1:1D:76:C1:44:48:58:EA
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:b6:47:c7:28:6d:5f:95:51:fe:b9:42:d4:ea:9b:98:56:
c3:28:e0:07:9f:af:7a:4c:29:44:83:bd:1a:3b:e2:5d:0e:c8:
53:71:cd:16:3e:43:88:a1:9b:67:2e:22:df:37:e1:dd:d1:36:
bc:b6:82:b8:2a:70:34:6d:8f:37:ea:94:6f:c6:3f:3f:c8:c3:
ab:2b:5f:86:9b:93:ac:ce:3f:df:65:94:72:b6:ea:df:30:ed:
b2:4a:6c:8c:6b:c5:e3:15:02:ab:bb:83:2e:d7:0a:f9:21:d5:
c7:54:63:e5:99:16:84:42:7c:35:90:c4:43:c2:e7:4e:43:1e:
17:c8:5b:af:19:9d:60:bf:ce:b1:94:9b:c0:a2:92:cf:5e:d5:
c6:8a:ec:75:30:87:54:f5:52:4c:4c:c9:17:d6:ed:96:cd:59:
90:ed:11:e9:9b:a0:3d:f0:c6:27:5d:dd:7b:35:9e:e8:ef:de:
35:ad:7b:ca:0b:7f:ab:4c:cb:c0:96:d6:fb:7c:52:6f:e1:f1:
14:29:00:a0:c2:8e:96:51:5e:00:34:18:9c:e3:73:ce:3d:25:
06:c6:26:be:4a:2d:83:55:44:9b:70:4c:52:99:1b:d3:44:df:
91:af:1d:e9:68:ba:57:77:e8:60:97:6f:2c:63:67:82:a8:33:
47:37:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:23 2026 by rpki-client