
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier: QcBmnI1qHlNLXnzzSImmD3ikjyDB9AY52eJzs3wZSuw=
Subject key identifier: 2B:E1:81:93:16:C5:9F:45:D8:43:AB:65:FB:49:B7:01:CB:70:70:B3
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number: 014D
Signing time: Wed 13 May 2026 05:16:25 +0000
Manifest this update: Wed 13 May 2026 05:16:24 +0000
Manifest next update: Wed 20 May 2026 05:16:24 +0000
Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: LPJsh7hXzkb+HZ9mvfM/nkTNjQoXWCDLTzn0DvLReN8=)
2: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: y6lsTAzxceftnb0UckbxcnuqjkGYgeTxQZKU2zv7Tfc=)
3: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: Al8YtI295Qv3VLO+dWvpu3tZeFYQjhzt57J20RQFzEM=)
4: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: hSeIp929vHi0Xgq96P+KYhFORbkTXCu0ObyLBiOE7yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Validity
Not Before: May 13 05:16:24 2026 GMT
Not After : May 20 05:16:24 2026 GMT
Subject: CN=6a040929-03f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:a9:7e:a6:90:8d:49:19:07:ca:1d:ff:44:
fe:19:1c:30:0e:38:c3:7e:bb:c5:87:3f:29:99:1e:
c8:14:59:26:6d:b5:d2:67:33:fb:ff:a1:a8:a0:2e:
db:70:90:79:5d:20:2d:3a:04:3f:a4:22:2a:8d:d4:
29:86:c4:50:a6:17:36:e0:29:70:d1:ef:11:48:6b:
22:8a:d1:c8:89:c1:bb:bf:11:b7:91:a4:d8:a9:88:
43:f4:01:ac:f5:3c:84:97:bf:53:01:18:01:6a:7c:
c6:29:ad:c7:75:70:36:c3:b2:6c:f3:ba:53:50:6c:
c0:5b:0a:18:28:f3:52:7e:6e:e3:0a:be:2b:69:54:
f0:54:4d:44:e0:7e:9b:6a:53:b3:61:b5:e1:d3:e4:
ea:98:b5:94:d0:e2:a3:81:24:42:f6:68:43:4a:2b:
de:7d:65:49:46:76:dc:db:c8:f4:66:d4:46:3a:e2:
f0:23:22:f3:64:c0:6c:5b:5f:2e:4b:b7:41:44:7c:
17:55:7f:68:81:9e:99:99:72:e5:15:38:22:7d:2a:
4e:23:8b:e0:f1:ba:37:fa:aa:90:af:d2:5e:07:76:
d6:11:0b:d1:2f:5c:70:fc:b8:19:3f:5d:b6:0d:3a:
01:05:1e:ad:12:92:48:37:43:fa:94:c9:58:7d:2b:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:81:93:16:C5:9F:45:D8:43:AB:65:FB:49:B7:01:CB:70:70:B3
X509v3 Authority Key Identifier:
keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c5:9c:0b:0b:07:b4:06:e8:85:64:b9:22:e1:bb:c1:9b:8a:
bb:b5:81:0d:40:ee:1a:65:4a:7f:f9:51:8d:c3:ca:43:fe:bd:
49:3b:8f:a1:18:1e:b2:0e:a3:bb:e2:75:53:eb:d5:61:9c:c6:
1c:92:1f:84:c2:05:7d:05:c3:42:8c:7d:b7:77:96:b2:23:50:
53:84:61:55:7e:b8:67:67:2e:81:f0:68:68:e3:cd:9b:aa:c5:
65:53:39:c9:83:d2:1b:50:a2:da:62:a4:70:a0:3a:0e:f2:cb:
01:7a:5c:ac:45:08:aa:2c:77:2c:a8:90:81:6b:25:80:7e:05:
61:31:5b:97:3f:0a:15:10:64:f5:be:53:05:40:f6:01:a9:6a:
a5:52:8b:79:eb:8f:38:42:a7:2f:4c:dd:51:8c:63:b4:5d:ea:
32:eb:ef:41:6f:cd:56:ed:db:25:06:63:25:80:a4:61:62:da:
b5:77:a9:54:06:29:f9:a5:d5:10:00:84:bb:80:c7:e2:e7:3f:
55:7a:3c:00:0d:7e:51:a5:94:b4:84:0f:30:71:cc:4a:18:25:
bb:e0:7b:3b:8e:4e:9d:49:e3:6f:5c:98:1b:2e:ca:e5:5c:fc:
cf:a5:c4:68:1c:9f:18:95:f2:c4:7a:2b:30:6b:ca:87:b0:ce:
11:03:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:15 2026 by rpki-client