
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier: SK+kNmPiYqhaXujQz1+GUjn2K0Vj9RLEwV+Pzv0nwGQ=
Subject key identifier: 56:0E:E0:64:08:B9:0F:40:C8:02:21:9C:A7:05:3D:66:8B:16:C0:2A
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number: 0213
Signing time: Wed 25 Mar 2026 02:15:14 +0000
Manifest this update: Wed 25 Mar 2026 02:15:14 +0000
Manifest next update: Wed 01 Apr 2026 02:15:14 +0000
Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: dpuxe53XlZZKjLW67XjQZtZRZH/Ie2Tot5TeVtqKzcI=)
2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: WgI7CDc59isqqRIyCU2539zLb8jArZwcztjdz4JpKEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Validity
Not Before: Mar 25 02:15:14 2026 GMT
Not After : Apr 1 02:15:14 2026 GMT
Subject: CN=69c34532-0e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:f5:c4:87:3a:33:eb:af:90:41:45:c7:3e:
f4:9e:ae:e0:a7:1b:d8:37:93:2d:6f:c6:9c:bd:71:
e5:75:57:4b:02:84:24:2c:2b:c4:f2:a0:9d:2c:e7:
76:88:e6:4b:f6:20:4a:f7:d8:15:92:bc:50:83:61:
1b:e4:0e:3a:c6:97:74:d2:06:70:19:d8:c6:ed:d5:
5b:88:3b:9a:ad:51:4d:1f:04:bb:b5:3d:98:1b:96:
85:9c:8b:c4:b8:97:78:a8:7f:4c:5d:ca:dc:25:00:
b9:5b:68:72:ac:e0:df:25:a5:b7:22:f1:24:c1:d5:
3a:f2:a4:52:e3:9c:3f:77:4f:5a:92:1c:d1:f6:f3:
f8:17:e5:73:f6:52:b6:e3:b8:9d:e7:50:4a:ac:cd:
0e:2e:9d:16:8e:45:30:ec:50:6e:c1:17:0f:d5:db:
e3:52:c4:9c:73:c2:84:ca:ba:a2:92:6c:fd:56:fc:
6a:25:cc:79:c2:65:ae:dd:2c:9d:ec:ec:54:f7:3d:
97:88:30:f4:9a:76:fe:4b:52:b6:f5:12:d0:ec:ae:
e5:4b:72:fb:5e:30:b3:10:0e:67:bd:5d:62:8e:0c:
4a:a3:3f:61:d4:cf:6c:e6:e2:8b:d0:41:61:21:9a:
eb:12:1d:ae:8c:8b:e9:c1:ff:a3:1f:b1:89:f6:60:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:E0:64:08:B9:0F:40:C8:02:21:9C:A7:05:3D:66:8B:16:C0:2A
X509v3 Authority Key Identifier:
keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:fb:f6:71:db:51:fe:3a:ec:d6:dc:a0:29:13:f4:cb:24:
cf:3c:e9:4f:f6:ba:b3:6e:46:e3:58:36:24:0b:23:0a:da:c6:
dd:a1:a7:75:6f:ef:41:99:bd:fc:fd:69:1a:f5:09:dc:a2:c9:
e1:6f:19:88:6b:14:35:2c:6f:a3:ba:da:a6:8d:fc:9e:2a:ab:
3b:d7:f5:8d:55:3b:9f:34:76:38:09:5e:98:c8:ed:72:a0:29:
5d:6f:81:0c:59:4c:e2:60:c3:20:9b:3b:d0:24:d7:38:32:b0:
49:4d:7c:f7:76:56:e2:ca:9c:0c:59:5b:b1:3f:42:e6:25:00:
27:a9:32:6d:b4:d4:51:87:3c:fc:8b:bf:59:bb:4a:3a:ac:32:
46:21:ae:a4:86:90:80:86:b6:db:79:16:86:95:21:31:49:db:
4d:eb:e3:55:d0:d8:f7:97:c6:91:fb:10:b2:b3:69:e0:9c:73:
cf:cf:b7:ff:fa:b7:50:92:a1:ea:04:92:35:3c:ac:ef:f7:37:
6c:5c:bb:d9:42:bd:89:a0:40:ce:18:bb:63:07:7c:4d:20:4d:
87:dc:69:3f:c6:ea:41:29:1a:86:a1:54:c2:81:f2:31:ab:52:
45:48:2b:82:b4:73:14:66:b9:0b:cc:ad:20:a1:e1:4e:63:bf:
18:a2:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:13 2026 by rpki-client