
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier: qCrCXs2HXaDt9eDDk6CN8rpaMK9Z8ZKcr2Y/+zowTnY=
Subject key identifier: 5A:67:48:39:7A:38:1F:4A:7E:21:54:6E:D3:4E:75:5B:C3:31:8C:6F
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial: 04AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number: 04A7
Signing time: Tue 24 Mar 2026 23:37:45 +0000
Manifest this update: Tue 24 Mar 2026 23:37:44 +0000
Manifest next update: Tue 31 Mar 2026 23:37:44 +0000
Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: fULaz3s9Z3fFmHI+34l12izbD1mJSol/Tavp3HehfB4=)
2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: Ye+a8GT+XgDN4u+M9N9k3FjrUxRsvTyLwzxddvL9o4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Validity
Not Before: Mar 24 23:37:44 2026 GMT
Not After : Mar 31 23:37:44 2026 GMT
Subject: CN=69c32048-429b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:1f:86:2d:ca:52:57:f9:fe:b0:c2:6d:7c:
50:db:57:e3:e7:3f:22:70:12:50:ca:83:3c:e4:67:
3d:b9:98:5c:f0:a7:28:a3:5f:6f:b6:fd:ae:5a:2e:
91:7e:38:80:a7:7a:43:f8:38:d0:73:7f:1a:8b:6e:
d9:5d:f6:cd:56:e5:38:09:1d:f4:67:67:71:58:ad:
58:a4:10:fc:88:f1:9c:4e:ca:5e:ce:d6:18:5e:5c:
85:b4:46:7a:ea:76:b7:57:18:f7:90:e3:ce:66:7a:
a7:80:73:f9:57:69:6f:5e:e3:ef:81:72:3c:ac:5e:
82:3f:b6:07:76:54:95:36:0d:7f:78:b7:1f:91:1d:
35:f2:87:b5:f7:7c:97:5d:10:16:e3:ab:81:a8:45:
8a:e3:79:37:5e:f9:85:09:6e:fe:eb:ee:28:22:71:
a7:2d:ff:b4:ec:fd:c6:a7:53:bb:8a:30:65:79:23:
9d:af:aa:09:26:fd:30:fa:59:60:08:a5:21:2a:bb:
01:4b:90:aa:20:11:c9:86:f8:19:2d:b6:31:cf:51:
b1:f5:97:9e:74:0c:d1:11:29:82:74:41:48:9d:36:
9c:20:02:19:d2:23:04:d1:d9:11:54:c9:91:1b:86:
71:2e:68:c5:1d:90:91:69:86:80:80:15:0f:7b:19:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:67:48:39:7A:38:1F:4A:7E:21:54:6E:D3:4E:75:5B:C3:31:8C:6F
X509v3 Authority Key Identifier:
keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4c:3d:3c:c0:16:ca:6a:2f:50:80:d9:de:9e:dc:97:50:26:
84:59:41:9e:a5:a2:e2:90:ed:94:4b:b8:a4:91:05:67:71:3c:
2f:ad:c8:55:27:29:5d:16:31:05:01:b2:eb:d5:f7:3c:c9:69:
90:9c:f8:1b:9f:4e:7d:26:37:a0:c9:43:e7:66:bd:82:6d:8e:
9e:d6:c3:81:4c:f0:9e:e9:5c:27:93:e3:47:c5:fe:b1:4c:b4:
47:c0:64:9d:09:0c:e8:7b:05:67:28:cd:2d:82:2a:86:52:3b:
fc:c3:2f:cc:bb:de:85:98:5f:aa:47:10:9a:bd:73:e4:d1:db:
79:39:45:3f:23:97:c3:13:1b:c6:46:28:52:ee:5c:bb:09:0e:
a0:29:f7:57:21:03:3c:d2:70:83:08:30:0a:98:8f:17:52:fb:
07:54:a4:36:c5:dc:58:da:12:fb:17:70:74:51:f6:cf:e9:6e:
11:cb:8e:6e:84:51:2d:34:1f:54:80:38:df:66:d1:91:37:0c:
5a:96:86:79:a7:b4:ff:6a:30:8d:54:f2:6e:a1:0d:05:fe:9d:
9b:a6:3a:e6:f5:76:8b:4d:b2:3c:85:a0:88:b6:aa:a0:07:be:
8d:9c:3e:cc:8b:82:f8:31:02:49:7a:17:8e:42:5c:9f:58:90:
6b:4c:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:31 2026 by rpki-client