
$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json)
Hash identifier: teXsKwSa449X6PO9YHraZ7W0dvgvfJ9erVTE0s5jsr0=
Subject key identifier: 70:F7:67:B2:99:9C:EE:57:99:2F:32:8C:59:8B:FC:A4:21:CF:9B:9F
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial: 352B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
Manifest number: 3525
Signing time: Tue 24 Mar 2026 14:30:55 +0000
Manifest this update: Tue 24 Mar 2026 14:30:54 +0000
Manifest next update: Tue 31 Mar 2026 14:30:54 +0000
Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: H7DxNhxIgXIAgXk7spQ0PX+MUs3EIJ7H+IWRPf88xhI=)
2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: dHpbJyK8suDbnnygvI/o8tYg8g6m0K1aNvWHPIFhZAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13611 (0x352b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Validity
Not Before: Mar 24 14:30:54 2026 GMT
Not After : Mar 31 14:30:54 2026 GMT
Subject: CN=69c2a01f-6575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:e8:01:49:5c:95:78:a5:7a:aa:62:68:73:
0c:73:42:88:85:e0:e9:60:8b:02:84:02:1b:d0:14:
7c:6c:66:b8:2f:01:bd:f4:d1:56:f9:4c:47:37:89:
c3:a7:4e:bb:de:d7:7f:f3:bc:6b:a0:4f:43:fb:8d:
b6:b5:7a:c5:19:f7:94:b9:25:9a:18:81:16:03:38:
47:ce:8c:e9:4d:a7:eb:f5:a4:46:9d:83:fc:f6:96:
97:17:b2:40:b6:ba:9b:9a:e9:c8:72:e5:c6:e7:e5:
2d:36:52:e6:b7:1c:f6:62:36:de:ed:d2:d5:52:47:
3f:27:f9:07:98:77:af:0c:d6:01:9d:65:dc:62:ff:
9d:cc:16:91:bb:c8:b6:a8:5a:c8:bd:16:85:2b:f9:
8c:d9:c3:73:15:19:e0:9f:41:70:1d:df:20:d9:8d:
b1:02:95:b6:3d:8f:25:f7:a3:c6:1b:d0:d9:39:df:
f3:09:4a:38:41:ce:4d:7d:ef:26:f5:c5:72:5d:a3:
ed:be:cd:f0:fd:0c:12:d3:b9:7d:93:4f:db:cb:d3:
ab:0a:73:d2:64:ee:57:c3:04:70:9c:8e:20:b6:b1:
b6:94:e1:de:c2:3f:c8:b7:99:b8:19:fd:ff:d6:31:
91:35:85:ff:56:2f:8b:e2:50:72:2e:f2:56:e5:1d:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:67:B2:99:9C:EE:57:99:2F:32:8C:59:8B:FC:A4:21:CF:9B:9F
X509v3 Authority Key Identifier:
keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:fe:cf:2c:97:49:09:43:0b:7a:5b:fd:79:68:54:1e:9d:
fc:9c:d9:9c:68:23:c1:aa:13:f6:ba:42:4a:d1:aa:1c:5f:97:
e9:3d:06:d5:a8:be:be:38:26:2f:f7:08:f4:ac:8f:6e:4f:83:
fb:e7:bd:a7:e4:de:f6:c9:bd:f0:bf:f5:67:d1:ff:08:5f:03:
51:3a:57:43:bc:32:f0:bf:67:53:81:25:fe:37:c2:af:59:ed:
58:ed:7a:e2:fb:7d:d9:9a:6b:3b:6b:b9:17:28:4b:b1:e1:92:
cc:8a:96:09:56:62:4f:31:f9:34:5c:ae:e1:8b:7f:83:5e:60:
95:ac:ad:f6:12:e9:aa:02:b3:94:e8:d6:d5:54:12:2d:15:4b:
42:af:88:70:25:25:d5:82:2b:3f:ac:54:c9:2a:9c:57:06:ff:
37:70:3f:26:36:67:86:65:3b:59:f7:ff:04:a4:4d:51:fe:81:
23:32:d5:07:5b:78:c8:8d:01:3c:0b:4e:9c:d8:bc:b1:75:f8:
41:c2:b8:e4:78:cf:6b:e6:33:90:8a:f2:25:af:d4:d5:4d:83:
ca:ee:09:ad:3f:c6:8f:f6:6f:ba:40:01:ae:30:82:7d:68:c7:
c2:b2:c2:3f:65:39:9a:24:b3:61:bb:99:42:6e:f0:34:e5:b7:
31:15:95:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4
N0MzOURDNjcwHhcNMjYwMzI0MTQzMDU0WhcNMjYwMzMxMTQzMDU0WjAYMRYwFAYD
VQQDEw02OWMyYTAxZi02NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovboAUlclXileqpiaHMMc0KIheDpYIsChAIb0BR8bGa4LwG99NFW+UxHN4nD
p0673td/87xroE9D+422tXrFGfeUuSWaGIEWAzhHzozpTafr9aRGnYP89paXF7JA
trqbmunIcuXG5+UtNlLmtxz2Yjbe7dLVUkc/J/kHmHevDNYBnWXcYv+dzBaRu8i2
qFrIvRaFK/mM2cNzFRngn0FwHd8g2Y2xApW2PY8l96PGG9DZOd/zCUo4Qc5Nfe8m
9cVyXaPtvs3w/QwS07l9k0/by9OrCnPSZO5XwwRwnI4gtrG2lOHewj/It5m4Gf3/
1jGRNYX/Vi+L4lByLvJW5R0LNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHD3Z7KZ
nO5XmS8yjFmL/KQhz5ufMB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE
ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk
OTJKYTl4eTdlVXVIdzUzR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAENr+zyyXSQlDC3pb/XloVB6d/JzZnGgjwaoT9rpCStGqHF+X6T0G1ai+vjgm
L/cI9KyPbk+D++e9p+Te9sm98L/1Z9H/CF8DUTpXQ7wy8L9nU4El/jfCr1ntWO16
4vt92ZprO2u5FyhLseGSzIqWCVZiTzH5NFyu4Yt/g15glayt9hLpqgKzlOjW1VQS
LRVLQq+IcCUl1YIrP6xUySqcVwb/N3A/JjZnhmU7Wff/BKRNUf6BIzLVB1t4yI0B
PAtOnNi8sXX4QcK45HjPa+YzkIryJa/U1U2Dyu4JrT/Gj/ZvukABrjCCfWjHwrLC
P2U5miSzYbuZQm7wNOW3MRWVmg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:57 2026 by rpki-client