
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier: 1QKiqFyJR3Oob2kpygzxOjfmK8S/O4sa5e/7hzOJfZg=
Subject key identifier: 78:5B:0D:CC:3B:C4:7C:35:D8:DA:FD:F5:54:57:8E:36:B3:AF:D7:1B
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial: 0D24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number: 0D19
Signing time: Tue 12 May 2026 18:08:21 +0000
Manifest this update: Tue 12 May 2026 18:08:20 +0000
Manifest next update: Tue 19 May 2026 18:08:20 +0000
Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: vZJTfaKNzDk+1XoSXLMorrn7prFXIjVffnn+XOOOSvg=)
2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Validity
Not Before: May 12 18:08:20 2026 GMT
Not After : May 19 18:08:20 2026 GMT
Subject: CN=6a036c95-69dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:11:93:0c:83:03:4d:61:d9:a4:0f:f9:cf:
4e:57:b9:13:11:3d:ab:74:5b:d2:eb:ab:7d:c8:25:
6e:be:b5:92:2c:2f:0c:e3:83:b9:9e:d0:b8:64:46:
d8:ae:93:c1:46:d0:c2:f9:a1:a3:14:d1:bc:8b:17:
f0:51:44:ea:b4:ba:23:91:e8:5c:12:d9:33:09:33:
2a:13:5e:fc:5c:df:46:ba:e2:c8:c5:d2:a1:d2:70:
da:e6:a6:5a:bb:68:69:78:a9:02:70:a7:07:01:80:
eb:84:6e:bb:1d:91:c3:68:3d:b6:c8:0c:0e:5e:f7:
b7:aa:d6:94:17:30:13:cb:cf:64:67:bf:22:af:71:
f7:00:be:18:a7:f8:fa:0d:3c:02:12:15:7a:07:0d:
01:7d:e0:6d:88:3c:b4:2e:78:47:92:b3:b9:2e:2a:
45:9e:17:d7:81:54:cd:b7:d8:02:2e:ff:32:3c:85:
52:ec:26:fe:c5:b5:9f:e1:ef:e9:a4:dc:ca:92:d2:
41:6d:bc:97:94:5c:2a:41:e5:c4:1a:b5:db:d3:0e:
50:fb:4d:08:ae:5a:35:1d:62:e2:75:3f:6f:a1:54:
f7:d8:54:9e:89:04:3c:39:f4:90:5e:7d:02:74:75:
1d:88:4b:19:ee:5b:af:21:4f:b0:6f:f9:d0:5b:97:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:0D:CC:3B:C4:7C:35:D8:DA:FD:F5:54:57:8E:36:B3:AF:D7:1B
X509v3 Authority Key Identifier:
keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dc:70:d1:3b:d5:d1:1a:e4:36:72:d8:98:ea:8d:3f:7b:5f:
e5:52:99:dd:f9:10:d8:5c:88:38:8c:d6:cd:20:ae:fd:65:2c:
0c:53:dc:6a:7f:d3:9f:82:4d:68:d3:ed:be:c4:36:82:92:44:
e8:ad:fc:dd:62:a1:ed:51:36:4c:1d:1a:37:96:d2:51:bd:e7:
9a:36:df:53:01:27:52:3c:02:75:1d:61:d6:f0:bf:b8:15:fc:
34:e5:8d:45:52:51:66:54:cd:13:b2:db:88:58:0c:87:10:69:
5c:70:b6:b9:cd:71:50:d6:66:cb:cc:db:58:d5:20:b5:2b:bb:
b7:0b:3c:de:6a:9c:e0:b2:e5:25:80:5f:e8:1b:ee:de:e5:af:
f5:67:19:f4:f4:09:c2:ff:39:a9:a5:e7:8f:bb:66:d2:f3:e1:
99:d8:8d:61:0a:01:f8:76:39:68:1b:bb:ee:1c:7a:7e:c7:2b:
85:eb:a6:1e:01:f0:75:25:9c:be:28:a5:f7:3d:12:8e:35:87:
69:4c:d1:50:e8:be:f5:70:ff:04:de:a1:e6:76:37:f9:18:d6:
e9:e2:d6:4d:b2:7f:18:80:b2:8f:a1:52:d1:27:7d:ca:56:ff:
07:7a:8c:aa:cc:37:28:6a:13:48:5d:06:99:69:67:82:a7:b3:
b1:6e:52:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:28 2026 by rpki-client