
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json)
Hash identifier: qtcdkX+4MLSkhL7Q996nq1ze4F/RMaVMK5cDZ4M3SGI=
Subject key identifier: C2:9D:E8:BC:F4:A2:94:1F:9D:E5:88:4C:24:AD:F7:67:BD:61:CE:CE
Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
Manifest number: 01A1
Signing time: Wed 25 Mar 2026 03:27:18 +0000
Manifest this update: Wed 25 Mar 2026 03:27:18 +0000
Manifest next update: Wed 01 Apr 2026 03:27:18 +0000
Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: kmQEmU1g0tgGyxcew59fRfabWtzgrCxb176s806GpWQ=)
2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: +OOhEY2QYuVlJmHHeuO6Y/MNu74VTT7JnqNLcwMg9F4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl
rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB
Validity
Not Before: Mar 25 03:27:18 2026 GMT
Not After : Apr 1 03:27:18 2026 GMT
Subject: CN=69c35616-1143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:66:16:85:19:4e:c7:27:02:43:a3:c2:43:
45:dc:af:42:59:03:a3:5e:34:dc:de:65:4e:9c:20:
aa:91:a1:b6:8a:df:f8:2f:73:94:85:d9:09:b9:00:
20:a4:33:11:b2:b1:ea:77:7b:90:2a:11:94:49:57:
0f:de:71:28:f8:a9:1f:a0:75:71:6c:6a:95:50:20:
5d:9f:68:94:2c:dd:79:e5:b1:23:11:2c:19:3c:86:
e4:86:29:b8:08:b9:76:df:7d:92:c3:f4:7d:b3:30:
69:c3:b2:0d:36:bb:bd:ba:87:12:ab:8d:fe:54:b8:
bf:35:59:47:54:74:32:57:1d:c0:a5:bc:4b:a3:8a:
84:31:5a:c8:00:38:a3:4a:c9:4a:c6:13:27:b5:cd:
c2:03:e1:da:c9:e9:a9:4b:e2:51:85:43:cc:a9:f3:
6b:54:5c:02:b5:9c:33:bf:9d:66:71:a4:ec:10:e6:
ae:15:96:35:13:cb:ba:27:2b:20:42:63:1f:3d:d1:
cd:d6:fc:41:9a:81:19:cd:56:f8:12:9e:d6:7f:de:
67:ad:90:98:2a:68:b4:00:f6:68:7e:e1:02:4d:a8:
8e:e6:3b:b0:16:58:a5:b3:36:5a:d8:78:e1:30:10:
eb:a9:0e:f4:22:7b:a3:90:05:e4:78:ed:1d:d1:3e:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:E8:BC:F4:A2:94:1F:9D:E5:88:4C:24:AD:F7:67:BD:61:CE:CE
X509v3 Authority Key Identifier:
keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a0:b5:12:3c:a2:41:70:d8:5a:8b:a4:41:65:22:df:d3:4f:
1a:d4:ac:30:17:47:86:22:8a:86:43:ac:c6:1d:78:e5:66:28:
99:c8:8d:f9:ea:6a:5c:6e:f5:e1:ec:85:58:a7:6c:36:76:c6:
fa:5b:b3:de:ae:66:b5:5f:e7:1c:ea:19:a7:65:5a:fc:79:eb:
cd:70:97:59:a4:36:74:14:4c:8d:f8:95:7c:f6:1d:3a:34:92:
9a:95:07:b7:96:35:33:fc:83:a0:b3:b4:0e:08:c4:2d:de:91:
ec:f8:24:51:7e:9e:7d:b8:c8:60:bb:54:1e:23:61:49:47:51:
95:aa:ca:9a:45:8f:e5:63:65:fa:bd:1f:54:fc:36:fe:1c:dc:
ca:66:37:e1:ae:52:95:9e:ed:7c:10:5a:ff:68:33:a1:7a:f9:
84:64:b1:1b:3e:39:71:3a:ee:9c:d3:71:9f:b0:d4:e1:f1:1c:
89:2a:b4:96:8b:23:b1:91:fc:7e:01:62:97:07:ba:d3:fb:7c:
c9:22:00:55:b8:85:7d:3d:70:e8:f9:46:e4:59:f6:4b:34:f8:
34:9f:86:5d:02:46:ac:57:5c:c7:50:be:41:ce:ea:31:fa:74:
79:c9:41:53:ec:f2:41:27:57:fb:10:0c:0f:73:39:0c:83:af:
8f:80:a5:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy
Mzc4NDQ1Q0IwHhcNMjYwMzI1MDMyNzE4WhcNMjYwNDAxMDMyNzE4WjAYMRYwFAYD
VQQDEw02OWMzNTYxNi0xMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyb9mFoUZTscnAkOjwkNF3K9CWQOjXjTc3mVOnCCqkaG2it/4L3OUhdkJuQAg
pDMRsrHqd3uQKhGUSVcP3nEo+KkfoHVxbGqVUCBdn2iULN155bEjESwZPIbkhim4
CLl2332Sw/R9szBpw7INNru9uocSq43+VLi/NVlHVHQyVx3ApbxLo4qEMVrIADij
SslKxhMntc3CA+HayempS+JRhUPMqfNrVFwCtZwzv51mcaTsEOauFZY1E8u6Jysg
QmMfPdHN1vxBmoEZzVb4Ep7Wf95nrZCYKmi0APZofuECTaiO5juwFlilszZa2Hjh
MBDrqQ70InujkAXkeO0d0T6UcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKd6Lz0
opQfneWITCSt92e9Yc7OMB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC
REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC
WnoyMmFabUZJTmNqZUVSY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArKC1EjyiQXDYWoukQWUi39NPGtSsMBdHhiKKhkOsxh145WYomciN+epqXG71
4eyFWKdsNnbG+luz3q5mtV/nHOoZp2Va/HnrzXCXWaQ2dBRMjfiVfPYdOjSSmpUH
t5Y1M/yDoLO0DgjELd6R7PgkUX6efbjIYLtUHiNhSUdRlarKmkWP5WNl+r0fVPw2
/hzcymY34a5SlZ7tfBBa/2gzoXr5hGSxGz45cTrunNNxn7DU4fEciSq0losjsZH8
fgFilwe60/t8ySIAVbiFfT1w6PlG5Fn2SzT4NJ+GXQJGrFdcx1C+Qc7qMfp0eclB
U+zyQSdX+xAMD3M5DIOvj4ClTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:11 2026 by rpki-client