
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json)
Hash identifier: VopOJdkSJxi/uvRiLZS5/IF38ZXN+NOqR+TnOYX2A3k=
Subject key identifier: 62:22:69:10:31:A4:AD:91:8F:BA:97:34:83:87:1B:11:6B:8B:12:B0
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial: 04E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
Manifest number: 04D3
Signing time: Tue 12 May 2026 23:56:43 +0000
Manifest this update: Tue 12 May 2026 23:56:43 +0000
Manifest next update: Tue 19 May 2026 23:56:43 +0000
Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: f++DAjrFfkPwKlzEk9c/rzVPA1p4YRM6b9SR1e0+Iuo=)
2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Validity
Not Before: May 12 23:56:43 2026 GMT
Not After : May 19 23:56:43 2026 GMT
Subject: CN=6a03be3b-0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:9d:31:27:4e:c1:b6:fc:a6:61:2f:e3:e9:
01:29:1b:73:87:ee:94:47:4e:43:04:32:3f:da:d1:
b8:06:f5:35:1d:2c:b7:22:47:44:4c:68:ee:b1:80:
99:8d:9d:ff:2a:a3:b1:f0:ff:8b:cd:88:90:87:67:
96:4e:52:2e:ec:03:25:6e:1f:36:da:f8:08:b0:f7:
6e:c1:e7:13:a2:a8:0b:13:97:33:6f:7d:e5:45:c8:
7f:47:b2:f4:ab:85:6d:11:f4:68:fd:53:d1:2c:03:
c1:ce:c9:de:d7:db:76:7a:a6:53:16:19:ec:58:a7:
40:fc:d1:5b:c8:1b:c9:58:12:4e:bb:6f:77:f6:a7:
fb:31:9c:26:57:e2:f8:85:36:33:c5:90:ae:bf:b8:
f0:7f:3b:79:ca:8c:04:52:fc:41:c1:b1:1f:a9:78:
70:25:91:9b:13:45:ae:c6:4c:c2:55:1c:77:44:f1:
68:06:a6:16:c0:39:ca:cb:c1:84:3b:2f:6a:b3:b2:
03:e5:60:1f:5e:f0:02:4b:22:6f:36:8a:a6:e7:fe:
33:42:55:89:94:3a:99:c4:a7:1e:cd:42:cd:fa:c3:
37:82:1b:8c:fc:dc:f0:4a:98:d8:ea:e3:b0:19:ee:
bc:fa:56:71:48:4d:8b:f0:b8:08:67:3b:4c:06:7c:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:22:69:10:31:A4:AD:91:8F:BA:97:34:83:87:1B:11:6B:8B:12:B0
X509v3 Authority Key Identifier:
keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:35:16:20:eb:71:99:71:1d:05:f2:54:72:57:73:18:61:80:
39:07:c3:e4:54:56:3c:cb:9a:47:d5:7b:35:c2:0b:4b:62:04:
d9:0f:c9:16:69:20:42:f2:fe:71:78:9f:13:3b:11:ca:fc:f3:
c9:2b:e3:e6:61:e4:eb:01:50:13:4d:17:61:f0:70:26:c6:cb:
10:e8:77:11:a5:c2:c1:7f:81:01:10:fe:bb:f0:3e:c1:f0:a0:
78:ea:bb:87:2a:1c:cc:a2:5d:d8:bf:3f:a1:4c:92:d3:d5:09:
88:8e:1d:88:ee:8d:cb:94:42:9f:d8:86:3c:cc:d0:c7:f5:cf:
52:ae:23:58:56:84:bc:b4:c5:67:d9:65:4a:b9:c3:ac:75:1c:
ff:5b:f6:9c:8f:cb:db:56:1a:35:20:af:1c:4c:34:97:eb:ca:
76:04:86:d2:93:73:e4:f3:3d:bc:44:52:e7:3f:a7:13:a3:02:
ec:d1:e5:84:57:89:31:d4:f5:5f:84:9f:65:3c:30:24:6a:f9:
d1:29:e7:23:c8:92:0f:16:49:c0:0a:7f:35:be:ac:8c:22:77:
49:04:46:f9:a3:63:aa:a0:06:92:ed:cb:8a:03:2a:69:7a:8d:
6b:bb:ee:12:0f:5c:73:68:68:ad:16:49:42:38:43:a1:8f:0e:
58:bc:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:12 2026 by rpki-client