
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: 2G7XuC9zDEk7uKWTuwqs/rfEwkzdSGHCKbnB0OsAfF4=
Subject key identifier: 2F:31:A7:2B:BE:D4:12:78:8E:7F:34:8D:CA:65:17:0C:DB:40:FC:48
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 0368
Signing time: Wed 25 Mar 2026 00:31:47 +0000
Manifest this update: Wed 25 Mar 2026 00:31:47 +0000
Manifest next update: Wed 01 Apr 2026 00:31:47 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: D7uHaF6CK98IVF7LtQIFteLZ5w+YA42QhHFSYtRa1dA=)
2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Mar 25 00:31:47 2026 GMT
Not After : Apr 1 00:31:47 2026 GMT
Subject: CN=69c32cf3-816e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:30:0c:84:14:5c:dd:ea:83:66:30:b6:a3:
75:20:0e:a3:75:1a:c5:14:91:28:51:ac:0e:19:d5:
84:1f:b7:1f:70:d1:3a:96:d0:e2:d7:37:f4:97:3b:
45:74:76:22:c4:2e:30:c9:47:ec:17:f8:52:c0:c5:
2e:e3:12:d9:fa:34:dd:b6:ab:e6:7c:47:f0:8b:43:
13:b9:24:af:75:83:2c:f8:2a:3a:40:3a:ce:9b:79:
aa:0b:49:08:74:b0:76:9d:ea:1c:4d:fa:e8:ae:fa:
4a:a1:08:59:03:ed:15:88:fe:8f:9a:d3:c0:1e:e7:
a1:b5:ba:3d:ec:a5:31:14:61:19:ed:c8:cf:2a:66:
8b:08:98:a2:f5:8f:ed:a8:cb:97:c4:69:d3:a6:4c:
5c:21:16:54:9a:56:cb:98:3a:93:8f:4b:4f:fc:41:
fe:41:17:16:b0:b2:a4:fa:5f:f4:7b:50:7f:9b:ec:
4b:a7:c7:24:be:c8:b8:ed:24:25:5b:aa:0b:bd:93:
2a:59:8f:2b:18:73:ec:85:4e:17:ce:dd:96:ae:5a:
03:26:3c:df:52:fd:68:26:73:f0:bc:eb:c3:1b:57:
e7:25:9a:22:5b:89:e6:a5:88:cb:fd:36:f3:67:a1:
6b:dd:8c:e8:e2:3d:08:9b:71:d9:00:c7:9d:4e:b4:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:31:A7:2B:BE:D4:12:78:8E:7F:34:8D:CA:65:17:0C:DB:40:FC:48
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:63:2d:e5:8c:45:7d:a2:a2:34:55:ab:b8:fd:3f:c9:d4:99:
cf:29:66:ba:ca:1b:86:5f:84:f1:14:3a:41:13:5d:e4:5d:b0:
4b:eb:51:e2:cb:fc:c3:05:2b:43:fb:8c:5e:7c:62:1f:26:bf:
70:2e:25:6a:b5:3d:34:af:8f:81:9b:45:ae:76:db:82:5b:7e:
81:59:db:7b:b8:53:18:87:a9:aa:c6:50:9c:68:e6:73:16:3d:
2c:81:06:45:c9:7a:7c:7f:fb:1e:ff:2a:26:b3:5b:f1:64:e9:
e3:bb:ff:eb:8b:96:c2:07:c5:e0:50:b7:4e:84:4f:0e:82:5c:
1b:d1:c1:93:49:c8:bc:2a:2a:75:c5:fb:50:0e:fc:c3:6f:28:
cb:a6:1d:03:0e:fb:ac:24:7a:18:7c:aa:ae:04:2a:91:ec:1c:
40:b0:40:57:07:37:0a:06:09:aa:6c:fc:1f:c1:ab:78:b6:5b:
2c:38:28:4d:cb:f7:45:e9:8e:3a:a7:44:ef:7b:80:1f:6c:be:
1f:ce:bf:7c:0f:64:bd:37:a2:ba:af:fa:78:28:71:98:92:d5:
99:11:79:04:b1:0f:2c:70:9d:fa:39:80:0b:8c:3a:aa:04:65:
6e:c7:68:1f:5b:bf:d4:9f:e6:e1:40:41:4f:1b:54:d4:22:58:
ea:d1:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:48 2026 by rpki-client