
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier: k6yFkun0SqLiButF7N9XMFQmUT1i83fyX5tkGwmnwOU=
Subject key identifier: C1:F6:2C:97:8C:CF:C5:80:A4:74:6D:94:83:F7:38:00:00:89:50:84
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number: 028C
Signing time: Fri 27 Mar 2026 01:16:50 +0000
Manifest this update: Fri 27 Mar 2026 01:16:49 +0000
Manifest next update: Fri 03 Apr 2026 01:16:49 +0000
Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: ymjc2mKDVvZivg4YXDV9aslWzW3t8CtMirTSxByajns=)
2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: gD3cKaCeij6TV/lz5LfYhJg/3abihcMPlSP3fLdyyRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Validity
Not Before: Mar 27 01:16:49 2026 GMT
Not After : Apr 3 01:16:49 2026 GMT
Subject: CN=69c5da82-3474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:23:48:8d:4e:b7:6c:8c:de:55:3b:c5:c6:
fb:04:a2:63:10:b5:1c:2d:53:ff:39:63:6f:2a:6f:
d5:5f:c6:c7:62:1c:63:76:a6:0f:9a:1a:10:02:e7:
16:e8:5b:69:a0:de:b6:5f:ba:0a:7a:94:e1:80:c1:
b9:ff:6f:7c:02:e4:00:02:21:be:62:74:91:3f:b5:
3a:7c:dd:6c:8b:8e:ec:87:d3:f6:2f:53:06:78:04:
8e:49:e7:30:fb:ce:dc:27:3f:ae:6b:cf:ab:93:17:
64:9a:de:95:eb:48:4e:ee:05:b5:39:7f:01:71:00:
e0:96:06:90:fd:57:28:95:18:36:03:d4:8b:a3:51:
7e:61:7b:2a:03:66:aa:ef:85:c3:aa:9b:c0:e5:c1:
69:74:a3:df:f2:22:da:27:f1:a3:7f:04:af:51:dc:
2b:33:8e:80:71:13:6a:8b:40:2b:64:6b:d8:cc:35:
90:13:ff:a0:b5:0b:71:38:a5:7c:ea:9c:fe:76:7f:
66:89:15:93:6f:c1:c9:25:9f:80:eb:52:9c:b7:cc:
f8:c4:54:b8:e2:c9:95:ae:a2:e5:35:4f:e7:20:8a:
ea:9e:65:8e:7c:1f:12:46:bf:e8:1c:d5:0a:bd:f3:
b5:8f:60:21:02:ad:58:51:02:b4:d6:47:d6:1c:1e:
38:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:2C:97:8C:CF:C5:80:A4:74:6D:94:83:F7:38:00:00:89:50:84
X509v3 Authority Key Identifier:
keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:cc:f7:ef:80:d8:ce:05:b0:b6:14:8d:9d:e4:6d:58:4f:d9:
a1:40:83:c9:4e:b5:f8:a5:33:78:5a:cc:db:3f:d8:0a:1f:9b:
a0:5a:6e:57:28:b7:80:dd:13:50:64:ac:b3:bc:e0:5b:04:8c:
37:62:3e:0f:8c:79:43:05:27:a9:b2:c8:b9:57:9d:39:e2:58:
ec:29:ad:6b:9d:49:e7:3e:4e:51:6c:f6:5b:3b:19:7c:b7:bf:
60:bf:48:63:cc:fc:7f:d3:9a:5a:20:8e:f0:20:f6:ff:c2:24:
d3:71:2f:b9:fc:f7:b4:1f:6b:19:a6:e4:77:19:70:33:d3:37:
91:36:ba:06:3b:8c:72:66:56:2a:3e:37:9d:a9:4c:40:47:b3:
b6:6e:24:b8:17:97:da:74:7c:9c:14:1f:94:e5:14:ab:b8:59:
db:b4:0a:e8:96:0f:6c:53:e9:41:26:40:95:79:ff:44:3a:00:
f6:ac:03:7a:77:a5:9a:69:f7:30:89:99:1d:c6:5e:43:82:15:
5a:46:41:e7:fc:e9:2a:63:f2:0b:89:5c:37:0e:4f:69:93:3c:
45:7f:40:ff:e0:74:eb:27:65:ea:d3:0f:65:ca:36:64:06:20:
f6:cf:16:6d:65:26:3d:be:ec:3e:39:7b:3a:c9:12:a9:53:4a:
4e:7a:a5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:23 2026 by rpki-client