
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
File: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json)
Hash identifier: H0eQAbmx6TWKJ7knfTEkbDk3Ns4SQ8MaoG6YhJuXnAU=
Subject key identifier: E4:DD:9F:E9:BA:7E:EB:35:55:EC:E2:05:97:3B:B7:43:7C:EF:E4:D4
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Certificate issuer: /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
Manifest number: 028D
Signing time: Wed 25 Mar 2026 01:11:40 +0000
Manifest this update: Wed 25 Mar 2026 01:11:40 +0000
Manifest next update: Wed 01 Apr 2026 01:11:40 +0000
Files and hashes: 1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: +yGAayFQe3X5oEYCVO8lFyJHmOloSoN3q5lQeiUWtp0=)
2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: H39g8dr+SeKDcbalwcxYhJxFV4J5TXxdT3MCN2geYeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C1A2, serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Validity
Not Before: Mar 25 01:11:40 2026 GMT
Not After : Apr 1 01:11:40 2026 GMT
Subject: CN=69c3364c-cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:fc:df:d8:84:40:14:3e:a5:c0:30:9a:03:
86:87:14:cf:57:29:53:5e:2f:01:ec:0d:9d:04:ab:
6a:ab:32:dd:b8:34:66:7f:1a:00:25:f3:96:df:47:
72:c4:7f:98:ac:c2:4b:59:40:ab:1e:5f:11:ff:f7:
04:15:c7:b7:28:cb:05:a2:86:3c:7d:0b:f3:b5:2c:
e0:60:d6:49:a4:e7:c1:ff:d3:e5:1b:90:7f:cf:80:
96:8c:cf:06:d1:e9:3b:1e:07:f6:85:76:31:03:5a:
03:5e:1d:87:5e:1c:87:e8:ca:00:5f:d8:c6:74:f1:
b4:df:5c:e6:7d:32:0b:7a:13:ad:5d:16:f0:4e:ad:
38:fe:09:5c:66:b8:6f:f5:71:bc:bb:46:fc:7a:b3:
e3:90:0f:14:02:a4:2b:b4:13:50:83:b2:06:a2:c2:
64:86:9f:53:e9:77:d2:83:f5:cb:d5:31:24:19:76:
c5:07:84:a6:0c:cb:08:4d:25:5d:54:0b:d6:b5:9c:
a9:37:8a:ed:a4:08:e3:bf:a7:c0:af:47:43:f5:85:
01:f1:35:16:0c:a2:4b:7b:fe:ac:70:e7:e4:c5:32:
3e:5c:00:b3:d8:64:0e:63:65:de:c6:f1:9a:48:76:
0b:c7:9c:fa:27:70:f6:ac:26:e3:32:b3:4c:68:e0:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DD:9F:E9:BA:7E:EB:35:55:EC:E2:05:97:3B:B7:43:7C:EF:E4:D4
X509v3 Authority Key Identifier:
keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:52:b5:59:92:4b:31:30:32:2d:a2:bf:29:64:ae:e2:08:d9:
75:49:fb:27:22:b6:97:96:3e:f1:fd:9c:a5:f7:dc:56:cd:a3:
a8:2c:9a:14:e5:f2:27:e8:13:62:c7:cd:54:f9:f4:4a:5a:f7:
d2:5a:ac:5a:e3:30:af:2a:79:b7:62:a9:87:f4:62:b7:69:41:
3b:28:68:77:f6:5a:5d:2e:03:c6:26:09:29:96:e2:cb:19:1f:
c0:84:14:cb:dc:fe:97:a0:21:86:48:1c:18:cb:43:95:98:b1:
27:be:0c:19:ce:65:6d:81:7c:73:92:79:32:7a:b4:8b:9a:25:
e0:70:c0:1b:c4:b7:76:45:7b:90:47:a9:28:f9:df:21:fb:01:
fc:df:a2:bb:04:19:44:a1:53:58:63:2c:5d:6b:ca:d7:91:7b:
61:4e:29:c0:e5:b8:43:ca:5e:17:d6:22:0c:0b:cc:1e:7d:a6:
b3:26:05:65:f0:4f:c1:d7:6a:8a:71:79:e2:e5:75:33:d1:0d:
0c:93:a3:67:8a:08:67:a4:9d:45:11:96:1b:71:dc:06:85:9a:
0d:99:69:c4:24:e7:be:8f:f5:44:93:25:49:cb:79:61:ef:90:
80:9c:51:f1:6c:0d:23:27:3c:07:64:2d:b1:64:e1:fe:d8:78:
87:4d:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:53 2026 by rpki-client