
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier: 5RjWG7Icy2OmhGyMASU/cje5gukiHGSyhObe1JZ3Tu4=
Subject key identifier: 69:C8:98:EA:72:17:B0:92:B4:09:EA:1A:87:79:49:54:49:42:4F:21
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial: 0B51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number: 0B49
Signing time: Tue 24 Mar 2026 19:02:24 +0000
Manifest this update: Tue 24 Mar 2026 19:02:23 +0000
Manifest next update: Tue 31 Mar 2026 19:02:23 +0000
Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: /P877yqNQDItvhUkDy4IJHbqsJ3oT2kVSiKhTNAur78=)
2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: runmHBxR1tD48gkbVs4lorKzW7FMtqLJ5VaCHiE1PLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2897 (0xb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Validity
Not Before: Mar 24 19:02:23 2026 GMT
Not After : Mar 31 19:02:23 2026 GMT
Subject: CN=69c2dfc0-3c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:d3:7d:a3:ab:c1:03:7f:15:72:98:70:a8:
63:58:6d:c3:92:e4:b9:76:c1:58:41:b1:ab:d6:3d:
8f:56:53:31:81:f8:49:b4:b4:d3:54:be:e7:94:6d:
37:79:ca:a4:83:40:07:f3:f3:d8:87:9e:8f:24:d8:
c3:b7:62:30:c7:27:b8:8b:33:12:94:6a:13:b2:36:
25:d6:81:38:70:26:c7:7d:3f:83:bd:32:ae:a1:b4:
84:40:ac:fe:2e:8b:bc:33:bd:aa:ea:2f:51:8f:eb:
89:c3:54:55:7a:cc:53:e3:4c:79:a9:58:bd:23:4c:
6c:8b:92:a7:7e:87:d1:cb:03:d0:41:20:47:3e:db:
c0:7c:e4:61:a8:30:73:1c:40:7e:b4:03:3d:de:17:
52:a7:d7:74:62:b5:f3:be:b8:71:47:f6:21:8f:30:
cc:ee:83:d1:d0:33:86:5e:9c:ee:90:90:ec:d2:ba:
11:59:14:f2:01:5f:9c:f3:19:df:31:72:9a:28:83:
3a:8f:03:3b:98:8a:2f:3e:de:f0:c7:61:ec:a2:3a:
03:60:51:5a:15:25:d6:80:23:b9:05:8a:a8:26:9a:
e9:01:3a:04:8b:f7:c6:8c:67:ac:aa:75:0f:2f:3e:
b4:e6:73:c0:3b:5d:13:ed:d4:b1:3f:ff:12:45:62:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C8:98:EA:72:17:B0:92:B4:09:EA:1A:87:79:49:54:49:42:4F:21
X509v3 Authority Key Identifier:
keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:72:4d:57:c1:cc:24:7b:55:65:a6:04:b9:0b:3d:2f:94:32:
d1:cf:45:bd:57:c0:c8:09:ec:fc:4b:28:13:f7:cf:6a:08:64:
29:09:46:0d:64:6c:6f:dc:33:23:7e:bc:dc:da:81:d3:3a:ec:
b1:fd:98:43:8b:59:45:a4:c1:ec:30:d3:93:ad:ea:67:9c:80:
9e:79:24:b2:37:04:c5:d2:c4:af:ab:3f:6d:a4:20:bc:d1:d5:
91:15:49:c4:bc:ab:8d:4f:6f:83:1f:45:d1:78:06:e1:74:d8:
f8:74:94:1f:18:b6:9b:c2:e0:42:f6:55:45:d4:d5:df:84:1a:
da:0e:b7:d1:e8:1a:9c:94:6b:00:f5:b8:b4:ef:b0:0d:ff:d1:
5d:06:98:34:1d:50:24:33:b2:bc:10:31:c8:ec:2f:1d:ea:ab:
dd:f8:6d:3a:ab:2f:6b:a1:a1:d0:84:c9:cb:14:f2:55:9b:87:
79:f7:46:0b:c3:46:3b:b6:64:e2:a9:cc:d7:23:5d:3a:56:41:
ea:c9:d4:68:4b:4f:16:42:51:b2:58:cc:cf:bd:a4:29:67:dd:
04:90:04:8e:4a:39:f9:cf:f0:ca:7b:76:10:84:74:6c:c0:e8:
14:24:ac:a9:1f:a1:27:3d:ac:28:e3:ec:2b:74:90:72:cd:f7:
59:35:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:59 2026 by rpki-client