
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
File: VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json)
Hash identifier: faBkc/FkIGBIlOHcoHAiljcCpWj/Cwxc0+1pe/Puw0Q=
Subject key identifier: 98:05:B7:2B:A3:11:64:FA:10:43:6A:32:CD:FA:66:17:E8:11:80:18
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial: 06B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
Manifest number: 06A8
Signing time: Tue 24 Mar 2026 22:08:06 +0000
Manifest this update: Tue 24 Mar 2026 22:08:06 +0000
Manifest next update: Tue 31 Mar 2026 22:08:06 +0000
Files and hashes: 1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: RHKHwHK3zGkYdOApBcXqlF+OO26gdL1V67Zw9uwrrZw=)
2: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: ftbUf7d1dxy4HPxyOc8VeUAscQ6waTvpR4D/yI1qLzw=)
3: BA9447BCA7D111EB8F85BA22C4F9AE02.roa (hash: G5KtMwriq0N6l25zffNg7VVDY9p7lXbgrSGO9joeZg4=)
4: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: 9cs2YHfBiZAsHcT0rcWwzMgGI3sfprOUnMUWHbiLiM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Validity
Not Before: Mar 24 22:08:06 2026 GMT
Not After : Mar 31 22:08:06 2026 GMT
Subject: CN=69c30b46-5b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:df:0a:0d:b1:51:c0:17:06:b6:cd:42:cf:
1b:b4:c2:46:4f:d6:31:b2:46:e9:86:32:00:2d:f9:
61:38:cb:a3:fb:8a:af:fc:f3:e6:02:3d:4c:36:4c:
47:86:ad:fb:23:12:95:f6:0c:75:9b:d3:72:2c:ed:
4e:be:64:66:c3:a2:dc:99:5f:9b:52:a9:a8:f1:70:
6c:1c:c2:17:f6:7a:23:c8:07:1d:5a:f0:8a:39:20:
db:56:02:55:2d:ad:40:52:f9:77:85:67:ee:51:ad:
b1:2b:96:77:91:25:3b:29:29:b0:1d:b4:c2:74:ca:
fb:64:13:c0:4e:bd:f8:c9:51:97:50:36:b5:a5:ec:
8d:62:2f:c9:00:a8:8a:3a:e6:6e:63:38:61:fb:08:
40:64:ea:44:05:fa:0f:54:2f:3c:e4:ef:8b:4f:e5:
6a:d8:ba:39:5d:79:a4:69:24:2e:30:80:2d:db:e4:
92:a1:60:fd:f5:32:9a:42:1a:9e:7a:e5:09:df:c4:
17:fa:44:f9:a9:20:88:f9:3f:4a:32:19:86:e3:f6:
f9:47:e2:20:c2:4f:15:d4:8f:8b:0c:23:94:d0:b5:
fe:30:52:8f:6b:61:bb:1b:d8:13:72:a2:d3:7c:de:
6b:90:2a:36:c9:ba:e1:e2:b0:07:1e:b0:8c:f8:65:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:B7:2B:A3:11:64:FA:10:43:6A:32:CD:FA:66:17:E8:11:80:18
X509v3 Authority Key Identifier:
keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:2b:af:6c:51:c2:d0:89:ba:1f:c0:cf:5c:2a:53:bc:14:
74:04:67:c6:f2:b2:1e:b8:82:15:cb:bd:c1:fc:80:69:05:1c:
3d:e3:af:97:5f:ca:da:ed:c7:4f:74:14:5f:c7:75:cd:6d:26:
96:82:00:a8:4e:7c:2e:90:51:ca:99:d0:6d:1e:44:b5:32:96:
05:a0:1b:1f:9d:b1:b3:d7:64:b1:0c:40:f5:8e:d8:27:85:43:
ec:b1:06:bd:6c:ca:4f:07:b0:94:6e:8d:d0:be:07:a9:8d:4b:
c1:93:c0:30:97:05:ea:7d:e7:26:2a:c6:f8:11:94:0a:9c:84:
62:db:cd:56:56:b4:6f:c1:c2:6c:f9:56:ef:1e:68:76:74:80:
61:08:01:a7:cb:ec:92:d7:cc:7f:49:96:8d:63:f8:36:4d:11:
a8:96:77:8d:54:94:bb:69:56:e3:a0:b4:0c:73:68:dc:b5:e1:
07:74:93:ea:6e:92:37:c9:ed:8e:af:50:95:63:3f:ec:e2:a3:
20:97:54:2f:50:cc:fe:80:ca:a3:9d:05:8e:d6:40:a7:46:a2:
5c:83:be:c5:34:c7:e2:5a:69:92:14:aa:e0:5b:48:69:a1:10:
cd:1a:48:d0:30:0a:40:9c:d9:3e:9a:77:f9:18:1e:09:c5:9c:
80:61:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:29 2026 by rpki-client