
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json)
Hash identifier: O97VdOIvTplkz938l5Vui3s4zG5QOX17laaSa6aeUew=
Subject key identifier: BB:34:DA:75:A8:85:2E:AE:50:2A:57:4D:FB:10:B6:14:08:B0:62:36
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial: 07EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
Manifest number: 07C7
Signing time: Tue 24 Mar 2026 21:07:24 +0000
Manifest this update: Tue 24 Mar 2026 21:07:24 +0000
Manifest next update: Tue 31 Mar 2026 21:07:24 +0000
Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: oeiOhr1aPmcJJKsGUUadxkaHUdnHNeFOM/3IFJgfgeo=)
2: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: O5AVbvnVZjqQA6OOm+g39au0F7k+weJipxUFHaOitSM=)
3: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: 16fCyyu3FGqj1GcWiV0lV7AXEx4i1Ks1WA6kHv9SM/8=)
4: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: 560RMuoluxlApJN2nr5kfUaoRzeglq6Ca0yagA8ioUs=)
5: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: yUYTQZYUJX/RnoXpL57DC/VuGdfaUUJ5D52q+em+tNk=)
6: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: SHWsUcQscT+pHq2X2hNRRemgCGLDSc1tzPnVaTTYlj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Validity
Not Before: Mar 24 21:07:24 2026 GMT
Not After : Mar 31 21:07:24 2026 GMT
Subject: CN=69c2fd0c-9d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:05:d2:85:62:af:71:75:73:cc:6f:23:6f:
2d:06:69:88:ba:63:dd:00:cd:e3:71:52:41:09:d2:
f3:4d:6d:e1:b3:65:d2:6d:54:d9:1a:ab:38:be:bf:
5b:7c:c5:96:ad:47:f1:b3:e1:28:d9:5a:a0:7e:d8:
97:ca:ef:db:f7:bb:0f:24:e2:b8:41:68:c7:4c:27:
81:b0:c6:94:c1:03:a8:8a:2d:8a:db:34:f0:1d:d8:
66:04:73:cc:74:b4:52:52:fb:5c:fb:20:26:d6:95:
47:26:3b:a1:fa:44:43:86:69:75:98:8b:6c:4b:be:
ac:74:ab:49:88:0b:4e:91:14:97:91:52:9f:92:d2:
85:fa:cb:87:0b:aa:bc:59:b3:e0:19:a3:68:39:3a:
a9:0c:f6:a1:38:c4:4f:02:63:35:47:22:2e:3e:d3:
ec:a3:1f:20:5a:62:08:7b:da:e2:81:f7:d4:a2:62:
53:6b:bf:16:5c:6f:41:3b:cc:ed:88:e9:a7:8f:fd:
e8:44:6b:fb:2d:d7:66:df:65:55:18:68:59:3f:18:
46:de:0b:7f:8a:85:93:33:b6:66:cd:0d:ff:ce:c8:
48:53:9b:b7:0a:80:30:ae:46:21:e6:0d:b5:c0:50:
ab:d5:ff:e7:03:79:b6:15:0d:c3:b9:b8:d0:84:35:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:DA:75:A8:85:2E:AE:50:2A:57:4D:FB:10:B6:14:08:B0:62:36
X509v3 Authority Key Identifier:
keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:3b:72:e9:a8:ba:0d:15:0c:d2:67:04:98:ca:f6:fd:22:ee:
4b:c5:5e:9b:d5:ed:18:f1:89:0f:1e:a6:37:d1:2c:d0:76:77:
37:9d:61:03:c0:6c:86:ca:21:2d:74:cd:22:ec:b7:d5:89:f0:
a8:22:28:f2:d4:bc:c3:b4:e6:41:8a:6e:6b:f9:15:c1:55:74:
fd:17:a0:a5:31:d2:b7:c8:7e:ab:f3:87:c4:e4:37:24:b2:f2:
7b:7c:69:da:19:11:95:00:a5:48:4b:03:ca:b4:f8:ed:a6:17:
51:46:38:c2:45:74:d5:d6:df:67:b5:13:a8:22:66:5c:f5:01:
bf:a4:f9:41:00:f8:6d:97:f2:24:49:70:54:67:7e:c2:0c:f4:
9c:ed:7a:2f:8e:0a:d6:dc:52:a2:41:c6:1e:5c:a1:6d:c0:c3:
d3:51:56:cd:ea:58:16:02:a0:a7:71:9e:67:50:f5:8c:82:94:
c2:90:25:f4:63:2a:ea:12:b3:b0:28:9d:bd:70:84:87:4f:54:
5d:b4:b7:d1:72:60:df:1e:f0:0a:6d:89:c1:b0:35:ce:95:6e:
51:3e:de:29:43:87:19:cc:5a:48:32:87:7c:39:76:be:50:ab:
fa:db:fe:c9:42:e9:9a:ce:1d:87:2b:85:a0:7c:77:45:14:8f:
a8:98:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:48 2026 by rpki-client