
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier: /4BIoY0+1mn+vBjJdQNknAQ4ofUr0WteRKaM2V9A+cc=
Subject key identifier: 27:04:E5:75:40:82:26:87:28:E1:1A:AF:88:89:D2:C6:8F:37:F9:EC
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 35AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number: 3572
Signing time: Thu 16 Apr 2026 14:57:54 +0000
Manifest this update: Thu 16 Apr 2026 14:57:54 +0000
Manifest next update: Thu 23 Apr 2026 14:57:54 +0000
Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: MFm6sFeXiPTXKZnYJhSmKgHRJhdbsTGF5KSW1hZjl48=)
2: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: HFHk/hNjIZnEhj8GBFjikKlxt61+w/Nh1n84ChzN2oY=)
3: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
4: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
5: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13739 (0x35ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Apr 16 14:57:54 2026 GMT
Not After : Apr 23 14:57:54 2026 GMT
Subject: CN=69e0f8f2-c17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:6a:34:86:9e:e2:60:04:83:23:bf:e1:31:
60:40:e8:d4:b4:c3:ed:4a:19:99:5e:ea:6a:db:eb:
bf:78:df:f2:f7:ff:ed:22:90:a1:1c:37:bf:93:1c:
be:8b:63:f9:5b:4a:b3:91:4f:eb:f1:16:f4:f5:05:
a0:3f:4b:05:1c:c4:f6:9d:07:49:3b:3a:7a:a4:e7:
fd:0a:ed:f0:fd:ed:82:6b:d3:e1:ab:b1:8b:20:9e:
4c:7e:05:fc:d0:4d:9c:16:d1:11:ae:61:e5:a6:3d:
de:53:67:fe:dd:ae:a8:95:82:f3:eb:e8:94:57:5c:
4e:1e:e9:9e:47:94:8e:53:f9:60:57:ca:43:cd:1f:
7d:c3:22:5f:ca:b1:b6:67:09:3c:82:36:da:f0:30:
2f:26:e2:42:5b:74:3a:32:96:0a:14:d5:58:47:76:
f5:56:2c:5d:fd:bf:71:ba:f2:f9:9c:df:cb:95:4a:
19:ce:f3:3c:ac:30:13:9b:ec:dd:13:f5:3d:23:a2:
39:37:cf:26:d4:79:ef:d6:6b:67:70:85:6c:5a:6a:
de:53:ae:27:c5:c5:19:30:ac:57:8b:17:cf:36:7c:
23:a1:3a:0f:70:4a:bc:24:9b:f2:e0:bd:41:90:fe:
26:e1:fc:c3:68:32:9a:b9:e2:ad:24:22:82:09:8c:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:04:E5:75:40:82:26:87:28:E1:1A:AF:88:89:D2:C6:8F:37:F9:EC
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d9:1c:d1:28:d7:38:f3:c2:ba:10:b4:a4:de:62:e0:65:9a:
da:fe:92:df:0f:2e:d8:14:8b:38:64:89:47:09:b9:1b:4d:7a:
54:ab:67:9a:c2:96:69:d2:07:58:e7:f7:22:37:27:fc:c5:bb:
46:bd:b2:77:0c:4f:d3:1d:95:23:d9:ab:a9:a2:45:1e:59:75:
e0:69:f7:55:24:dd:73:39:ef:25:66:5a:90:5c:99:79:b0:73:
bf:52:b1:26:33:9b:5f:79:c8:e8:6d:6d:c1:d1:8a:aa:4e:1f:
25:30:a3:0d:72:6a:25:63:37:10:f9:bd:40:10:4b:42:65:49:
bd:61:df:31:3c:06:01:be:5c:0a:92:9a:45:ab:c7:69:36:39:
65:65:94:94:ac:c5:57:e8:ba:af:a4:ff:8e:45:70:07:0e:39:
2c:c2:a5:4f:49:7f:32:81:a9:1c:37:0c:df:5f:00:8b:91:38:
a8:99:45:d3:ae:80:f7:4b:c6:f3:0f:6d:e9:da:39:d5:ca:a4:
b5:2e:79:4d:55:09:29:6a:30:c6:e2:57:a7:ef:14:12:d4:f1:
96:39:7c:b2:78:2c:f9:fb:e6:4a:31:44:da:93:30:13:39:d7:
fa:35:12:4e:38:e7:b3:f3:ee:cc:fa:b5:72:a6:08:6a:3a:0a:
ad:93:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:33 2026 by rpki-client