
$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json)
Hash identifier: 1HYg+YeGOkw3+fU60xSN9GRRadI0YhVF4KkABOrRy+Y=
Subject key identifier: B8:29:99:6C:F8:51:9A:1F:8D:F8:7C:76:94:77:98:1A:DD:CE:73:3E
Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B
Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
Certificate serial: 04F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
Manifest number: 04F3
Signing time: Sun 01 Mar 2026 00:19:41 +0000
Manifest this update: Sun 01 Mar 2026 00:19:41 +0000
Manifest next update: Sun 08 Mar 2026 00:19:41 +0000
Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: mfnmdVWnqFOWcKaGqS6WfZkzCrIKNrp3lU7iFc/63bg=)
2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: rjIRVt3ZGujRJRNz4p7iJVb8cLFrDLJrnOWwlAK/nqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl
rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
Validity
Not Before: Mar 1 00:19:41 2026 GMT
Not After : Mar 8 00:19:41 2026 GMT
Subject: CN=69a3861d-9f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:9c:ae:08:4d:10:a1:d2:98:48:86:85:73:
0d:aa:73:db:c2:98:d4:9d:c2:79:71:7f:a2:ef:73:
9e:d7:b7:31:cc:e6:83:f0:37:7d:8d:01:07:0c:11:
17:5f:2c:f4:31:4d:14:4a:35:24:2e:d5:26:e6:e9:
bd:32:7a:3a:78:97:90:5f:54:b6:a3:eb:77:72:6d:
9d:63:cf:e9:71:e5:59:2b:0c:8f:5f:c9:73:2e:dc:
6b:7c:b4:75:2c:ef:ba:1e:af:d5:df:3e:02:18:4d:
56:b9:67:3c:50:c9:4c:61:d2:5c:73:c2:93:67:b1:
16:65:17:62:5d:ac:da:6f:50:96:5e:78:a9:3b:bf:
71:a4:98:ac:d8:a2:84:3d:59:8e:51:7f:ac:9a:af:
0a:1b:7f:b5:65:8a:1f:a6:96:ef:6c:ed:cb:ee:88:
03:3e:2b:ff:d1:86:08:8e:8c:4f:6b:5d:9b:20:05:
6c:bd:45:1a:f3:ec:6f:72:82:e5:60:77:88:0c:94:
1a:c2:47:5a:36:ee:9a:99:e9:13:56:46:ab:0d:78:
39:95:20:a1:9b:b8:7c:39:98:36:b5:46:e9:da:d6:
a5:87:72:82:3f:71:f3:cc:49:51:c7:63:61:e6:19:
9a:cf:47:bb:60:36:f6:f2:16:aa:73:4e:d2:ab:0b:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:99:6C:F8:51:9A:1F:8D:F8:7C:76:94:77:98:1A:DD:CE:73:3E
X509v3 Authority Key Identifier:
keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ed:05:cd:6b:ef:0a:2a:48:be:a0:c4:ad:57:73:4a:11:47:
5b:e4:8f:93:f9:19:1c:f8:10:27:e1:6e:34:fc:78:e7:63:f1:
20:8b:9e:93:95:05:00:99:28:30:a6:d6:a6:0d:9f:07:a6:c7:
be:c8:1b:db:df:51:3e:5f:10:db:cc:80:f1:68:56:7c:90:f0:
f8:65:11:b9:c7:4a:03:30:a8:ad:90:9c:eb:36:38:b1:b7:8a:
11:93:22:a8:6e:c5:6c:c6:15:5f:21:2d:a4:b9:60:13:c7:62:
0e:3d:22:ed:1a:d0:89:42:eb:80:52:5a:02:de:cf:a3:de:f7:
a8:da:97:34:7a:8f:b9:3e:8e:00:06:f7:33:93:e1:d0:4b:15:
3e:57:3b:1d:ec:93:40:24:e1:a2:45:23:05:c4:12:bb:1e:07:
6d:80:c2:7b:2a:74:65:a0:b4:32:bb:4e:88:4b:53:04:d0:fb:
94:f4:80:46:c3:3f:50:94:44:a3:d0:6e:52:08:52:6d:21:a5:
75:96:07:b0:47:d9:83:1c:f1:48:ad:f1:fb:69:e1:7f:da:ed:
87:6a:4d:01:60:2e:ed:3c:c9:ba:8d:96:f8:96:a5:24:be:4f:
df:15:6f:33:f2:d8:44:11:86:db:a7:8e:2a:d4:e9:51:c3:a1:
bf:2e:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:00:33 2026 by rpki-client