
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier: ZfvNYNIetqrbuh7SK68Tz3XAGywEaP2GKWHQkNC7zHA=
Subject key identifier: 52:FA:E3:1F:80:55:51:88:91:9E:A5:5E:AF:5C:4D:48:F7:A4:FA:AA
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number: 0140
Signing time: Fri 17 Apr 2026 05:03:46 +0000
Manifest this update: Fri 17 Apr 2026 05:03:45 +0000
Manifest next update: Fri 24 Apr 2026 05:03:45 +0000
Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: Jl6mD/LUhIkr5sRO+QZ4Oofby4iJ4jJw8FwXwa29fsI=)
2: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: y6lsTAzxceftnb0UckbxcnuqjkGYgeTxQZKU2zv7Tfc=)
3: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: hSeIp929vHi0Xgq96P+KYhFORbkTXCu0ObyLBiOE7yE=)
4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: Al8YtI295Qv3VLO+dWvpu3tZeFYQjhzt57J20RQFzEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Validity
Not Before: Apr 17 05:03:45 2026 GMT
Not After : Apr 24 05:03:45 2026 GMT
Subject: CN=69e1bf31-0ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:25:ed:60:b2:fc:cb:f9:97:e8:8e:7e:e0:
ca:f8:d2:ed:25:51:4e:b0:90:f1:1b:c4:48:85:f5:
51:48:d0:77:37:de:64:ac:4a:6b:5b:83:c6:45:f7:
af:ed:7a:13:0e:1a:76:1e:49:07:2a:06:58:73:10:
e3:b3:09:0c:76:a3:8f:53:82:ed:b0:0d:2c:2b:cd:
36:58:37:24:3a:67:a8:1d:17:ce:56:e5:17:4a:49:
a1:de:3f:ee:73:c0:ae:2d:e7:3b:9c:a9:30:dc:14:
4e:a1:61:96:c5:36:fe:f1:a3:92:5e:ad:4f:ea:5b:
95:b0:a4:5e:23:32:0f:23:7f:b4:82:93:c2:ab:36:
d9:ee:fe:e7:1a:b9:7e:ff:52:18:f6:fb:f2:1d:ec:
35:a4:3a:4e:00:ca:fc:94:ac:68:01:0e:9e:57:ea:
77:fb:6e:64:2e:db:59:78:d2:67:7b:80:91:7f:ea:
52:38:af:40:8c:d3:45:9a:76:dc:d2:45:4c:d8:3e:
e9:be:00:91:9c:57:7a:be:99:42:d4:e4:32:88:88:
d6:2a:e8:87:c7:14:61:ab:53:3f:91:a1:3b:46:13:
c7:f7:9a:84:08:8b:98:3d:65:27:fc:9f:73:77:f3:
7e:72:00:2a:3a:2f:13:bd:9d:9f:c9:67:5b:41:a1:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:E3:1F:80:55:51:88:91:9E:A5:5E:AF:5C:4D:48:F7:A4:FA:AA
X509v3 Authority Key Identifier:
keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d8:a2:29:f2:55:03:06:de:db:6e:ce:7a:90:a4:6f:0f:35:
0a:97:e8:59:50:f7:60:32:75:fc:c8:e4:2d:34:87:d1:8a:91:
5c:1b:3c:db:c6:a7:4f:da:f4:33:12:5a:5a:42:ec:be:7e:a6:
7c:e8:af:ee:6b:e0:a7:1c:f9:34:77:ad:fc:1e:89:68:ce:0e:
73:a0:ed:0f:62:5d:03:de:00:2c:60:be:21:ec:ac:ac:f0:d4:
e8:c2:f4:1e:dd:6b:e7:6d:cd:37:f0:50:85:f1:2a:5f:86:92:
04:36:a7:81:de:50:7d:ca:27:15:11:1b:77:38:0c:24:2b:04:
8b:55:6d:cf:f7:f4:1d:1d:d3:5b:6d:83:01:17:c4:a2:ec:68:
a1:45:fd:3d:89:2b:c5:e2:3e:ba:1d:04:fe:fc:72:33:26:f5:
f3:6b:69:81:01:42:1e:b2:6b:a7:07:08:71:e0:36:14:0a:65:
4f:ef:bc:da:18:70:bd:f8:e9:c6:95:d9:58:5f:1f:b3:f3:20:
a5:76:59:1c:af:ab:eb:41:48:c5:e8:53:0c:c9:29:2f:e5:46:
ae:12:5c:0c:6c:17:d7:91:45:40:10:1a:11:f0:44:19:ba:b3:
2e:65:f8:d1:f1:5c:ed:5e:b9:9b:46:57:75:85:3d:41:24:f6:
f5:aa:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:32 2026 by rpki-client