
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier: U/HeHkLJJ64mdrES6EjnPBEw7YoxG9/MXl+q3CijPow=
Subject key identifier: D0:05:E2:E2:30:4D:06:B2:A7:CD:56:D2:76:43:F5:8A:92:5A:FA:62
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number: 0126
Signing time: Sun 01 Mar 2026 06:42:30 +0000
Manifest this update: Sun 01 Mar 2026 06:42:30 +0000
Manifest next update: Sun 08 Mar 2026 06:42:30 +0000
Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: 3c7qy+OlU5wzca4chyTf0AI0hdXf08mgp4/RrLJGfrM=)
2: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: //q9Ixb8vsAdKNlqegTg4EF3x3ZRrnQzXIbZ1THsPp8=)
3: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: JxyJ1mmGQ9IoO293w2tx2mXeRaPBNLf0zeXpdM0cN9g=)
4: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: Yay+SyFT5tfziX8uJKhZyhJXv1ePOGC0M822VW0/7oE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Validity
Not Before: Mar 1 06:42:30 2026 GMT
Not After : Mar 8 06:42:30 2026 GMT
Subject: CN=69a3dfd6-4008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:39:a2:ab:b1:28:06:75:4f:43:47:71:9b:
31:13:a1:f4:46:65:84:9d:e3:98:5d:d4:ee:e2:ff:
fd:d6:53:bc:7a:0c:aa:37:59:6c:d7:af:56:f7:8a:
9f:4e:43:f7:9f:f6:70:c4:b2:95:61:64:94:3a:43:
c0:01:df:b2:33:03:16:d9:20:d3:65:17:fd:ac:ce:
c0:b0:25:ec:2e:b4:e8:fe:28:99:eb:75:0a:ce:f7:
b3:37:66:15:0a:0c:8a:3f:1c:d3:dd:ad:8f:3a:e5:
a0:a8:35:9b:8c:fa:d4:9b:cd:84:7a:e4:ff:9b:a4:
07:da:1c:ea:fe:93:9a:12:a6:46:54:08:cd:dd:02:
13:13:15:c9:c7:52:7b:36:20:fc:3d:86:e4:1b:f4:
5f:dd:ac:29:74:e0:cc:4c:41:56:c5:9b:59:6e:d4:
96:d6:ce:dc:73:e8:5e:9f:35:b8:f1:7d:dc:ef:8c:
c1:67:32:2e:f4:23:9f:61:98:22:a7:d5:b3:d1:fd:
95:d4:44:17:0c:c7:de:0e:bb:bb:4f:35:14:40:de:
36:03:6d:01:14:b8:31:79:5f:8d:5d:02:43:0c:e0:
54:de:3c:70:cb:48:f8:28:ef:9c:9a:e1:be:54:8e:
3a:1d:7f:ea:8e:f6:ff:9c:f3:0b:d4:58:42:30:de:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:05:E2:E2:30:4D:06:B2:A7:CD:56:D2:76:43:F5:8A:92:5A:FA:62
X509v3 Authority Key Identifier:
keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:fe:02:40:2e:a0:7f:c8:49:47:0d:b4:51:cd:e1:60:8b:ac:
1e:9d:2a:20:5b:2f:37:da:bb:fc:33:dc:51:7c:b7:50:bd:f9:
2e:35:80:d1:98:94:ad:3d:65:ec:ac:a0:c7:03:c6:55:b7:c5:
8b:b7:47:66:f0:55:54:83:86:87:a4:6d:6c:d4:e5:86:32:6f:
49:cc:5b:64:e1:10:b0:69:d5:e1:93:5e:1d:6f:5a:37:8f:fb:
85:91:27:49:0f:74:9b:69:b4:04:ad:21:ba:eb:cc:37:60:f7:
0d:67:bf:2b:90:e7:5c:98:e8:b2:fb:fd:cd:4c:ad:68:c8:3b:
f5:9f:2d:38:9b:49:a7:39:16:54:98:6f:07:29:5e:b8:18:5d:
12:a0:f6:9e:ec:67:df:24:fe:d9:2f:d8:b8:04:b4:30:57:2a:
8d:32:f4:95:8e:32:a0:3e:58:08:d1:b1:c5:a6:e7:f4:c7:d6:
0f:d4:4a:d5:5c:dd:78:6b:3f:ec:86:d3:c5:46:9d:a8:fa:87:
cc:07:84:3e:06:9f:d0:fa:db:e2:6f:7f:cb:65:af:22:72:b9:
9b:4c:01:8b:1b:6d:b8:cc:47:56:17:a9:2b:41:64:bf:de:1b:
2b:9d:4a:f5:42:16:3c:f1:a2:b1:3f:f3:12:3e:7c:1f:ae:e5:
c3:5e:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:24 2026 by rpki-client