
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json)
Hash identifier: J3yCl+HBGJGYLXPNEbli+owseKZh4DFeLPtqnafkKh4=
Subject key identifier: 15:E7:74:9B:12:04:DC:56:DF:CC:92:5A:B2:C3:95:6F:DF:34:9F:5A
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial: 0352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
Manifest number: 0342
Signing time: Sun 01 Mar 2026 23:50:04 +0000
Manifest this update: Sun 01 Mar 2026 23:50:03 +0000
Manifest next update: Sun 08 Mar 2026 23:50:03 +0000
Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: 3oC/XcOjr5sye3rkzYfsMvRzXNx5sQwp7baZuUtEd94=)
2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: Q5BQwN/PPkIsr7xi5UZqC/JjxBSQW4yJruIR//oJ9Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Validity
Not Before: Mar 1 23:50:03 2026 GMT
Not After : Mar 8 23:50:03 2026 GMT
Subject: CN=69a4d0ac-a92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:90:e3:d7:b1:87:59:7b:6f:79:4d:3e:1d:
7c:f5:2b:b7:cf:00:24:9d:e5:27:b0:11:f0:ce:0f:
20:8a:a3:04:d8:7b:56:48:71:0d:8b:16:1c:47:52:
10:e7:86:f9:83:01:50:93:c0:eb:a4:dc:74:d5:45:
48:63:04:ba:26:25:5b:b8:ea:47:35:a0:27:03:4e:
44:0f:d6:92:eb:4f:16:87:ac:95:bf:cc:52:67:d1:
3e:29:94:97:72:61:e1:62:23:c4:5a:87:aa:fe:bf:
03:12:54:83:22:89:e7:7f:da:cd:ab:6b:b2:4f:f2:
a3:43:6a:87:61:43:00:af:1d:4f:c2:de:51:8d:e2:
57:18:5b:4d:bd:93:1e:e2:86:93:9d:24:78:91:0e:
db:78:bc:8c:eb:31:9c:5a:f6:86:01:36:96:d0:d8:
ea:0d:96:e2:2f:7d:7e:89:2b:d6:8b:c9:09:04:65:
ce:6c:4e:9b:71:b1:8d:2c:fa:f8:91:cf:03:44:88:
3d:46:4d:ef:d4:0f:ba:10:69:76:66:12:6a:66:4d:
34:3b:17:aa:99:cc:c7:14:18:0a:83:f4:85:d3:ed:
72:7b:7b:9d:7b:19:c6:e8:40:7c:e9:16:61:50:ae:
7f:16:9b:20:89:11:f2:4d:55:f5:b2:79:01:1a:08:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E7:74:9B:12:04:DC:56:DF:CC:92:5A:B2:C3:95:6F:DF:34:9F:5A
X509v3 Authority Key Identifier:
keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:6e:9b:9d:95:90:92:dd:bf:33:9d:cd:8f:d9:0e:05:e9:
9c:1a:8e:e8:e7:81:f2:e2:f8:80:00:02:9c:8e:c1:d9:b3:df:
89:6d:79:ac:e6:fc:b0:a1:6d:9e:87:df:82:6f:30:f5:57:3e:
93:ae:13:1d:31:b1:d3:d5:cd:1f:8e:f1:07:78:0a:c9:61:93:
ea:ee:3e:8e:ff:b8:8b:91:3b:32:b4:89:b7:d4:4b:4d:63:d3:
d6:84:fe:6f:5a:54:7c:f9:c2:11:b5:85:e3:8f:4f:a7:10:99:
05:54:db:02:78:38:0c:7b:f1:cd:10:3e:a9:5e:4a:ea:25:fc:
f4:5f:14:a5:00:e0:bf:3e:05:e1:57:d6:05:d7:a1:93:6d:36:
c4:0c:a5:b0:1e:da:2b:d9:97:0d:4c:2d:91:d3:05:fb:d0:62:
4d:c9:fc:a9:25:ec:60:a9:d6:32:c5:09:d9:b3:43:75:34:1e:
4e:27:d5:eb:9e:e8:1d:55:da:2a:c8:4c:ca:29:57:c3:fb:1a:
3c:e0:a3:b8:b3:45:ae:86:51:b8:3d:b7:1c:e0:76:25:b6:80:
2c:09:7c:6d:b2:fb:9f:18:bd:e2:89:52:6d:11:86:95:91:12:
30:9d:a9:67:c2:29:5a:95:fd:c8:45:b1:34:01:ad:39:a8:0c:
60:64:02:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw
RUZGMUQzOTIwHhcNMjYwMzAxMjM1MDAzWhcNMjYwMzA4MjM1MDAzWjAYMRYwFAYD
VQQDEw02OWE0ZDBhYy1hOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAWQ49exh1l7b3lNPh189Su3zwAkneUnsBHwzg8giqME2HtWSHENixYcR1IQ
54b5gwFQk8DrpNx01UVIYwS6JiVbuOpHNaAnA05ED9aS608Wh6yVv8xSZ9E+KZSX
cmHhYiPEWoeq/r8DElSDIonnf9rNq2uyT/KjQ2qHYUMArx1Pwt5RjeJXGFtNvZMe
4oaTnSR4kQ7beLyM6zGcWvaGATaW0NjqDZbiL31+iSvWi8kJBGXObE6bcbGNLPr4
kc8DRIg9Rk3v1A+6EGl2ZhJqZk00OxeqmczHFBgKg/SF0+1ye3udexnG6EB86RZh
UK5/FpsgiRHyTVX1snkBGgg07wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXndJsS
BNxW38ySWrLDlW/fNJ9aMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC
NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK
U1RJalNJS1htYkVPX3gwNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQOhum52VkJLdvzOdzY/ZDgXpnBqO6OeB8uL4gAACnI7B2bPfiW15rOb8sKFt
noffgm8w9Vc+k64THTGx09XNH47xB3gKyWGT6u4+jv+4i5E7MrSJt9RLTWPT1oT+
b1pUfPnCEbWF449PpxCZBVTbAng4DHvxzRA+qV5K6iX89F8UpQDgvz4F4VfWBdeh
k202xAylsB7aK9mXDUwtkdMF+9BiTcn8qSXsYKnWMsUJ2bNDdTQeTifV657oHVXa
KshMyilXw/saPOCjuLNFroZRuD23HOB2JbaALAl8bbL7nxi94olSbRGGlZESMJ2p
Z8IpWpX9yEWxNAGtOagMYGQCyQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:52 2026 by rpki-client