
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier: fUjoLSubGzpPkAm3ufbD+VwxW0iGwxF6JdtkGfQUmjQ=
Subject key identifier: DB:0D:34:E4:1F:0E:FB:2A:D0:40:16:D9:96:0E:B5:1D:B3:89:C2:89
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial: 0509
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number: 0503
Signing time: Sun 20 Sep 2026 23:28:26 +0000
Manifest this update: Sun 20 Sep 2026 23:28:25 +0000
Manifest next update: Sun 27 Sep 2026 23:28:25 +0000
Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: 08PTlNn9Q0KHeW34pl9sUyLvMPe2x0k3u2kuzl71P+o=)
2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: Ye+a8GT+XgDN4u+M9N9k3FjrUxRsvTyLwzxddvL9o4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289 (0x509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Validity
Not Before: Sep 20 23:28:25 2026 GMT
Not After : Sep 27 23:28:25 2026 GMT
Subject: CN=6ab06c1a-8b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:31:49:5c:2d:ce:b4:a6:1c:84:23:8a:2a:
2f:46:e6:07:75:8f:7e:7c:11:51:8b:ca:ce:ed:26:
8a:94:38:bf:d9:03:7a:a9:71:b7:1c:9b:6a:9e:84:
45:1d:c9:af:f4:cd:ee:1e:bf:34:a6:93:2d:98:39:
e8:3f:ae:4b:f0:d5:32:c9:19:c5:f7:b1:d0:a6:ae:
22:11:2d:d1:9f:2f:66:d0:61:91:d1:5c:81:f8:17:
f3:a2:e8:88:c7:d8:67:19:07:53:8e:70:94:78:ca:
a5:33:e9:2e:76:ee:c7:b5:f1:46:bd:e8:fc:ee:92:
62:e4:2f:a1:ae:97:1a:27:72:a3:f2:df:9b:b2:e0:
bb:40:a8:3e:47:f1:9f:b6:cf:1e:e8:d1:9b:1e:5b:
83:cd:b7:b3:f2:9e:80:b9:f2:3e:81:53:17:4e:de:
df:92:0c:ac:3f:16:3b:4a:d0:82:33:c7:41:c3:f8:
74:eb:ca:b9:20:5e:f3:c3:a3:87:50:69:06:45:47:
dd:b0:bb:d0:ae:63:d5:68:78:b4:b1:60:7a:cb:a7:
d2:53:70:28:55:07:8e:3d:66:85:41:cc:b8:66:7c:
2a:1d:9f:69:7f:f5:f7:9e:8e:61:26:b9:34:69:80:
62:c8:11:5e:45:28:c6:8d:27:13:39:65:a7:64:78:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:34:E4:1F:0E:FB:2A:D0:40:16:D9:96:0E:B5:1D:B3:89:C2:89
X509v3 Authority Key Identifier:
keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a5:15:d7:53:7a:3f:b3:a4:0a:db:98:39:d3:c5:82:a3:02:
e8:94:77:68:24:72:6c:d0:e8:d9:9b:ad:69:94:22:39:1c:8c:
9d:c3:72:cb:b9:66:36:12:74:81:37:56:44:d2:d7:9b:31:2f:
c0:2f:39:80:6d:97:22:b3:2d:9f:37:f0:2a:6a:0e:91:d7:ae:
7c:bf:fa:f0:bc:78:40:a4:2c:e6:77:96:57:30:6c:e5:e2:e0:
c0:3a:a6:9d:fe:74:89:15:b8:4a:1e:64:d2:63:14:f1:1d:3a:
ee:bd:ee:8a:a5:6b:13:fd:c8:6d:74:e3:60:c6:de:5f:f8:88:
38:8d:38:86:9a:9d:64:8d:55:3b:cf:94:e4:8f:98:d1:29:a4:
01:0f:a8:e4:d2:6e:38:61:db:7b:5c:b9:b7:41:70:74:18:32:
0a:dc:21:d0:83:a9:b3:5c:d3:43:76:94:d2:95:b3:4c:57:05:
44:cc:1d:4c:96:a4:9c:2e:e6:fb:59:71:35:fe:93:fc:73:81:
31:0f:31:f1:4d:c6:20:1c:51:32:e5:cf:69:06:e4:bb:b0:f0:
81:75:85:13:64:42:1b:1c:1b:ae:27:f4:8b:12:c2:41:99:8e:
af:3f:86:6d:4a:c0:92:9d:5b:46:e6:56:4d:95:a1:df:f9:00:
b9:35:1a:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy
NzIxQzk4Q0UwHhcNMjYwOTIwMjMyODI1WhcNMjYwOTI3MjMyODI1WjAYMRYwFAYD
VQQDEw02YWIwNmMxYS04YjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1p8xSVwtzrSmHIQjiiovRuYHdY9+fBFRi8rO7SaKlDi/2QN6qXG3HJtqnoRF
Hcmv9M3uHr80ppMtmDnoP65L8NUyyRnF97HQpq4iES3Rny9m0GGR0VyB+BfzouiI
x9hnGQdTjnCUeMqlM+kudu7HtfFGvej87pJi5C+hrpcaJ3Kj8t+bsuC7QKg+R/Gf
ts8e6NGbHluDzbez8p6AufI+gVMXTt7fkgysPxY7StCCM8dBw/h068q5IF7zw6OH
UGkGRUfdsLvQrmPVaHi0sWB6y6fSU3AoVQeOPWaFQcy4ZnwqHZ9pf/X3no5hJrk0
aYBiyBFeRSjGjScTOWWnZHjZkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsNNOQf
Dvsq0EAW2ZYOtR2zicKJMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG
NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T
NGt5RFJjbDd3MFluSWNtTTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI6UV11N6P7OkCtuYOdPFgqMC6JR3aCRybNDo2ZutaZQiORyMncNyy7lmNhJ0
gTdWRNLXmzEvwC85gG2XIrMtnzfwKmoOkdeufL/68Lx4QKQs5neWVzBs5eLgwDqm
nf50iRW4Sh5k0mMU8R067r3uiqVrE/3IbXTjYMbeX/iIOI04hpqdZI1VO8+U5I+Y
0SmkAQ+o5NJuOGHbe1y5t0FwdBgyCtwh0IOps1zTQ3aU0pWzTFcFRMwdTJaknC7m
+1lxNf6T/HOBMQ8x8U3GIBxRMuXPaQbku7DwgXWFE2RCGxwbrif0ixLCQZmOrz+G
bUrAkp1bRuZWTZWh3/kAuTUaHg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:29 2026 by rpki-client