
$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json)
Hash identifier: oOLnWjEZLeY1X2R3uK5fcOmTPV2wDc+wE4GKFGZuCJ8=
Subject key identifier: 51:74:54:38:BD:94:49:F7:8A:92:E4:0B:27:A4:0A:6B:DC:81:45:9C
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial: 351F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
Manifest number: 3519
Signing time: Sun 01 Mar 2026 23:42:22 +0000
Manifest this update: Sun 01 Mar 2026 23:42:20 +0000
Manifest next update: Sun 08 Mar 2026 23:42:20 +0000
Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: kDdhYgRb831nCg2avnRCSjq5lujNbydrde28ERHMUQA=)
2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: dHpbJyK8suDbnnygvI/o8tYg8g6m0K1aNvWHPIFhZAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13599 (0x351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Validity
Not Before: Mar 1 23:42:20 2026 GMT
Not After : Mar 8 23:42:20 2026 GMT
Subject: CN=69a4cedd-9e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:ba:97:11:67:33:f4:84:04:a1:b6:ef:4b:
3f:4c:d1:67:65:23:0f:4d:b1:89:fd:17:cd:5e:5a:
4b:f2:34:53:62:26:94:9f:f4:1d:4e:b7:89:20:c9:
34:87:2e:4c:d5:8b:4d:9e:11:3e:46:e2:a8:84:24:
58:78:7e:26:6d:6a:b3:d1:c9:4b:fa:7a:d8:2d:78:
e4:9e:9a:a0:cd:e8:a9:4f:9e:2b:a6:8b:16:91:58:
a5:32:03:5c:ba:e7:67:f2:88:b9:96:a7:90:3b:f2:
ed:10:70:f3:70:3e:da:16:37:31:e1:db:f7:92:9c:
37:4f:42:85:cb:ed:5d:86:fa:50:54:19:88:6a:2e:
16:05:53:54:9f:fe:80:ba:b8:b7:86:b4:b7:2b:31:
b8:73:9a:a5:aa:46:06:79:1a:c6:7f:f6:24:12:cc:
3b:d9:b9:4c:dc:9b:34:b7:f5:bc:45:c4:2c:4d:6f:
d3:89:6d:c9:e3:be:a1:22:2f:14:2d:10:5e:7a:b6:
7f:1c:29:cd:b0:41:f6:da:a0:68:5f:6c:0c:b1:ce:
c6:fa:75:b1:e8:80:03:1a:9f:cc:be:ef:a8:81:5f:
31:69:92:f1:7b:77:80:a4:08:d1:47:6f:da:fc:05:
00:94:b2:4c:5b:a6:25:e3:29:52:2b:cb:74:57:95:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:54:38:BD:94:49:F7:8A:92:E4:0B:27:A4:0A:6B:DC:81:45:9C
X509v3 Authority Key Identifier:
keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:26:35:df:51:58:7f:9e:e5:4b:a8:52:90:70:20:a9:91:07:
e3:f1:15:28:97:06:03:3c:3d:9f:49:f5:a6:3d:06:71:d0:eb:
c8:0d:a2:ab:90:7f:c0:1e:e4:c9:99:39:44:48:48:35:6b:79:
09:e5:2a:e6:de:f0:fb:95:41:a4:51:6a:3c:d5:aa:fa:e7:d0:
5c:4b:cf:42:f9:ae:3b:55:8a:08:9d:d9:2a:f8:a5:96:64:8c:
0d:a1:ec:b8:1e:1e:ac:3c:38:e7:01:9d:0e:38:b5:ab:63:34:
ad:8b:44:df:c7:8a:7e:f9:b1:04:10:3a:ad:0b:f9:c6:3f:e7:
17:01:36:06:8c:b4:51:1d:e5:aa:07:62:2d:47:4b:32:db:2f:
99:d3:eb:90:b9:94:af:59:52:b5:71:3f:af:b4:23:ca:34:be:
86:7c:0b:30:70:43:d0:8c:2a:a1:c5:cf:88:d5:44:56:d0:e4:
83:ad:2c:8a:2e:9a:36:d3:03:48:90:cf:91:34:ea:d9:b4:70:
40:21:f8:7c:ad:1e:70:30:d8:80:33:97:36:c3:4b:f6:37:bb:
3a:5b:31:6a:c2:8d:83:86:b2:59:62:70:c1:3c:ee:bd:f6:25:
b7:60:b2:a3:34:b8:3c:21:ac:f0:b1:2c:62:0d:fe:9b:fb:d9:
15:37:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:00 2026 by rpki-client