
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
File: VC3eAu1c1aeKWFAwa556fpn8Jgs.mft (raw, json)
Hash identifier: HRBKtJy+dZnnCJ0bSKQushKlh9wn7ZP/YqIW+pRDEdI=
Subject key identifier: B9:44:29:0B:C5:E4:F5:F8:73:9D:4E:80:44:78:6D:A2:F0:5C:F0:D2
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Certificate issuer: /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
Manifest number: 0D
Signing time: Mon 02 Mar 2026 00:27:54 +0000
Manifest this update: Mon 02 Mar 2026 00:27:53 +0000
Manifest next update: Mon 09 Mar 2026 00:27:53 +0000
Files and hashes: 1: VC3eAu1c1aeKWFAwa556fpn8Jgs.crl (hash: 9AarI2v3vjAb6xABEbPM6TCwoi+AfT+mwGhrHMXrn6I=)
2: D111CFB407E411F1ADC4A5A5213D8C67.roa (hash: 5ygbF+ZQKutBxuknFeX2ZHhDe34sMnm3X1ZGIcujeTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Validity
Not Before: Mar 2 00:27:53 2026 GMT
Not After : Mar 9 00:27:53 2026 GMT
Subject: CN=69a4d98a-7e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:e3:fb:eb:d2:f6:63:1c:47:9d:df:6e:c4:
8f:10:c3:17:a2:bf:58:69:95:97:8c:b4:41:b6:c0:
e8:99:f2:bb:69:b0:26:68:4e:94:5b:50:56:4d:20:
85:c9:07:99:8e:05:8c:0a:f6:24:6d:d0:bf:78:0e:
ae:7a:13:ae:4c:47:4e:87:9b:43:66:a2:88:01:18:
73:e4:01:95:c4:ee:60:91:af:b7:52:37:da:c9:75:
67:41:86:5a:5b:ac:d4:4b:42:cc:97:9d:69:d4:04:
6f:5f:40:53:84:79:4d:1d:fc:28:20:93:1f:0a:19:
97:82:5e:67:e5:7c:94:86:df:49:03:27:5b:1f:11:
0d:51:12:a0:d7:c8:6e:8d:51:25:d3:f3:bd:f0:a3:
a3:e3:e2:c2:9b:15:a5:e7:a6:ba:4b:dc:3c:81:35:
d0:6c:fb:5d:d0:00:aa:8d:81:08:86:e9:99:dc:e8:
26:78:02:34:f2:72:35:61:58:98:1b:e1:09:a3:08:
e1:81:d7:74:15:19:3d:23:95:9a:ab:1f:f2:52:ae:
d7:48:96:ce:7a:f5:7e:d0:3b:5c:06:98:59:93:1f:
9f:ee:59:a4:59:0c:92:4c:76:aa:42:e9:7b:b9:14:
c0:7a:e4:fc:73:52:d2:87:44:3b:3e:47:59:1b:b6:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:29:0B:C5:E4:F5:F8:73:9D:4E:80:44:78:6D:A2:F0:5C:F0:D2
X509v3 Authority Key Identifier:
keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6d:c5:09:14:41:6d:8e:63:b2:c7:32:1f:70:07:54:3b:6d:
71:b3:80:cb:e0:e9:64:a3:bb:c5:95:a8:81:7b:3f:d9:09:ab:
55:4e:c6:78:93:d2:17:9c:5f:b1:c8:89:0d:fc:d6:77:77:22:
7c:48:7e:b0:db:b3:90:38:9d:85:83:7c:4d:b9:d4:7f:e5:79:
22:fd:d6:12:55:84:89:48:c8:de:f1:6c:59:dd:5f:e5:09:ab:
65:c5:b9:60:5d:e7:5b:95:a3:bb:9b:79:2d:d6:a4:db:8f:75:
30:7f:a2:f9:73:d7:20:08:86:c6:75:40:df:77:25:7d:d8:41:
b4:8f:74:0b:24:0c:17:fa:9a:42:64:b5:04:05:72:f7:79:f4:
78:c0:df:d8:e0:fc:3a:ee:de:9a:7b:96:7a:c0:15:72:36:42:
cc:b5:e0:04:a1:87:18:1d:85:cb:95:b1:15:8f:c8:f1:7e:64:
27:da:54:d1:27:ad:05:80:56:af:b3:cf:b9:63:22:f2:63:af:
15:62:ca:d9:9c:71:3d:01:6b:ea:8a:b8:a4:53:7d:8d:6f:17:
43:95:95:cd:db:7b:59:36:05:52:74:c9:48:d8:04:71:d0:c4:
ca:ba:5c:64:91:0e:36:36:aa:56:0c:13:9a:16:fe:ca:d5:eb:
62:5f:7a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:21 2026 by rpki-client