
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
File: VC3eAu1c1aeKWFAwa556fpn8Jgs.mft (raw, json)
Hash identifier: LiPkXF40+7DGPD0TpQwCPmX/Y1fQh21LpUhW8niOUxM=
Subject key identifier: 15:B1:D2:AE:42:FD:07:98:C0:F7:BC:A5:9E:87:1C:9D:95:07:7F:30
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Certificate issuer: /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
Manifest number: 27
Signing time: Fri 17 Apr 2026 08:32:25 +0000
Manifest this update: Fri 17 Apr 2026 08:32:24 +0000
Manifest next update: Fri 24 Apr 2026 08:32:24 +0000
Files and hashes: 1: VC3eAu1c1aeKWFAwa556fpn8Jgs.crl (hash: mUtl1vCn1dZ//Xh8khcmlXAH2vZOYt2sXOBRhk5CqSM=)
2: D111CFB407E411F1ADC4A5A5213D8C67.roa (hash: lUmpfgR/p5W8luIbaZ+1ADUqFYn/T6101vy4MSXsnuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Validity
Not Before: Apr 17 08:32:24 2026 GMT
Not After : Apr 24 08:32:24 2026 GMT
Subject: CN=69e1f019-ab8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:eb:f1:4b:c5:b3:1d:65:e4:42:08:af:bd:
54:49:79:06:8a:04:67:30:81:db:a2:59:f6:b5:e8:
c8:20:9c:fb:3f:8f:e0:39:73:14:13:28:01:c4:18:
97:e1:ac:d1:4b:5c:a5:6e:d4:2c:3c:9c:63:07:7b:
12:72:a8:e8:1a:de:39:69:61:2e:5f:9a:41:36:37:
56:f1:94:ff:e0:f1:61:5d:76:81:fd:65:9a:4f:b4:
34:d1:3d:00:77:29:e2:2d:59:d2:c4:a6:e5:8e:39:
83:27:43:8f:eb:e9:5d:4e:c6:4f:59:c8:26:e0:71:
42:1b:c2:1a:73:13:1e:94:d0:02:f9:fb:13:5b:c1:
56:ca:30:85:0c:0f:fa:8e:6d:3f:e9:e4:e8:31:9a:
24:2a:e4:9e:6b:5e:37:59:0c:ea:ca:cc:93:85:9f:
21:57:d6:b6:26:da:4c:1e:8f:a2:3f:23:d6:a9:91:
3b:58:3f:61:c8:8d:af:a0:10:e0:7f:76:f5:54:37:
6a:9d:c8:63:71:95:ec:7f:70:9b:93:51:eb:d9:b7:
cf:c2:a0:95:d6:cf:28:e0:2d:c8:e6:83:a1:a2:e2:
59:96:ab:79:e4:77:0b:4c:19:6e:5f:72:e7:ed:01:
41:70:3c:b6:2e:81:cd:49:36:b2:d2:b2:9c:7a:41:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:D2:AE:42:FD:07:98:C0:F7:BC:A5:9E:87:1C:9D:95:07:7F:30
X509v3 Authority Key Identifier:
keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9f:a1:b5:6f:95:00:8c:64:9e:ff:db:d4:e6:f3:16:51:1b:
d2:64:b0:7e:df:b3:bd:e7:4b:ca:c5:b5:9d:30:96:58:41:78:
7b:ca:b0:40:e6:53:dc:0f:59:35:cb:77:39:94:30:49:45:5e:
35:34:b7:7f:3d:e6:9c:81:cd:f5:ed:db:ad:56:2a:0f:5b:80:
0c:87:0a:29:6d:cf:47:df:42:2d:1b:f5:b9:2b:91:9c:bc:73:
31:31:ec:ec:1e:8a:a1:29:d8:8a:59:6d:e2:c9:c2:dd:06:48:
f8:59:b7:1d:b3:c1:16:8f:75:9c:c6:ba:aa:aa:0a:bc:af:97:
d0:38:54:4a:18:1f:77:44:fe:da:c0:4b:1d:00:bc:b2:ef:98:
53:8c:6f:d4:fa:81:ee:3e:48:86:c6:17:60:ab:82:da:4c:7f:
76:9c:67:9a:b1:79:c8:c4:d7:e6:2f:d3:bb:8c:9c:b1:a3:da:
ee:86:5d:a1:10:78:7d:01:0e:0a:8c:ba:d3:bd:fa:8d:89:8b:
0d:03:05:fe:9d:11:bb:50:6a:32:03:97:b6:51:d8:bc:46:fd:
d5:bd:ea:bb:21:e9:76:89:db:dc:c0:c0:19:24:5f:cb:ff:fb:
40:13:39:e4:be:fb:d4:04:78:db:c1:92:ee:e3:b8:ee:73:13:
30:50:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:19 2026 by rpki-client