
$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
File: VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft (raw, json)
Hash identifier: j8V3M7QfsV/gAAmyls/ScjRDTNY85gkUlohPlx6qt2o=
Subject key identifier: 21:AB:6F:87:18:43:32:AB:25:FF:22:70:A8:E4:A1:E1:9B:C7:81:EE
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Certificate issuer: /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
Manifest number: 0230
Signing time: Mon 02 Mar 2026 02:05:47 +0000
Manifest this update: Mon 02 Mar 2026 02:05:45 +0000
Manifest next update: Mon 09 Mar 2026 02:05:45 +0000
Files and hashes: 1: VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl (hash: CJTuUTWPs5A316Js0ZbWwnFA6Cn2NjT/3/cOBhZ1Fk0=)
2: 24C95396C48F11F084A49D1CC4F9AE02.roa (hash: hiKcY851CfuMn8BaynhC+6ojKRlGFYOlK+ORHgJ99DA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914597C, serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Validity
Not Before: Mar 2 02:05:45 2026 GMT
Not After : Mar 9 02:05:45 2026 GMT
Subject: CN=69a4f07a-a298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:86:5e:6d:29:af:52:40:92:14:07:ae:0f:
d3:be:12:7f:37:f2:59:e2:3c:17:f6:74:b3:5c:fb:
af:06:af:16:e5:b5:2c:47:8f:2f:01:da:7c:f9:0e:
4e:81:3c:1a:25:a3:d0:55:c7:d0:18:ec:09:35:ba:
a8:d9:87:d7:77:48:1d:e2:ce:e2:e5:fc:90:da:dc:
dc:ea:f5:4f:ac:3e:c7:9c:26:e7:56:6b:e9:59:50:
25:b0:4e:00:82:ae:90:cc:f3:c1:0b:9e:e5:df:56:
9b:83:d1:b0:9e:22:d4:c3:1d:6f:4a:17:49:d9:a7:
98:11:d9:33:d2:ab:05:5d:a1:bd:98:ae:55:cc:d8:
ed:83:31:dc:ae:7e:dd:74:8d:5e:cb:59:51:47:52:
50:f6:1b:8a:59:17:44:ab:ac:8e:14:c7:a1:00:2f:
72:26:9e:53:f8:ac:1c:1b:85:f3:3b:fb:14:8c:c9:
a9:02:53:d1:57:67:20:a0:27:a7:7f:fb:52:2f:13:
90:8a:fa:bc:de:eb:50:9c:03:4c:f9:86:42:41:14:
cb:a1:f5:77:3d:81:1f:9f:dd:85:12:d6:7a:f1:5f:
d7:bc:84:a0:4a:32:4f:e1:b6:5f:24:85:47:0a:d0:
82:00:27:93:a9:5d:18:8f:06:0c:81:2c:46:d1:a4:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AB:6F:87:18:43:32:AB:25:FF:22:70:A8:E4:A1:E1:9B:C7:81:EE
X509v3 Authority Key Identifier:
keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2c:64:56:81:d0:59:96:3d:04:26:fa:71:58:65:53:a6:9f:
06:3c:4b:53:b0:08:ab:ae:03:a6:08:a3:9d:41:31:88:f4:4a:
92:75:fc:48:89:9c:9d:b4:ad:92:8e:37:eb:e0:32:d3:06:97:
d2:3e:27:66:04:6f:dc:bf:8a:c1:17:b8:8a:bc:77:db:79:ba:
ca:0c:5c:31:fb:b7:10:c5:82:13:96:1a:e7:f0:df:0e:5b:2d:
c1:58:bb:cd:a0:be:65:a0:58:c6:af:f5:a1:92:b6:44:dc:ab:
60:8b:76:95:20:e0:4a:6f:27:67:35:97:25:02:87:4c:ee:db:
3c:26:43:0e:09:a9:9a:38:28:c9:c9:6f:0f:b2:fe:dd:48:ce:
12:ca:29:c6:6d:0b:60:b4:6f:3e:e8:27:40:46:a9:18:f6:8a:
69:76:d4:35:0c:2d:d1:7d:95:13:16:2c:1b:0b:b7:ae:c0:72:
40:5e:05:65:cf:16:cd:a8:66:66:29:85:ca:96:03:77:80:26:
11:a3:8d:eb:fa:80:69:69:f3:d0:e6:80:16:2b:2a:bc:a9:e3:
be:23:1a:1e:f2:fb:86:eb:79:d5:bb:a8:d2:c8:72:64:a8:3a:
eb:77:da:ac:56:cd:69:97:68:16:00:4e:2c:99:d2:48:3a:42:
46:f2:11:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU5N0MxMTAvBgNVBAUTKDU3MDc0MTYyN0ZFN0NGRDU5NEVBMkY3RjQ0OTYxNkI3
N0MyQUM4NDIwHhcNMjYwMzAyMDIwNTQ1WhcNMjYwMzA5MDIwNTQ1WjAYMRYwFAYD
VQQDEw02OWE0ZjA3YS1hMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiBaGXm0pr1JAkhQHrg/TvhJ/N/JZ4jwX9nSzXPuvBq8W5bUsR48vAdp8+Q5O
gTwaJaPQVcfQGOwJNbqo2YfXd0gd4s7i5fyQ2tzc6vVPrD7HnCbnVmvpWVAlsE4A
gq6QzPPBC57l31abg9GwniLUwx1vShdJ2aeYEdkz0qsFXaG9mK5VzNjtgzHcrn7d
dI1ey1lRR1JQ9huKWRdEq6yOFMehAC9yJp5T+KwcG4XzO/sUjMmpAlPRV2cgoCen
f/tSLxOQivq83utQnANM+YZCQRTLofV3PYEfn92FEtZ68V/XvISgSjJP4bZfJIVH
CtCCACeTqV0YjwYMgSxG0aS2NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGrb4cY
QzKrJf8icKjkoeGbx4HuMB8GA1UdIwQYMBaAFFcHQWJ/58/VlOovf0SWFrd8KshC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTk3Qy82M0ZGQjU2MEI5
MkUxMUVEOUNFRUYyMURDNEY5QUUwMi9Wd2RCWW5fbno5V1U2aTlfUkpZV3Qzd3F5
RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z3ZEJZbl9uejlXVTZpOV9SSllXdDN3cXlFSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTk3Qy82M0ZGQjU2MEI5MkUxMUVEOUNFRUYyMURDNEY5QUUwMi9Wd2RCWW5fbno5
V1U2aTlfUkpZV3Qzd3F5RUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbixkVoHQWZY9BCb6cVhlU6afBjxLU7AIq64DpgijnUExiPRKknX8SImcnbSt
ko436+Ay0waX0j4nZgRv3L+KwRe4irx323m6ygxcMfu3EMWCE5Ya5/DfDlstwVi7
zaC+ZaBYxq/1oZK2RNyrYIt2lSDgSm8nZzWXJQKHTO7bPCZDDgmpmjgoyclvD7L+
3UjOEsopxm0LYLRvPugnQEapGPaKaXbUNQwt0X2VExYsGwu3rsByQF4FZc8Wzahm
ZimFypYDd4AmEaON6/qAaWnz0OaAFisqvKnjviMaHvL7hut51buo0shyZKg663fa
rFbNaZdoFgBOLJnSSDpCRvIRKw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:20 2026 by rpki-client