
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json)
Hash identifier: 0sEdL/ChW7J6incwd2S7pFX7lV5iprOJv7BtqMnq9Ns=
Subject key identifier: 99:B1:47:42:BE:47:DF:F4:DE:77:40:76:61:96:D2:B7:34:DE:DA:8B
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial: 04B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
Manifest number: 04AD
Signing time: Mon 02 Mar 2026 00:58:51 +0000
Manifest this update: Mon 02 Mar 2026 00:58:49 +0000
Manifest next update: Mon 09 Mar 2026 00:58:49 +0000
Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: H8Uwg2rBgm4SkZJpifU5SL7T7/gbXJLNLi6mjYeuD3E=)
2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: AqjcIRcmIevgtyHg7+TFbRQg5uMW7cNzp34M1zNTrrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1208 (0x4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Validity
Not Before: Mar 2 00:58:49 2026 GMT
Not After : Mar 9 00:58:49 2026 GMT
Subject: CN=69a4e0cb-dfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:b0:57:d4:b6:8a:50:de:a5:e2:06:38:34:
bd:0f:2c:11:30:7e:51:09:a4:af:84:53:92:0d:41:
43:33:92:c5:b0:a6:77:88:0c:9a:cb:11:9f:14:9b:
f4:83:f3:89:d7:4d:b5:af:21:33:6b:07:5a:47:17:
8f:ae:85:ea:aa:ac:b3:c0:9c:ef:be:36:e9:80:9e:
f4:67:11:0d:ea:97:0e:12:91:10:d0:73:21:e6:bf:
91:5b:7d:5c:7d:ea:1c:d6:8c:8a:49:4e:79:19:ae:
9f:71:d1:20:23:e2:15:f5:df:0b:54:8b:ae:b0:94:
73:ea:a6:8c:f3:ab:bd:b0:d4:56:cc:94:a7:85:7f:
cd:7e:bb:3a:f4:b0:5b:bc:2f:10:44:fe:88:8f:98:
44:e6:37:4b:fa:92:06:de:2a:26:69:27:c7:f8:1a:
53:b9:b6:e3:82:ac:12:92:79:a7:08:62:10:10:55:
66:5a:d0:27:14:d8:53:3e:e7:02:29:eb:ad:62:a3:
19:46:bc:54:69:c2:f8:8c:16:5e:7c:3c:d8:79:89:
92:dc:28:a0:72:1c:94:4d:05:d3:c2:f4:de:8e:1b:
98:7d:2b:20:71:48:e4:39:ff:98:3a:40:f1:3f:9c:
cd:4f:90:27:ea:33:ed:8b:60:e9:c2:77:eb:08:d1:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B1:47:42:BE:47:DF:F4:DE:77:40:76:61:96:D2:B7:34:DE:DA:8B
X509v3 Authority Key Identifier:
keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a4:f4:39:6f:bb:0d:74:bb:e3:73:91:ed:3e:22:64:40:62:
c7:c3:72:b6:80:39:f2:d0:5c:41:be:2e:52:52:9d:0a:cd:53:
dc:1e:09:4c:8d:bd:1e:5b:c3:77:b6:3e:4f:94:7f:1c:7b:fe:
1d:39:27:da:f2:3d:d3:09:25:39:9c:d5:45:4f:82:e4:e2:7a:
fe:a0:57:5b:90:88:32:ae:bc:b4:03:d9:44:a8:87:e2:3a:16:
1f:99:23:47:6a:b4:05:4c:9c:4f:de:6e:fd:b4:90:cd:06:2c:
58:8b:d7:d3:60:95:a5:f4:d6:1c:19:33:56:be:89:50:bd:6e:
a3:83:71:14:01:02:9f:f9:8e:17:e6:28:d2:59:21:7b:65:b6:
c1:61:49:30:a5:bb:12:74:a5:43:df:ba:d8:b3:9b:0b:bc:74:
c3:b1:c7:61:d2:aa:1a:9e:7c:65:f3:07:23:4f:69:91:b1:d5:
52:03:e3:42:14:d3:0c:1e:19:f7:5d:bc:ed:6f:44:67:37:88:
c3:2a:18:eb:7d:38:9a:ff:48:7e:ff:9d:9a:ed:b5:17:b5:4e:
f3:fc:1e:12:74:60:b8:6e:be:ce:ad:a2:8b:da:17:a8:30:f7:
37:a5:dd:d9:ba:d8:71:94:31:7f:00:7e:af:ff:41:33:7f:9e:
6b:9b:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:14 2026 by rpki-client