
$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json)
Hash identifier: BNmFrSqL1rc0I9d54s+CdCAvm6Rbk4nZy1/FaqiQEVs=
Subject key identifier: E7:8B:66:9A:15:A6:95:8F:0C:65:7C:E8:FE:17:4D:62:88:BB:1A:34
Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
Manifest number: 80
Signing time: Sun 01 Mar 2026 09:08:36 +0000
Manifest this update: Sun 01 Mar 2026 09:08:35 +0000
Manifest next update: Sun 08 Mar 2026 09:08:35 +0000
Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: V4rzqYQEG8xA/xdZuuhqn45x7Oe+duQzY7jmQ1GRYDA=)
2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: 4b+Zn4KsagGvBxJYgePsU5UpAKIjBDYtGiGuj48bvLM=)
3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: 7YqeEswxJjsF8+Ym8ZXKHPEpLe9VpPmEs7vNVGd9xjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Validity
Not Before: Mar 1 09:08:35 2026 GMT
Not After : Mar 8 09:08:35 2026 GMT
Subject: CN=69a40214-f0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:84:e3:72:c2:cd:bf:e9:45:98:e6:5d:e9:
d9:11:3b:13:02:06:5d:44:06:48:5e:5a:18:31:4f:
83:36:c8:c6:f2:65:d7:1b:5c:84:49:4d:86:72:0b:
50:0e:12:dc:32:7d:23:71:94:a1:41:4a:4b:5c:0f:
54:b5:9c:1c:b9:62:2c:e0:51:03:ef:cf:23:b6:48:
f0:e5:32:52:76:c4:3a:ab:aa:ff:cb:22:d5:3c:0d:
ba:fe:9d:33:2a:84:b5:4a:26:de:55:e5:0c:3f:80:
6c:9d:69:d3:a8:00:20:2a:50:03:50:2a:10:6c:d2:
22:a9:11:12:ac:80:97:39:d1:6f:bc:bb:c8:8c:c6:
5a:82:90:ea:76:5f:13:e4:ac:8d:f8:b6:9c:02:47:
73:2b:b9:c1:7b:27:51:f7:af:cc:21:a5:63:4b:22:
ae:80:9a:15:34:0d:3d:a6:79:e6:03:8c:43:f2:83:
df:aa:9d:5b:3f:8d:19:c9:b6:ad:e6:0f:01:c5:e9:
94:f0:80:2a:ec:60:a2:d8:2d:1e:04:8b:d0:72:49:
2f:e3:41:14:5a:94:e5:c2:c8:e9:b4:47:af:98:a9:
7b:f7:47:3f:02:95:ed:70:80:ea:5a:ca:b2:c0:d0:
68:4b:9d:24:84:65:7e:0e:f6:dc:04:14:07:91:80:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:66:9A:15:A6:95:8F:0C:65:7C:E8:FE:17:4D:62:88:BB:1A:34
X509v3 Authority Key Identifier:
keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:8c:9b:96:aa:e9:e6:0e:9f:ae:d1:40:38:3d:16:f9:7d:
93:59:a2:ce:a9:de:60:64:a5:b5:ed:0d:df:df:c3:11:7f:67:
0c:d1:39:3a:f9:ea:ae:f3:25:e2:5d:4a:40:67:c0:ef:4c:59:
0f:53:1b:a1:6f:79:46:e5:2e:de:99:c0:8c:aa:ba:95:a6:7c:
8a:68:5e:c4:86:2c:f0:e2:0a:37:be:4e:aa:b0:cf:c3:a4:fb:
b5:68:a2:26:42:27:15:cf:e1:f8:06:bb:f1:34:ed:75:41:57:
c6:7a:5f:f0:c5:3c:79:65:a2:62:1f:f5:2d:94:65:31:41:d6:
72:42:5a:74:00:b9:d2:32:65:79:5a:ba:40:43:7d:9e:bc:9d:
2b:08:ea:3c:77:57:e3:38:6f:a0:22:7d:96:50:be:9f:c3:a0:
60:3a:5d:7f:b5:45:7a:03:69:f0:4b:4d:63:b4:d2:23:8f:99:
88:4f:43:cb:9d:53:8d:b3:e9:aa:48:bf:c8:4a:2f:37:34:c9:
ec:14:d3:83:52:0c:fe:88:f0:d9:3f:a9:76:ad:fc:eb:43:af:
0f:fd:05:a9:93:da:88:2e:96:bb:44:4a:bb:2b:51:c0:a7:68:
2f:9f:45:56:0a:1d:4e:05:b7:96:9f:e1:f8:08:21:d9:43:bb:
81:d8:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:16 2026 by rpki-client