
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
File: VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json)
Hash identifier: EsiBuuhksdano01Cx5DehMGHRisyQaPufFkbfRxhxnU=
Subject key identifier: 07:33:4D:73:1A:7C:36:24:2F:8B:4F:8B:5B:7A:15:87:BE:BA:AC:05
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
Manifest number: 069C
Signing time: Mon 02 Mar 2026 01:58:30 +0000
Manifest this update: Mon 02 Mar 2026 01:58:29 +0000
Manifest next update: Mon 09 Mar 2026 01:58:29 +0000
Files and hashes: 1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: cWQnzQc1uY8hAByMHUKShW1ZW2uSbptGq75uBYPlvus=)
2: BA9447BCA7D111EB8F85BA22C4F9AE02.roa (hash: G5KtMwriq0N6l25zffNg7VVDY9p7lXbgrSGO9joeZg4=)
3: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: 9cs2YHfBiZAsHcT0rcWwzMgGI3sfprOUnMUWHbiLiM8=)
4: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: ftbUf7d1dxy4HPxyOc8VeUAscQ6waTvpR4D/yI1qLzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Validity
Not Before: Mar 2 01:58:29 2026 GMT
Not After : Mar 9 01:58:29 2026 GMT
Subject: CN=69a4eec6-467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:42:f6:cd:72:f4:e5:7f:2d:6d:74:b8:74:
7e:7d:be:e0:79:46:45:9c:df:07:31:8b:56:44:1a:
9c:49:35:3d:60:db:51:41:0a:d9:38:dd:91:4e:7a:
69:5b:f5:a5:5a:65:3c:c9:ee:a3:60:2d:ab:22:a7:
27:95:9d:36:4a:31:ea:65:8c:09:40:e5:ee:e4:18:
50:3d:6d:01:25:a4:ba:2b:86:66:1b:b8:1a:e5:3d:
b7:bf:e7:6f:56:d7:f0:92:65:49:a6:3d:45:13:7e:
f6:38:91:b8:b3:e3:c2:42:1a:62:41:5a:3d:24:04:
78:be:a7:cf:8b:e8:e0:6b:98:dc:45:17:5a:0e:3a:
40:dc:68:18:09:b6:28:e5:7d:df:ba:30:e4:e7:ee:
0d:30:61:7f:23:d5:7f:02:2e:71:eb:cd:e3:04:89:
fc:5b:9f:9a:1e:5c:d6:a7:5f:ea:13:c1:2f:83:44:
e0:8c:d1:44:3d:c3:70:a0:c6:c6:d7:54:30:8f:b4:
73:a7:48:0f:f0:95:91:13:3a:b3:4d:c1:a6:a3:e1:
82:4f:a2:dd:e4:45:c4:e3:23:ef:05:47:fd:83:ef:
fb:b7:48:76:2a:bb:97:47:e1:dd:2a:b0:81:d2:7f:
dc:47:52:eb:ef:e7:25:d2:1b:a2:33:d0:51:55:6b:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:33:4D:73:1A:7C:36:24:2F:8B:4F:8B:5B:7A:15:87:BE:BA:AC:05
X509v3 Authority Key Identifier:
keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:65:09:bd:c9:ed:e3:fa:69:07:35:3c:eb:4f:2d:c3:69:
fc:c2:ba:a2:41:19:ad:e9:87:83:74:48:30:9a:12:00:70:a4:
71:7c:12:bb:7e:3b:75:13:83:83:95:5a:ae:35:07:04:a8:0f:
87:f2:5f:27:43:da:b7:ee:20:87:8b:c5:97:c1:02:ea:ae:67:
b0:f3:ce:5f:1c:8a:85:b0:4e:18:2d:24:e3:5e:cf:a8:3f:5a:
d1:11:0b:96:96:73:2e:ae:e7:7e:8f:7e:c8:9a:0d:24:4f:4b:
3f:c3:d6:1b:15:16:31:ff:c0:61:78:03:ea:2a:15:2c:b2:ba:
9c:92:9a:88:48:fe:cb:35:f2:ae:1b:e9:5a:3c:30:03:4a:09:
40:8e:b7:19:18:e3:46:38:b7:e5:5e:29:9f:1a:35:e2:0e:2c:
ef:25:3d:75:da:90:f5:80:5b:8c:4e:89:38:8e:ce:b1:58:cf:
33:4f:5c:3e:8e:1c:95:49:d9:f8:35:82:0d:bb:c1:ab:fd:a4:
cd:1e:ae:96:50:ff:1e:1d:e5:d6:80:da:b5:21:91:69:2e:c8:
94:8e:2e:b7:1a:dc:30:3e:18:d5:b5:35:cc:4c:73:6d:a4:66:
b6:6b:96:de:18:48:2c:d4:fd:e2:eb:6e:46:62:15:03:17:db:
f3:2f:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:05 2026 by rpki-client