
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier: b821TOZwrsl7vuz6NLBTY4M385JMdIqh5WuYmSKylHk=
Subject key identifier: FF:58:53:28:D2:42:B5:1C:4D:AF:75:8E:BA:10:BA:86:0C:FB:ED:55
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number: CF
Signing time: Sun 01 Mar 2026 08:15:21 +0000
Manifest this update: Sun 01 Mar 2026 08:15:20 +0000
Manifest next update: Sun 08 Mar 2026 08:15:20 +0000
Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: TyBCtaJJvrzD9oAQsgkq0D69o0FIlNhD1OrI7n0zw4I=)
2: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=)
3: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: hsVU/mADy2OXX1cQt4x/FdSd52E8zN5hB6L5qVYRCOM=)
4: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 4EsnPXpvxqy3HJn3NlZW+cFTXRzXY3NCiOsR6rWCGCE=)
5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=)
6: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: cqpKhHQ429f1vtQzVS9iSS/6yBn8Tr7cOiYSPyhXnqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Validity
Not Before: Mar 1 08:15:20 2026 GMT
Not After : Mar 8 08:15:20 2026 GMT
Subject: CN=69a3f599-3ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ea:16:49:c4:d6:80:b0:86:7b:8f:f9:b9:6f:
25:8c:4d:55:d4:26:29:a0:a6:8b:96:31:d3:46:d0:
9f:aa:fb:cb:ed:da:d2:a6:67:3c:2a:01:31:3e:a0:
1f:0b:f4:9f:af:90:26:f5:c4:ba:1b:88:4c:f1:16:
2e:fa:ce:d0:35:76:95:5a:04:74:15:f5:f2:c4:62:
7a:c9:55:d0:11:03:49:be:ce:df:64:0e:db:19:02:
e9:23:3f:d1:45:47:e9:c5:67:1e:ca:24:5a:42:8a:
f2:12:f0:f0:cd:80:ae:29:04:9a:25:68:81:71:8f:
d9:92:53:2d:b1:2d:be:56:26:76:fb:a9:64:38:a3:
ba:d8:00:da:22:8d:49:9f:aa:1b:45:e4:49:f6:b1:
a7:f8:c8:a1:89:9a:aa:1f:89:fe:e3:80:57:d0:3a:
b6:2d:a4:30:f7:54:ef:17:0c:34:ef:2c:22:f2:da:
d2:29:47:b2:50:1e:94:69:fe:03:d7:89:bd:41:9d:
2c:1a:c7:f7:30:fc:ba:f5:b9:4c:f1:32:67:6e:fd:
e3:eb:6d:81:ec:c6:f1:8e:93:52:8f:55:61:c2:e7:
7e:f7:42:2a:25:38:3a:6b:21:2a:59:f2:58:db:7f:
e9:f2:06:9f:56:ec:71:a1:e7:04:a9:9c:ee:d7:76:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:53:28:D2:42:B5:1C:4D:AF:75:8E:BA:10:BA:86:0C:FB:ED:55
X509v3 Authority Key Identifier:
keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:90:91:3e:2b:f4:02:61:18:58:c1:93:9a:24:72:78:1a:
31:1c:11:a7:17:8b:e8:4b:16:6a:05:2c:e5:12:1e:ed:e7:35:
39:f7:b7:26:76:ed:1c:d2:ad:25:48:c1:85:74:3f:28:bd:2d:
33:cd:1c:1d:69:da:2b:dd:43:7c:35:c7:f5:de:80:3f:bc:df:
c9:21:37:81:ef:d5:27:44:eb:fb:9b:4e:0b:85:93:4c:0d:4e:
63:c9:a2:18:4d:61:12:b9:92:c3:35:78:98:15:0c:e1:6c:c9:
90:16:a1:59:05:89:34:28:96:53:a0:64:52:da:4e:d9:ec:97:
fc:d0:13:39:c6:69:7b:76:7b:c5:63:2a:fe:b6:5d:0f:f4:4d:
d8:e2:85:f4:26:82:7c:20:ba:34:06:80:70:e0:7c:dd:df:93:
e1:94:0b:1c:93:6f:ec:e0:74:02:80:02:c3:0e:ec:eb:bf:e9:
23:9a:db:2b:5a:f2:c3:30:19:25:8e:ae:6d:82:01:94:28:15:
72:be:33:04:fd:97:59:aa:6c:c4:2e:5d:d0:dd:84:ca:86:8d:
0a:3b:1b:4e:96:de:0b:ed:a2:fc:2d:60:cc:41:9d:29:49:16:
5d:6d:99:c0:d8:68:6f:a7:b4:74:c2:ea:c4:7b:82:ea:71:d5:
3d:c5:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:31 2026 by rpki-client