
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier: SLh5H9BeRkuQewUBCMOD8p4dGip2x4jTIY6nX0Fp8GU=
Subject key identifier: FD:0A:F3:21:C6:4D:19:6D:77:A1:0A:A5:28:46:EF:2C:53:92:F9:A2
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number: EA
Signing time: Fri 17 Apr 2026 06:26:05 +0000
Manifest this update: Fri 17 Apr 2026 06:26:05 +0000
Manifest next update: Fri 24 Apr 2026 06:26:05 +0000
Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: L8MOF+7QBox/cNeQ/m+LHTRa2gP3mQLNFVnHMPE81pQ=)
2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc=)
3: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: xZAQVFBAuCRw9GeATu83PkDRuX+f5O+jwXu5MsByzpg=)
4: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=)
5: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=)
6: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Validity
Not Before: Apr 17 06:26:05 2026 GMT
Not After : Apr 24 06:26:05 2026 GMT
Subject: CN=69e1d27d-dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:bf:c2:e7:2a:71:5d:15:5e:e7:c5:70:98:
32:49:7c:19:48:61:43:2d:31:cc:b4:75:ae:b0:39:
8a:3b:68:0f:cb:59:3f:9d:ed:98:97:df:12:1f:c5:
ec:e9:ab:36:63:8d:9c:03:ec:82:a8:16:22:53:03:
9c:14:3f:ef:22:ca:79:e8:1c:f2:53:fe:01:0d:3b:
b8:05:af:dd:ad:a6:85:40:38:07:80:9d:ab:87:44:
a9:6f:5f:1d:d5:ad:14:3c:0f:4a:9f:3e:af:a8:99:
02:44:ba:98:a9:15:87:1e:a3:26:94:ad:60:eb:c3:
cb:4b:27:7f:b8:3c:75:a5:fb:09:29:a4:02:9c:dd:
be:60:9b:b7:24:e2:4e:49:cb:39:92:f7:58:25:45:
0a:fc:ae:cc:b4:d2:44:92:ed:2d:af:b6:77:e4:5d:
4b:4a:fc:87:a7:75:d7:16:b6:ca:b8:c6:b9:0e:68:
8d:75:f3:32:cf:24:ea:76:0b:71:57:20:18:bb:9b:
a9:82:39:5a:f1:33:7d:ae:9a:5d:3a:de:9e:fb:64:
fa:2d:2b:66:dd:44:78:36:ae:9f:5e:b1:77:be:06:
e0:d2:ae:d8:da:b1:12:f2:8a:cc:f3:08:98:5f:00:
ad:ee:4a:c6:b8:f6:29:27:66:d3:b5:f7:25:d3:59:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:F3:21:C6:4D:19:6D:77:A1:0A:A5:28:46:EF:2C:53:92:F9:A2
X509v3 Authority Key Identifier:
keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:9f:fa:9b:66:a8:c3:84:d6:15:10:79:a9:a1:51:f3:72:c6:
cd:43:40:e2:26:ca:fd:ed:71:fa:56:5c:7a:8d:25:c3:77:b8:
d4:32:88:a1:bf:74:bd:69:6a:b5:0a:fa:63:b5:43:0c:c9:8b:
c9:cc:47:ed:d8:bb:b9:c1:44:c5:ca:f8:bd:b2:2d:2d:34:06:
ca:e9:68:5d:be:fe:9a:46:fc:95:c8:58:af:a1:5c:5c:1f:8d:
92:f5:61:58:d6:71:c1:6c:cf:7f:06:54:6a:66:b4:b4:67:0e:
e5:de:54:fb:81:2c:e9:21:60:02:4d:df:d3:ed:fd:bd:62:d3:
53:74:0f:67:df:cc:14:e5:a1:d6:88:6f:ab:5c:37:23:4f:26:
9e:c8:b9:c4:8f:43:ba:9a:41:fd:93:d9:2c:c7:aa:d4:67:90:
b9:f7:95:a7:77:60:61:fc:62:96:64:2c:6a:3d:6b:55:45:be:
58:72:97:93:99:8f:6e:c2:28:0a:38:f4:96:f4:e0:2c:75:0f:
8c:0d:8b:a1:ef:7e:6a:7f:54:45:65:31:31:5a:27:e5:d2:93:
12:01:ab:41:a3:1a:82:18:8d:a1:af:e0:3b:cc:c9:a8:17:00:
87:5a:c4:0d:56:0f:b7:34:bf:fa:8c:9c:9d:22:f4:9d:dc:34:
1a:32:be:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy
QjcwRTJGOTkwHhcNMjYwNDE3MDYyNjA1WhcNMjYwNDI0MDYyNjA1WjAYMRYwFAYD
VQQDEw02OWUxZDI3ZC1kYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5y/wucqcV0VXufFcJgySXwZSGFDLTHMtHWusDmKO2gPy1k/ne2Yl98SH8Xs
6as2Y42cA+yCqBYiUwOcFD/vIsp56BzyU/4BDTu4Ba/draaFQDgHgJ2rh0Spb18d
1a0UPA9Knz6vqJkCRLqYqRWHHqMmlK1g68PLSyd/uDx1pfsJKaQCnN2+YJu3JOJO
Scs5kvdYJUUK/K7MtNJEku0tr7Z35F1LSvyHp3XXFrbKuMa5DmiNdfMyzyTqdgtx
VyAYu5upgjla8TN9rppdOt6e+2T6LStm3UR4Nq6fXrF3vgbg0q7Y2rES8orM8wiY
XwCt7krGuPYpJ2bTtfcl01k+yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0K8yHG
TRltd6EKpShG7yxTkvmiMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC
MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj
UTF5TTlWd3BIeElyY09MNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWJ/6m2aow4TWFRB5qaFR83LGzUNA4ibK/e1x+lZceo0lw3e41DKIob90vWlq
tQr6Y7VDDMmLycxH7di7ucFExcr4vbItLTQGyuloXb7+mkb8lchYr6FcXB+NkvVh
WNZxwWzPfwZUama0tGcO5d5U+4Es6SFgAk3f0+39vWLTU3QPZ9/MFOWh1ohvq1w3
I08mnsi5xI9DuppB/ZPZLMeq1GeQufeVp3dgYfxilmQsaj1rVUW+WHKXk5mPbsIo
Cjj0lvTgLHUPjA2Loe9+an9URWUxMVon5dKTEgGrQaMaghiNoa/gO8zJqBcAh1rE
DVYPtzS/+oycnSL0ndw0GjK+gQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:19 2026 by rpki-client