
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier: 65KdCa8DBNjR69ny/eGDCaiDefe7uM0pVkTcEllX9mc=
Subject key identifier: DD:50:41:6E:2F:33:BF:6D:31:8B:8E:D3:2F:EB:4E:8B:65:D4:3E:FB
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number: DD
Signing time: Tue 31 Mar 2026 06:09:12 +0000
Manifest this update: Tue 31 Mar 2026 06:09:11 +0000
Manifest next update: Tue 07 Apr 2026 06:09:11 +0000
Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: Vpos78Sel8tDudx6XdP41g0kjuhUl5x8MMlm9utkqaw=)
2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=)
3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Validity
Not Before: Mar 31 06:09:11 2026 GMT
Not After : Apr 7 06:09:11 2026 GMT
Subject: CN=69cb6507-fa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:06:2d:f2:f1:39:2f:f8:dc:d8:25:2a:ad:
85:94:bc:47:a2:b1:d7:8a:26:c6:f6:a5:90:5d:2c:
51:10:7f:50:33:04:04:f4:5b:9f:97:b0:6e:1c:a1:
84:1b:7f:ad:5c:ec:47:13:85:3c:d6:90:07:ab:e5:
e6:73:8e:d2:1f:3d:2d:1f:38:6f:00:18:03:d3:c9:
8d:52:21:3d:40:fc:4d:36:0f:e8:37:a3:96:1e:11:
85:ad:83:09:23:0f:c9:ad:2c:96:17:92:f1:68:34:
2f:42:82:0d:e5:2b:da:9b:67:f9:60:82:87:5a:0b:
18:72:0c:af:67:9c:65:69:5b:a0:d9:1d:d0:a7:d0:
f3:25:d6:9c:c9:77:8c:f5:bc:99:a3:ee:db:45:e8:
1a:1a:c1:b0:0b:01:c3:64:66:e9:7b:16:5e:d0:a3:
5b:18:bd:00:80:df:f7:1d:7e:cb:6d:cd:6b:3b:95:
91:06:13:50:7b:e8:87:a7:cf:ab:d4:3c:ea:37:2a:
07:14:50:49:0b:c4:ae:d6:e4:c2:02:2b:06:6f:dc:
34:b9:72:c3:31:32:f2:14:9e:66:a5:74:4d:86:a8:
ea:b1:4d:6d:db:e2:ab:43:bc:52:9d:c5:cd:47:5a:
7b:27:da:f5:78:ed:84:b5:ef:23:97:cd:ca:33:b3:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:41:6E:2F:33:BF:6D:31:8B:8E:D3:2F:EB:4E:8B:65:D4:3E:FB
X509v3 Authority Key Identifier:
keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:77:60:e0:8e:09:6a:33:d0:3f:59:e3:99:7d:7b:39:be:9a:
8b:38:aa:e1:2c:48:51:00:7d:be:94:a3:1c:26:1e:54:0a:cc:
5d:26:b1:24:ad:8b:f6:03:37:29:a2:6c:fe:91:50:ec:fb:90:
0b:1a:da:1c:77:fc:bd:68:01:af:c3:6e:d0:a9:51:01:b8:68:
e9:f5:a8:67:c9:8c:8b:ae:26:f5:90:f8:ef:aa:62:d3:82:48:
e5:75:eb:82:c0:15:c0:d3:db:b3:af:2f:fa:63:cd:5d:23:df:
a1:d0:a0:33:00:35:9a:6d:a7:af:46:72:e4:d4:3a:a0:84:38:
41:e3:9f:a3:c3:de:be:61:9f:d3:fc:82:55:a7:f9:43:13:ff:
92:ca:b0:13:12:09:d2:ab:77:d9:57:20:49:d7:b6:9c:61:07:
8b:16:ea:84:d9:96:f1:33:a0:6c:3d:01:5d:52:9a:80:69:ce:
86:39:d4:f7:4d:93:f8:01:39:02:4d:35:f0:82:d5:6e:d4:b3:
db:e8:ba:db:d6:60:a8:84:5c:5f:a7:39:89:5e:f2:a1:ce:04:
2a:ff:d4:09:bb:0f:31:7a:19:ef:0b:97:67:ec:32:89:07:7c:
fc:10:f5:9b:45:68:e8:5c:31:a8:50:2b:f4:49:56:0a:98:98:
18:06:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 15:30:25 2026 by rpki-client