
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
File: VC3eAu1c1aeKWFAwa556fpn8Jgs.mft (raw, json)
Hash identifier: i3IJUqVm394JRD1Uj9+iR5pBQLfOWrPw01ZDRtwrUEQ=
Subject key identifier: BC:61:C3:43:CD:62:BD:72:89:7E:D2:D5:61:42:FD:47:83:34:A0:26
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Certificate issuer: /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
Manifest number: 29
Signing time: Tue 21 Apr 2026 08:35:30 +0000
Manifest this update: Tue 21 Apr 2026 08:35:30 +0000
Manifest next update: Tue 28 Apr 2026 08:35:30 +0000
Files and hashes: 1: VC3eAu1c1aeKWFAwa556fpn8Jgs.crl (hash: 7h2ReVon+mPGK0Ifo/+WS8+6vzCeTOCHjNCyVLpDSy8=)
2: D111CFB407E411F1ADC4A5A5213D8C67.roa (hash: lUmpfgR/p5W8luIbaZ+1ADUqFYn/T6101vy4MSXsnuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 08:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Validity
Not Before: Apr 21 08:35:30 2026 GMT
Not After : Apr 28 08:35:30 2026 GMT
Subject: CN=69e736d2-6b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:b2:0a:b7:40:b3:18:74:c9:fb:8b:23:27:
58:cd:73:d7:1f:b1:20:9c:27:62:1e:8b:93:a2:cf:
7e:60:3d:0c:3d:8f:ef:7a:f8:6f:c1:2d:38:f8:0c:
3c:f7:b0:6f:d6:49:b7:bc:67:5a:ef:0b:f4:65:d9:
3e:2c:1b:64:9a:6b:2b:b3:d5:f9:7d:72:5d:a6:04:
ec:88:f6:55:0e:8a:8b:cb:61:d5:cb:5e:e0:93:dc:
42:ca:c9:af:2a:1c:65:0e:db:ff:a4:06:37:f3:56:
59:53:53:19:bd:9b:14:95:e1:0c:95:33:16:c6:2a:
74:9c:48:8c:4d:99:5f:50:63:bb:1f:c0:2a:51:3a:
50:e0:77:3c:d4:48:c3:6e:3e:f5:9d:98:e7:d8:3a:
3d:a2:8c:52:67:b4:53:32:2a:e9:c8:44:b2:a9:c6:
7d:f3:f3:64:f6:9f:39:16:9b:fd:2a:f8:12:48:53:
c2:4d:bb:a7:f2:d0:be:aa:f2:7f:09:c6:b6:53:1c:
ce:b8:33:64:90:2b:2e:96:57:25:8c:78:b7:5d:3c:
73:fd:06:34:de:2b:d8:ca:df:d2:a7:bc:56:8b:29:
54:f2:4b:95:1c:74:31:be:d6:70:d8:80:2e:49:05:
1a:f3:11:ba:81:bb:ae:5a:8a:34:07:e5:26:fa:c4:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:C3:43:CD:62:BD:72:89:7E:D2:D5:61:42:FD:47:83:34:A0:26
X509v3 Authority Key Identifier:
keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f7:75:dd:15:03:96:2d:fd:49:1f:db:58:ea:3e:31:b1:52:
5d:ca:f8:dc:68:17:f8:8e:ca:d1:9d:60:ea:d2:60:6e:ca:62:
0a:e6:e8:81:00:84:33:d7:b8:dd:2b:5a:67:d7:aa:23:b4:cc:
3f:db:40:b1:e7:3b:12:68:65:af:50:10:f9:8c:83:ca:3e:77:
e6:79:73:0a:b0:3e:9b:0f:7b:29:03:4f:99:a9:cf:5e:3b:35:
be:b8:44:3c:7a:fa:ee:ce:0d:8c:86:1c:b2:89:f6:6b:44:b3:
cb:e4:d5:17:93:5d:ef:ff:6c:3d:65:51:32:b7:f4:6f:75:b0:
95:c1:92:40:b6:b4:ff:ae:cb:33:1d:52:2d:85:da:28:56:02:
aa:86:98:b0:20:ce:47:82:08:bf:db:8f:28:2e:c7:39:a4:cc:
86:ff:df:5c:d9:6a:13:4e:b7:ac:40:ef:d6:e1:59:71:ff:85:
f4:81:bd:5a:05:ea:39:f8:be:01:62:4b:df:28:02:3c:69:d5:
f6:e9:a4:7d:e0:c0:7e:98:dc:5a:e1:8e:17:8d:45:eb:45:12:
6f:f7:50:97:72:be:66:6c:80:29:5b:5b:24:fb:2b:33:cb:64:
37:b4:2c:6e:2d:d8:79:15:a1:62:0a:23:58:69:a5:d0:d3:be:
27:25:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:13:28 2026 by rpki-client