
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
File: VU0O_yINZrbppAkPDcy6milc3bU.mft (raw, json)
Hash identifier: jLgVp4GpHIm9gmCAp5DKtzxhLt9xIL++5dQ6tbzUn2A=
Subject key identifier: 5B:1C:69:46:EC:2C:81:A5:B3:BE:E2:B6:C5:3F:91:59:91:AE:38:AD
Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5
Certificate issuer: /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
Manifest number: BA
Signing time: Sun 05 Apr 2026 06:28:35 +0000
Manifest this update: Sun 05 Apr 2026 06:28:34 +0000
Manifest next update: Sun 12 Apr 2026 06:28:34 +0000
Files and hashes: 1: VU0O_yINZrbppAkPDcy6milc3bU.crl (hash: vExDhA9pxaLlhTE8arXHXcLen2g9avEqLYrMktiYm0Q=)
2: 4499D9921F4A11F0AF06577CC4F9AE02.roa (hash: Nrn9HJKbbAN6/WO7m56GfRo1g91ZrJZGME+tEexROGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl
rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
Validity
Not Before: Apr 5 06:28:34 2026 GMT
Not After : Apr 12 06:28:34 2026 GMT
Subject: CN=69d20113-f8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:e1:9f:b6:30:2f:1f:d3:1a:df:56:79:c7:
23:98:fd:e0:8a:21:a7:01:4d:26:81:26:e0:4d:d3:
59:4a:18:3c:0c:68:91:f2:64:ad:1d:ce:10:47:82:
69:d1:cf:12:11:c6:b1:bc:5b:93:e3:69:83:84:00:
52:0b:23:c8:0e:ac:74:3f:d9:ea:1b:63:ac:43:01:
80:82:06:3b:b3:12:0f:8d:62:de:2d:26:51:ff:56:
cb:bc:92:d2:e7:0a:52:33:84:f0:08:91:e8:7b:5e:
02:e6:e5:39:28:d7:1e:8a:0f:22:8c:32:98:21:26:
c5:9b:43:a7:05:92:5f:40:86:10:4e:b7:52:49:e2:
17:01:60:e5:90:82:8b:cd:82:f8:46:c5:8d:ed:dd:
d6:14:44:6c:32:2a:70:19:81:be:e9:81:7f:0e:9c:
4e:88:4e:85:25:11:8e:c3:3b:40:6b:f6:d6:31:f1:
c7:4c:1c:87:3f:93:e8:ab:89:a5:9e:7d:b1:25:9d:
ae:fd:cf:8d:09:6e:8f:04:9e:2a:36:7b:7f:63:31:
2e:00:fc:dc:7b:67:ba:f0:8f:8e:62:57:08:7b:ff:
de:26:ec:4f:70:67:a9:9f:91:4b:00:bd:4e:b1:37:
29:c1:59:ff:aa:b5:6f:60:fe:54:82:59:d6:4f:df:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:69:46:EC:2C:81:A5:B3:BE:E2:B6:C5:3F:91:59:91:AE:38:AD
X509v3 Authority Key Identifier:
keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d5:8f:e6:47:d5:c0:5a:66:1f:ce:11:b6:36:f5:44:4d:eb:
d7:e3:29:69:bb:5e:33:43:53:7c:36:3d:ed:b6:30:92:cc:f9:
ff:62:6b:7b:2a:be:3e:b8:8c:2d:ba:ac:76:8d:45:a1:dc:95:
95:eb:7c:33:8d:c7:93:a3:5b:a3:60:11:64:52:7d:d9:80:9d:
b7:fe:69:4a:4d:e8:fb:23:ea:ad:66:8f:a0:ab:ad:2f:a6:ad:
f0:54:30:3e:51:fa:fd:dc:21:c3:b9:51:c0:8d:3c:74:7d:dd:
83:ef:de:3d:77:06:6b:de:a3:35:fd:f4:5a:a4:1b:6f:ab:e2:
77:15:29:f0:b4:0e:36:24:a9:6d:ca:53:a5:a1:12:ea:4a:6e:
d3:5b:4e:76:fe:99:86:13:81:8f:ae:e2:16:48:96:45:4b:27:
35:21:9c:6a:d8:73:a1:aa:de:fa:e2:e8:39:9d:ec:6e:4e:e0:
6e:8b:de:63:b4:fb:9c:c6:56:e8:a9:86:db:88:39:1c:d5:9e:
67:3f:3d:e3:14:8f:05:7a:0a:3f:00:b2:0c:4a:12:24:80:f3:
4e:81:49:c5:fd:09:57:1d:db:9a:2f:82:0c:06:62:84:e8:ff:
f3:04:de:3c:87:1f:dd:61:05:08:99:b2:c9:4a:34:93:6d:e9:
28:a7:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:10 2026 by rpki-client