
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier: X1VgWOPiO843SqD7w6nFRDS3FB5/hE79ln9fkF6TYcM=
Subject key identifier: B2:51:41:1A:FF:F3:40:84:B9:5B:2D:18:22:08:87:59:1F:F6:CB:AC
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial: 3652
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number: 35CA
Signing time: Thu 12 Mar 2026 14:29:56 +0000
Manifest this update: Thu 12 Mar 2026 14:29:55 +0000
Manifest next update: Thu 19 Mar 2026 14:29:55 +0000
Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: IHBKtaOQ2X8ji9JMWswdT0THP/LwihWAy6UL5Z9q0fA=)
2: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: hG8g9R9N6g9xsHSn0imR+1vWSozb3fa3uL51Vy8mhic=)
3: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: YixDUXuSIn+Hh+G5kFeWAZb1NF/MvO4aijdY29fevto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13906 (0x3652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Validity
Not Before: Mar 12 14:29:55 2026 GMT
Not After : Mar 19 14:29:55 2026 GMT
Subject: CN=69b2cde3-2ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:bb:a0:81:a7:7d:cc:8a:cd:f9:ad:cd:53:
93:d7:f4:f4:2f:fb:07:53:83:12:43:8f:80:e0:76:
92:ae:7e:bd:cd:76:20:52:95:52:86:b9:1c:0a:14:
9e:74:6f:cd:5b:32:ae:cd:58:b4:a5:f0:e5:bc:02:
28:e3:a7:f9:37:f1:de:a9:e2:46:58:47:35:23:0b:
c5:18:c3:dc:33:54:ef:55:60:c8:eb:56:11:aa:1b:
69:c9:d1:c2:30:77:ce:bd:05:72:33:a9:87:8a:0e:
91:72:38:08:4e:b1:52:23:67:05:5c:e6:89:34:81:
0b:64:b5:85:ad:c8:67:61:4e:1b:e9:b7:d7:a8:ee:
f4:20:9a:59:3f:ff:ec:d2:e4:55:77:61:b9:aa:df:
f3:0b:c7:95:07:25:ee:36:9e:4e:8c:3c:16:92:da:
29:24:d4:b2:2b:5d:af:88:f1:08:4c:44:09:5e:0b:
40:75:23:5e:06:cd:dc:a3:1a:7f:1f:4f:9f:54:c4:
95:c7:80:96:71:67:3d:99:cc:1e:45:5e:0b:ed:dd:
a4:85:da:0c:d1:50:4f:e9:5b:a3:fd:06:3a:68:4c:
27:1a:cc:5d:8f:1c:43:0e:39:8d:8e:77:f9:1e:21:
fd:cb:c4:8b:40:d8:89:ea:48:7b:50:82:b9:3f:a8:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:41:1A:FF:F3:40:84:B9:5B:2D:18:22:08:87:59:1F:F6:CB:AC
X509v3 Authority Key Identifier:
keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3a:24:e3:76:e0:d5:7e:f8:5e:aa:d9:b6:a7:22:70:6f:0f:
37:ab:89:ed:9b:0f:0f:e0:90:87:24:90:82:cf:36:de:96:00:
81:83:d7:40:34:8d:29:a6:1b:3c:f2:06:8a:26:5a:87:58:e6:
09:9d:8c:ab:b3:b5:b2:b2:f3:de:f0:7b:24:03:c2:93:9f:ed:
e3:df:63:e5:7c:06:99:56:03:b8:9c:54:65:15:7b:90:05:01:
d4:0f:1b:44:ae:7f:bd:21:2c:12:aa:cc:1b:ad:2a:8f:df:1c:
bd:57:aa:2d:12:09:ef:6d:95:04:2e:07:b3:c8:a3:9e:49:4d:
a2:9b:8c:f1:9a:be:af:d3:31:32:c0:0e:8e:48:f9:03:1c:31:
84:9f:df:fc:4f:e9:23:e6:07:80:6b:44:6e:41:e2:27:43:42:
08:17:46:46:e0:b8:07:ee:65:f5:42:13:56:b6:b0:bc:15:ad:
e2:72:e4:f9:eb:5b:2f:45:3c:0e:df:53:76:3c:49:04:76:8b:
5b:11:5f:54:0a:69:f5:57:b2:1d:ca:98:bc:2a:fa:2a:d4:99:
d0:a7:d2:c8:4a:50:ae:51:a9:0b:fe:f5:31:7a:45:23:e5:03:
5f:b3:69:42:f6:9b:8f:f1:1c:de:ea:05:4a:a3:fc:cb:92:96:
be:2f:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:55 2026 by rpki-client