
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier: RwRkIOH0XVsJvdFGIJW9NIBfJqZWzzWZKcvDn8pzQs8=
Subject key identifier: A1:9B:19:99:E0:3A:5C:99:9D:68:37:7C:07:0C:5D:B3:7E:73:21:FE
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number: 0148
Signing time: Thu 21 May 2026 05:26:52 +0000
Manifest this update: Thu 21 May 2026 05:26:52 +0000
Manifest next update: Thu 28 May 2026 05:26:52 +0000
Files and hashes: 1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: qHPDeoXaRjESTdNH8DUK6xxJN3S7hc1D7IvdfFGyUvs=)
2: B538B552701211EFB6868329C4F9AE02.roa (hash: +r7tbi6WVUntCm60F2BN4Gz2em1ApwcRGlCJmDJjK9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: May 21 05:26:52 2026 GMT
Not After : May 28 05:26:52 2026 GMT
Subject: CN=6a0e979c-315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:54:3e:c6:0d:97:1e:d8:4a:80:f9:1a:ab:
e9:2d:eb:26:12:11:9e:61:44:02:d3:59:47:45:8a:
8c:06:65:e0:3e:e9:fb:93:5c:08:81:09:42:75:e9:
44:17:c4:f5:fc:68:56:33:36:06:56:4f:6b:98:d2:
0c:a3:ed:6e:4f:d0:6a:84:96:14:f0:aa:39:7e:d9:
c6:87:76:0f:51:38:e7:78:53:3f:ef:0d:84:cc:82:
3c:e6:c9:78:7d:87:b0:ab:f5:a0:d2:83:18:77:24:
2c:15:f7:e7:62:37:f5:61:49:2d:c0:b8:f6:98:98:
2c:48:f0:7d:2a:66:6a:77:fd:db:bc:49:4f:3d:22:
3b:43:4f:68:48:ef:f1:0a:75:9f:24:88:d9:8f:4f:
ef:5c:ef:11:50:c3:bc:9e:c2:05:57:18:b9:5e:08:
69:75:80:68:ca:35:4b:ac:94:f8:10:50:48:aa:fc:
25:ac:c1:a1:69:3c:42:85:0a:c7:7b:31:6c:1b:10:
c5:f6:60:3b:3c:93:a6:8b:2d:6b:cc:dd:ca:8c:88:
db:1b:10:6c:24:0f:59:a9:d2:80:de:80:95:15:b7:
2a:2f:1d:f8:dd:02:8a:16:73:d0:ba:43:ea:33:2a:
ed:fb:36:6d:e7:ef:2f:4f:e8:ca:99:e6:6f:47:ab:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:19:99:E0:3A:5C:99:9D:68:37:7C:07:0C:5D:B3:7E:73:21:FE
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9a:fa:08:0a:a9:c7:73:7c:a1:98:22:67:c2:4c:37:6b:b9:
69:3c:ce:9f:99:22:fc:3a:0c:2a:28:ee:78:b3:fa:36:f7:ea:
f5:94:c5:be:86:ff:a2:c3:5a:0b:da:0e:fe:83:89:dd:c4:54:
c6:04:f6:a1:e6:7c:9d:bf:eb:b0:c8:df:0b:16:ba:b2:28:53:
3c:d3:1a:02:90:4f:22:67:97:b2:f2:da:cc:a1:64:6d:3f:71:
f9:d3:50:1b:15:24:c8:13:1d:aa:a6:de:c2:18:9d:c9:52:c9:
af:47:a9:06:ff:f0:f7:1d:57:02:c8:a6:1a:7e:2d:38:2a:de:
8f:ed:55:54:b6:29:4e:1e:1f:d6:9d:c8:4f:bb:7e:e1:a6:a6:
a4:15:6b:e0:c1:89:a1:13:75:24:2a:c2:d0:b8:c0:73:09:a0:
2e:18:f1:cb:1f:46:15:3e:f5:e2:69:b7:55:af:d9:77:44:d7:
c9:c7:65:c8:ce:31:f1:2a:9c:3d:26:d0:70:3d:a4:7c:a5:21:
a3:86:f4:8b:07:7c:9d:e5:48:c1:fa:2c:08:91:70:b1:84:f8:
99:af:a4:2e:a9:65:64:60:db:e1:8a:23:33:c2:a9:c9:ee:22:
ac:be:63:ad:4d:6f:80:3e:f3:52:a1:89:1c:e9:80:14:1e:22:
a3:c0:d7:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDRjUxMTAvBgNVBAUTKEZENUEzRjVBMUYzMzU3NDRDMEMxNDJBQzQyMTdFQ0JD
M0QyMENBMEYwHhcNMjYwNTIxMDUyNjUyWhcNMjYwNTI4MDUyNjUyWjAYMRYwFAYD
VQQDEw02YTBlOTc5Yy0zMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHFUPsYNlx7YSoD5GqvpLesmEhGeYUQC01lHRYqMBmXgPun7k1wIgQlCdelE
F8T1/GhWMzYGVk9rmNIMo+1uT9BqhJYU8Ko5ftnGh3YPUTjneFM/7w2EzII85sl4
fYewq/Wg0oMYdyQsFffnYjf1YUktwLj2mJgsSPB9KmZqd/3bvElPPSI7Q09oSO/x
CnWfJIjZj0/vXO8RUMO8nsIFVxi5XghpdYBoyjVLrJT4EFBIqvwlrMGhaTxChQrH
ezFsGxDF9mA7PJOmiy1rzN3KjIjbGxBsJA9ZqdKA3oCVFbcqLx343QKKFnPQukPq
Myrt+zZt5+8vT+jKmeZvR6t3WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGbGZng
OlyZnWg3fAcMXbN+cyH+MB8GA1UdIwQYMBaAFP1aP1ofM1dEwMFCrEIX7Lw9IMoP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUNGNS81QjMwQzQ5QTZG
M0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYwVEF3VUtzUWhmc3ZEMGd5
ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19Wb19XaDh6VjBUQXdVS3NRaGZzdkQwZ3lnOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUNGNS81QjMwQzQ5QTZGM0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYw
VEF3VUtzUWhmc3ZEMGd5ZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfpr6CAqpx3N8oZgiZ8JMN2u5aTzOn5ki/DoMKijueLP6Nvfq9ZTFvob/osNa
C9oO/oOJ3cRUxgT2oeZ8nb/rsMjfCxa6sihTPNMaApBPImeXsvLazKFkbT9x+dNQ
GxUkyBMdqqbewhidyVLJr0epBv/w9x1XAsimGn4tOCrej+1VVLYpTh4f1p3IT7t+
4aampBVr4MGJoRN1JCrC0LjAcwmgLhjxyx9GFT714mm3Va/Zd0TXycdlyM4x8Sqc
PSbQcD2kfKUho4b0iwd8neVIwfosCJFwsYT4ma+kLqllZGDb4YojM8Kpye4irL5j
rU1vgD7zUqGJHOmAFB4io8DXSw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:39:31 2026 by rpki-client