
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: XjCaMvjRZEGussRVXaVJtVKkNB6CG7aeXMyYwCkDs7k=
Subject key identifier: 50:BC:76:2B:5E:31:B1:C9:80:80:56:0F:F6:26:7D:86:37:25:6D:D9
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 036E
Signing time: Sun 05 Apr 2026 00:37:28 +0000
Manifest this update: Sun 05 Apr 2026 00:37:27 +0000
Manifest next update: Sun 12 Apr 2026 00:37:27 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: w90CbnbF9I0nQkn4rrJ1TP7qub5We9a/Z9YQHivMfqU=)
2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Apr 5 00:37:27 2026 GMT
Not After : Apr 12 00:37:27 2026 GMT
Subject: CN=69d1aec8-ab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:a0:71:64:25:0b:03:0a:7a:ce:ab:f9:f8:
ad:7a:ee:43:9e:9c:db:e0:88:5f:4b:eb:cb:25:1d:
52:50:d2:97:ad:38:21:fb:56:50:e7:36:e1:f2:b5:
59:42:f6:af:d6:15:1c:52:ba:8a:51:80:63:c3:64:
14:a0:12:c4:53:8c:fd:2b:5e:01:04:f6:97:d9:7f:
fa:03:27:62:8b:aa:41:42:cd:a7:e3:75:54:16:a0:
8e:87:58:ef:81:42:25:10:ae:7f:e6:c1:38:c3:f9:
84:0f:d5:e9:c2:58:aa:25:ea:58:6c:8f:f8:c4:97:
9e:ad:25:59:11:47:cd:c1:af:8a:67:97:87:aa:32:
fc:24:91:fa:f7:17:69:bf:48:07:ca:6c:f4:9c:fe:
8e:eb:18:ef:0a:ac:b0:d9:1b:24:b9:c5:e5:42:49:
63:75:e2:71:16:4d:2b:30:f3:73:f8:c0:48:63:c0:
08:ae:65:24:fc:5b:a7:bc:94:e2:6d:cc:0a:6b:dd:
6f:f7:b0:be:a6:fe:80:fa:fb:a0:c9:c5:49:6b:85:
9e:ef:de:aa:b7:64:9d:a2:82:3f:86:fa:c2:65:44:
e9:9b:4b:30:d3:42:f8:63:dc:30:a1:9a:36:33:89:
ba:4b:c4:bb:8c:bc:c1:33:c5:43:21:d9:6f:f0:2f:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:76:2B:5E:31:B1:C9:80:80:56:0F:F6:26:7D:86:37:25:6D:D9
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:2e:ca:9f:cd:7a:96:01:cc:c0:3b:a1:d7:aa:ea:79:a1:
0a:92:49:e1:f5:38:9f:4e:91:d3:7f:40:43:56:80:63:97:6b:
b1:7d:cc:09:f5:b8:42:ea:42:47:10:ae:14:e7:0f:eb:79:c6:
b4:7d:6d:77:01:23:a6:ce:84:f1:fa:cd:97:fb:75:e1:5b:a8:
20:c7:ea:2c:85:7f:df:e5:ad:cf:34:8d:f7:b3:b9:d0:37:40:
ce:19:e1:58:56:25:c9:04:c3:b1:5a:dc:86:87:83:69:b5:6f:
42:a0:0c:11:fd:62:e3:99:45:d0:08:ae:12:ca:04:c4:1c:92:
9a:96:66:82:d5:a4:05:15:a0:db:22:4f:f2:2c:b3:0a:18:4a:
e8:30:aa:2c:de:94:47:ef:3f:a4:45:03:5c:66:34:72:14:c6:
83:0c:a1:47:73:78:b7:fe:1d:ad:dd:92:76:4d:2e:88:99:ab:
20:60:c4:74:7b:21:79:7b:87:9b:ce:c2:a3:40:2d:e1:64:0d:
8c:b0:ca:04:e3:da:0a:e0:12:64:0b:d3:d1:c2:4c:b7:13:93:
45:b3:52:ed:7e:db:d7:24:6e:7e:2f:99:7d:5d:48:85:aa:be:
34:2e:75:45:4b:c8:21:24:14:ed:ff:2a:34:fe:11:c7:9c:1f:
35:cc:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:04 2026 by rpki-client