
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier: QDDqk6onoTOSDG1+zsK3k19UPKyoSQruAD8vltzkHC8=
Subject key identifier: 44:DA:BE:8E:BA:8A:4B:E5:22:F0:EE:23:38:66:C0:25:DE:3F:3F:52
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number: 0149
Signing time: Fri 23 Oct 2026 06:10:25 +0000
Manifest this update: Fri 23 Oct 2026 06:10:25 +0000
Manifest next update: Fri 30 Oct 2026 06:10:25 +0000
Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: LbDXS4fI5FigQIQ/AYolvTEe4F814Ve30pg1X7s1gLQ=)
2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc=)
3: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: xZAQVFBAuCRw9GeATu83PkDRuX+f5O+jwXu5MsByzpg=)
4: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=)
5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=)
6: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 06:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Validity
Not Before: Oct 23 06:10:25 2026 GMT
Not After : Oct 30 06:10:25 2026 GMT
Subject: CN=6adafa51-440a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:db:c3:06:3f:26:57:a1:7d:5a:c0:f6:d4:
9d:49:cf:32:ad:7d:53:ef:9d:9b:6a:c6:5b:34:71:
87:03:54:63:c3:e5:ef:01:bc:6e:1b:99:79:c4:c9:
c5:c5:c0:39:f7:85:41:1a:ef:eb:ea:30:25:94:5c:
33:31:9b:55:94:02:c2:7e:76:ca:fb:3a:37:d6:95:
0b:a2:1b:71:39:7f:00:c4:25:f8:af:1b:4d:b4:71:
cf:a9:4b:eb:76:91:d5:34:59:f0:24:65:23:c7:4d:
e5:d2:04:f3:33:dc:66:aa:58:95:d8:04:ff:32:c2:
09:02:cc:9e:bb:44:d2:fd:bf:8c:b9:74:1f:40:3e:
62:d5:59:ba:92:a0:d8:43:2a:f2:bb:8a:d4:d4:72:
99:da:8d:52:80:15:22:0e:64:47:4b:1f:64:aa:b3:
37:f1:9d:3f:55:d0:73:77:6f:6e:d2:77:4e:96:b9:
6f:0a:b9:d5:d1:45:8d:e7:a1:b7:53:2f:6a:35:33:
93:eb:f0:f8:25:f0:57:ea:1c:49:3e:fe:63:53:fc:
de:7a:e8:3b:77:43:21:d9:20:93:b7:ed:38:ba:50:
b9:3e:20:58:29:cd:ed:68:d3:99:c9:4b:e3:e7:3c:
f7:cd:1a:c6:9a:4f:3d:b6:55:9b:cf:64:38:62:1e:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:BE:8E:BA:8A:4B:E5:22:F0:EE:23:38:66:C0:25:DE:3F:3F:52
X509v3 Authority Key Identifier:
keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:03:34:3f:f2:f8:0c:e3:34:fb:ed:7c:28:c1:dc:26:f4:8a:
d4:db:e3:14:72:96:61:e3:05:43:6e:bc:b5:21:00:a0:d4:52:
2d:53:ab:4f:99:66:a2:c0:1a:7c:49:7e:6b:1b:57:b9:8a:4c:
27:cc:ee:50:33:d8:0d:ce:29:65:2f:7c:30:19:41:c3:c1:7b:
41:ca:bf:05:33:39:89:10:5c:5a:bf:f9:54:2c:af:61:ed:7e:
dc:bf:a5:4d:5a:32:c2:b0:b3:40:b4:2b:78:3f:94:34:c7:8e:
d4:c8:bf:22:4a:56:0b:1d:97:40:9d:97:ca:bc:4e:43:24:2d:
67:07:3c:48:46:80:4e:e9:f0:91:52:13:2d:13:77:ef:3f:fc:
ba:18:b9:62:3a:b5:d6:dd:90:84:5f:31:f3:f7:f7:ae:08:41:
13:48:78:a1:e5:dd:55:e7:db:0f:ce:10:bd:f6:d9:b4:ce:33:
a0:b6:e7:fc:38:3e:e7:08:40:2a:85:6e:9e:48:92:38:36:49:
c6:8f:c7:36:47:09:85:4e:6e:dc:a6:4f:aa:09:b2:3d:0b:36:
d3:73:97:7b:48:05:8d:68:35:0b:d5:a2:02:e3:cb:7a:27:53:
92:b8:46:50:f5:34:44:21:a2:4b:71:7d:0e:1e:ab:33:c7:0e:
ce:a5:81:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy
QjcwRTJGOTkwHhcNMjYxMDIzMDYxMDI1WhcNMjYxMDMwMDYxMDI1WjAYMRYwFAYD
VQQDEw02YWRhZmE1MS00NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJPbwwY/JlehfVrA9tSdSc8yrX1T752basZbNHGHA1Rjw+XvAbxuG5l5xMnF
xcA594VBGu/r6jAllFwzMZtVlALCfnbK+zo31pULohtxOX8AxCX4rxtNtHHPqUvr
dpHVNFnwJGUjx03l0gTzM9xmqliV2AT/MsIJAsyeu0TS/b+MuXQfQD5i1Vm6kqDY
Qyryu4rU1HKZ2o1SgBUiDmRHSx9kqrM38Z0/VdBzd29u0ndOlrlvCrnV0UWN56G3
Uy9qNTOT6/D4JfBX6hxJPv5jU/zeeug7d0Mh2SCTt+04ulC5PiBYKc3taNOZyUvj
5zz3zRrGmk89tlWbz2Q4Yh5jhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETavo66
ikvlIvDuIzhmwCXePz9SMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC
MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj
UTF5TTlWd3BIeElyY09MNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIAM0P/L4DOM0++18KMHcJvSK1NvjFHKWYeMFQ268tSEAoNRSLVOrT5lmosAa
fEl+axtXuYpMJ8zuUDPYDc4pZS98MBlBw8F7Qcq/BTM5iRBcWr/5VCyvYe1+3L+l
TVoywrCzQLQreD+UNMeO1Mi/IkpWCx2XQJ2XyrxOQyQtZwc8SEaATunwkVITLRN3
7z/8uhi5Yjq11t2QhF8x8/f3rghBE0h4oeXdVefbD84QvfbZtM4zoLbn/Dg+5whA
KoVunkiSODZJxo/HNkcJhU5u3KZPqgmyPQs203OXe0gFjWg1C9WiAuPLeidTkrhG
UPU0RCGiS3F9Dh6rM8cOzqWBKg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 20:03:56 2026 by rpki-client