
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier: kZ2pNenpaeI0jm/O8F6d1fmp1+aijEM79nta/Vmgdsc=
Subject key identifier: 2E:87:50:E6:28:63:14:33:19:58:F7:FF:EC:32:5F:BF:E4:B0:BD:4C
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number: 0130
Signing time: Thu 03 Sep 2026 06:04:19 +0000
Manifest this update: Thu 03 Sep 2026 06:04:18 +0000
Manifest next update: Thu 10 Sep 2026 06:04:18 +0000
Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: KzQvdafpeQLpaXrudPMxhZoCJ+AgRbrgm+ZSk1fDFu4=)
2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc=)
3: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: xZAQVFBAuCRw9GeATu83PkDRuX+f5O+jwXu5MsByzpg=)
4: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=)
5: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=)
6: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Validity
Not Before: Sep 3 06:04:18 2026 GMT
Not After : Sep 10 06:04:18 2026 GMT
Subject: CN=6a990de3-631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:25:90:a3:52:a4:cf:44:87:43:44:a2:05:
a2:e1:a9:1c:63:6e:f4:70:4d:de:af:5e:0d:f7:b2:
d2:d8:4a:b8:e3:fc:f4:cc:ef:66:19:7e:77:bf:67:
b7:e6:2a:42:b4:ff:81:ee:87:0b:3e:97:87:87:ac:
15:ab:e8:b0:76:e4:7e:b0:24:13:d9:04:20:d7:8f:
19:90:3f:5b:7d:73:92:91:f7:ac:f2:5f:8e:d6:2e:
0e:1f:68:ed:e0:28:ca:8d:c7:9a:0c:72:63:6f:fe:
12:16:83:6a:71:85:64:5e:c5:03:54:67:9f:f5:7e:
44:b5:88:9e:c9:2c:e4:e6:f5:2d:64:1b:dc:13:11:
51:60:47:5b:d6:92:78:79:94:5b:ec:25:e4:71:51:
ce:8c:3e:a0:42:4f:69:7b:9a:9f:f7:10:51:ee:e1:
67:ab:34:97:f1:4f:10:1a:c9:74:e4:5f:b3:cf:4d:
39:04:22:8d:3d:49:9e:a9:71:f5:45:ae:c9:04:44:
a2:ef:30:2f:15:2a:c1:0b:d7:96:aa:0c:64:43:e9:
28:6a:cc:8b:98:30:14:18:3e:b0:30:03:91:2e:52:
75:85:5e:93:9e:1f:82:1d:60:86:da:48:cd:05:73:
71:35:a3:b1:b1:c0:38:09:65:7f:c5:71:1d:e4:bf:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:87:50:E6:28:63:14:33:19:58:F7:FF:EC:32:5F:BF:E4:B0:BD:4C
X509v3 Authority Key Identifier:
keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:be:20:e0:ba:39:43:a4:f1:c9:31:e6:da:97:a2:eb:94:
d0:1f:f7:28:37:84:ca:92:1b:c2:1e:95:c2:74:7d:3b:b0:50:
af:a4:60:50:fc:62:77:45:96:30:d9:e2:5b:f8:c3:a6:4d:58:
fe:41:3e:f2:ee:a4:a8:d6:f2:ae:00:69:ad:5c:5e:15:d4:5e:
54:f0:13:a6:9a:45:b9:83:f9:d9:05:f5:d5:21:3e:52:db:64:
01:80:79:7a:9d:a2:b7:51:41:53:4c:38:9f:a3:a1:e1:07:e1:
46:35:a0:70:f5:0a:e7:77:fd:be:21:77:9b:0f:18:97:b9:8c:
99:61:87:47:78:26:c3:f5:8f:68:04:29:37:a0:55:ae:b7:b2:
88:e2:c8:51:6e:1b:81:5c:b6:23:fe:0f:89:d9:06:ed:ee:36:
f2:99:b6:4d:78:65:d5:09:26:dd:a8:f8:3b:92:2b:e6:56:ea:
ea:19:35:48:f5:8d:26:72:89:78:22:60:e9:1e:aa:d9:d9:2a:
1d:4f:69:1a:56:64:55:9e:73:80:9c:dd:45:2c:e5:4a:69:59:
20:37:9f:a2:65:06:36:9e:83:ad:6b:cc:68:a9:f0:69:e4:fb:
39:04:a9:a6:05:a4:4b:1b:82:7d:3a:8c:57:8f:e3:1d:f8:02:
75:3f:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:05:09 2026 by rpki-client