
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier: WjHLgftgvPzCnH+iHDxnoB3K3w7U/D5LBsiflV1C0Co=
Subject key identifier: 16:63:DC:BD:A0:D4:02:8F:22:BE:DF:A1:69:D1:89:A8:C8:14:E6:E4
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial: 222A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number: 2217
Signing time: Tue 24 Mar 2026 15:48:41 +0000
Manifest this update: Tue 24 Mar 2026 15:48:41 +0000
Manifest next update: Tue 31 Mar 2026 15:48:41 +0000
Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: juFCdZwH0hr5LKyP/A5rzbUjTxs/Rh7ekBX1mMc19ag=)
2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: HwypahBFkKbW/pB8Pd+gaE4/P/VRHrxmO2AZ+Ty59Ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8746 (0x222a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Validity
Not Before: Mar 24 15:48:41 2026 GMT
Not After : Mar 31 15:48:41 2026 GMT
Subject: CN=69c2b259-309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:a0:51:de:68:3e:c6:1e:cf:90:94:43:bc:
16:7f:49:ee:95:63:06:04:51:9a:4b:d0:74:48:ff:
58:8d:0e:47:ff:e8:94:9f:25:2a:66:25:08:7d:28:
2e:bf:5d:d4:5c:0c:a2:67:ce:a4:ad:26:c7:6f:c6:
4c:ac:14:fb:84:8d:cf:33:28:40:b1:99:10:97:65:
ac:0c:db:97:72:51:02:76:29:dd:c7:a0:27:04:c4:
3d:8b:ea:f6:73:7e:c1:9e:eb:e6:47:3f:52:da:0b:
f5:cb:b8:5c:55:56:09:6a:8e:b8:92:3d:56:c6:47:
ac:59:9c:0d:fe:52:5f:85:b8:58:bb:dc:dd:5e:cd:
eb:d3:8e:b5:3f:98:71:64:b0:54:39:ec:15:6d:e2:
93:2c:2d:76:9a:66:00:11:86:98:45:bd:7d:74:3e:
1b:13:b0:29:af:f0:2b:cf:82:6c:d9:69:10:80:94:
1d:c4:bc:f6:2c:95:9a:22:f5:53:9a:be:9b:3e:29:
11:66:b1:78:b0:f3:a4:9b:9b:39:7d:92:b9:3b:19:
21:db:c6:93:76:62:c8:35:56:a5:78:d0:5a:0e:77:
98:9c:1e:09:2e:e4:cf:a3:c8:6a:96:d8:05:88:8d:
3d:a3:46:cb:85:3d:37:e8:01:17:b2:53:19:00:ed:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:DC:BD:A0:D4:02:8F:22:BE:DF:A1:69:D1:89:A8:C8:14:E6:E4
X509v3 Authority Key Identifier:
keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:e9:45:96:b7:08:47:5a:b7:f1:3d:4d:ae:4a:88:65:5f:
bf:4b:58:34:5f:c7:18:e5:c5:41:69:6c:dc:60:8c:ca:24:93:
d3:fc:a9:67:33:f4:f2:f3:f8:25:ac:94:e7:45:81:25:ad:80:
c5:b8:05:aa:42:57:df:7b:d2:89:be:ad:c8:e4:7e:be:26:53:
8a:ee:45:ea:bb:4d:34:2e:e6:e1:4f:39:9d:81:9e:0f:ed:55:
df:26:2a:98:00:b0:5a:5c:d1:a6:27:b3:25:05:1c:ee:02:e9:
19:2f:6b:2b:23:b5:ce:25:c1:3e:bf:f8:d3:62:6f:12:0e:8e:
3d:d0:75:04:53:b5:c2:9e:97:7a:69:45:fe:7b:4c:5e:0c:98:
5e:33:3e:c2:92:08:fe:ef:88:e7:88:51:4e:17:09:ab:a1:95:
dc:23:2b:63:b7:03:f2:f1:8a:52:02:22:af:b2:d8:14:5f:12:
26:0e:a1:10:8a:a7:75:02:52:65:72:51:a9:50:e6:1a:14:44:
f3:d7:cc:48:e9:96:63:e7:0b:1d:68:8a:41:e5:ac:ee:81:52:
69:0b:43:9d:d9:59:88:5c:31:af:46:60:ef:37:07:9c:00:1d:
98:80:c8:d9:e8:8c:67:91:d6:ed:49:0e:86:a4:1c:c2:16:f4:
e0:53:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:49 2026 by rpki-client