
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier: CkY1mQiblioA3AeikOaUsyUcknUxDm41TJUps4C3T9c=
Subject key identifier: F5:EA:59:B1:4F:F8:DC:8D:CD:27:A0:02:39:03:93:17:93:44:94:3E
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial: 2AC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number: 2AB2
Signing time: Tue 22 Sep 2026 15:31:55 +0000
Manifest this update: Tue 22 Sep 2026 15:31:55 +0000
Manifest next update: Tue 29 Sep 2026 15:31:55 +0000
Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: dt/TFVrJebiSaHrgNuExGPkUodYQJARg1WoEZmjkpVA=)
2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: mpjVMZqgsEDLte7km/wxxa0aijeYSHyV/D4q8GjzrZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10953 (0x2ac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Validity
Not Before: Sep 22 15:31:55 2026 GMT
Not After : Sep 29 15:31:55 2026 GMT
Subject: CN=6ab29f6b-451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:b3:66:77:8f:94:d9:b1:91:2b:dc:9b:2f:
e1:61:38:e7:14:aa:da:84:e4:e0:e9:98:b2:1a:a3:
38:57:39:8c:2a:40:2c:89:91:63:43:1f:52:1e:0d:
d7:8b:2a:75:68:7c:05:d7:5f:38:3b:5f:98:2a:05:
e8:b4:69:d4:51:9f:85:79:a1:b0:fb:dd:cb:3d:aa:
8a:c1:08:52:7c:c0:91:61:39:57:a5:5c:45:14:ba:
cb:b5:57:c4:d6:ce:aa:59:4b:a3:48:be:47:b1:9d:
0c:c9:d0:7b:4b:cc:0b:ed:8d:1a:a9:e3:e9:25:e8:
f6:8c:e2:3a:87:fc:0f:eb:91:ed:0d:00:94:e9:d5:
d6:d3:6c:24:f8:78:24:6c:61:bb:8e:ed:8f:ea:3f:
9f:c7:cf:f2:ed:9a:68:59:b4:6a:f4:c6:e7:34:cb:
28:3a:50:28:a9:67:5b:c4:3a:19:1d:44:f7:ea:88:
50:e1:72:12:34:64:b1:e6:4b:d1:d8:91:06:1b:1b:
e8:f6:3d:41:39:5d:7d:6e:cb:d9:af:0d:84:ed:9d:
d2:a9:10:44:34:2c:c9:43:57:ab:71:1c:f6:5e:d3:
88:fc:d0:61:8a:2c:c6:95:6a:d4:57:6a:8f:c4:65:
06:3b:7b:ac:0b:da:b0:0b:1c:3b:e0:0f:e0:3c:59:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:59:B1:4F:F8:DC:8D:CD:27:A0:02:39:03:93:17:93:44:94:3E
X509v3 Authority Key Identifier:
keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:98:fd:9f:3a:5f:03:54:b6:56:73:6f:04:8a:c4:79:f2:
13:61:bf:31:6b:7c:8b:6b:64:83:c8:79:6f:28:c1:2a:ea:b7:
68:0b:05:87:c1:0c:7b:65:01:aa:50:4e:f3:42:37:0d:e3:3a:
fb:f6:e0:6a:ab:cf:6c:2c:2f:a0:28:a9:a1:f2:e0:03:dc:93:
ea:1d:d2:bc:d8:9a:36:54:3c:5a:5c:ed:95:6f:18:6e:d9:36:
21:00:1d:56:bb:3d:95:40:4c:da:6a:8b:1e:5a:4c:b7:b1:a3:
03:cc:4a:67:8a:44:a2:af:05:3d:25:ac:10:f4:fc:e6:31:11:
eb:cd:6e:7e:19:82:ad:30:97:4f:aa:79:da:6e:27:65:e6:4c:
6d:75:ef:19:01:47:29:98:de:ff:2e:df:56:68:55:1a:15:fe:
de:6a:9d:1a:52:99:0b:32:25:a5:18:1b:34:0e:08:cb:2d:fb:
11:77:c9:42:8e:9e:33:ba:bd:4e:25:c0:f1:a2:f5:59:b8:08:
dd:5e:ca:10:86:35:bf:44:62:13:6b:51:55:2d:ff:b0:8a:1b:
da:f2:80:b2:48:4b:f3:0a:6b:02:71:53:71:53:c4:cb:5b:f5:
70:56:f6:8b:f2:84:d9:88:68:c9:86:e0:7d:3d:32:75:a8:1f:
cc:14:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:04:06 2026 by rpki-client