
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier: OY5aIQRQQM/jbtHJPInW4KDZ2W4OOouS1HGFStK7VKE=
Subject key identifier: 96:DF:50:FB:CD:59:62:EE:52:D6:87:87:8C:A2:BD:8D:17:49:C6:1A
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial: 2A6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number: 2A55
Signing time: Tue 24 Mar 2026 15:32:01 +0000
Manifest this update: Tue 24 Mar 2026 15:32:00 +0000
Manifest next update: Tue 31 Mar 2026 15:32:00 +0000
Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: EPcszONpVU+3Z4hs7y7lDmFlDcGo1atxCsPpH0nuQ3Y=)
2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: mpjVMZqgsEDLte7km/wxxa0aijeYSHyV/D4q8GjzrZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10860 (0x2a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Validity
Not Before: Mar 24 15:32:00 2026 GMT
Not After : Mar 31 15:32:00 2026 GMT
Subject: CN=69c2ae70-1bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ee:d5:c5:85:15:df:b2:ee:fb:cc:98:5d:08:
2a:8b:5b:1d:f3:10:03:b0:1a:d2:62:8e:fa:b0:b2:
f3:bd:e9:12:48:ed:1a:18:17:d7:d6:c4:77:dc:de:
95:62:2e:00:40:3d:60:d8:b2:71:81:9d:4a:53:a3:
e1:86:26:da:6e:7c:19:e2:50:ba:3a:71:af:97:8a:
71:82:a2:17:b3:5b:84:77:4d:c5:4c:6e:ce:af:7d:
c5:21:dd:db:67:57:b5:00:73:e5:83:98:37:55:a4:
f1:e4:25:6a:18:f0:fd:31:30:7c:f7:21:99:5e:3a:
cc:83:f1:dc:46:11:d7:c7:9b:ee:19:24:3d:e7:ca:
37:53:52:81:2a:61:89:3b:e8:93:0b:62:e7:29:f3:
9f:97:15:d8:76:7b:a7:0b:88:dd:66:5a:77:19:39:
cf:93:16:dd:e6:1a:0c:87:73:db:5e:eb:be:44:28:
12:15:8c:a5:79:23:12:bc:41:5b:c2:63:37:84:b3:
76:05:51:86:c4:c0:2e:50:fa:0a:6f:f5:b4:84:d9:
7e:b2:88:04:85:2a:d2:09:42:dd:04:4d:25:8c:0a:
d5:f9:50:0f:56:a4:b2:2d:93:25:2f:5c:73:bc:5f:
60:69:86:05:ce:a2:77:00:53:5c:cb:50:d0:eb:a0:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DF:50:FB:CD:59:62:EE:52:D6:87:87:8C:A2:BD:8D:17:49:C6:1A
X509v3 Authority Key Identifier:
keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:47:fa:e2:e1:e7:e6:1f:72:91:47:a7:f2:fb:6a:47:ad:29:
69:65:8d:58:f7:8b:01:88:48:51:fd:18:ce:e5:1b:6c:8b:07:
d0:75:35:9d:ed:f1:a6:c1:a0:11:c9:06:a4:71:75:ba:5f:bc:
84:2e:12:23:30:49:3b:01:ad:b4:7f:99:92:19:db:96:aa:f0:
73:ef:cc:a3:76:cb:52:c9:5a:38:5f:4c:d3:b1:a1:51:17:e3:
bd:7d:45:f2:56:20:60:02:f7:a4:dc:4c:c7:ca:95:f6:07:2c:
06:58:00:db:6e:19:39:18:1e:79:48:ab:34:c8:84:60:b4:b8:
e5:6d:33:ff:ab:25:0e:63:26:e2:ea:01:01:72:62:dd:4d:a8:
18:c3:91:9f:cc:b5:80:e2:45:38:c5:cc:7a:23:88:7d:b1:1e:
2c:51:e9:de:08:e0:a3:42:aa:77:9b:ee:58:58:86:ef:b6:04:
dd:98:29:61:65:f7:47:1d:a5:f1:97:13:79:74:a3:cf:31:8d:
44:ef:61:68:97:e4:51:22:f5:22:a6:63:a9:73:f9:df:37:59:
39:af:56:3f:9d:eb:49:5e:ce:5e:45:c7:f4:e9:69:f7:4b:e2:
0a:59:d9:86:63:30:92:47:af:64:a7:ca:9b:cb:ab:ba:f7:72:
c7:56:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:14 2026 by rpki-client