
$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier: i8jgvfqCgC/w+N8TzBUKdczJ/Nn3H4xUFfWyEFtayDA=
Subject key identifier: FA:AC:CC:C8:12:17:77:FE:46:F5:9D:E2:D5:E6:F5:AE:71:63:84:9E
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number: 0132
Signing time: Mon 11 May 2026 05:39:32 +0000
Manifest this update: Mon 11 May 2026 05:39:32 +0000
Manifest next update: Mon 18 May 2026 05:39:32 +0000
Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: rL/CNN6p3s3dbsoeFKogN5lOi57GuDtBeJHiKRif3Xs=)
2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Validity
Not Before: May 11 05:39:32 2026 GMT
Not After : May 18 05:39:32 2026 GMT
Subject: CN=6a016b94-2df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:95:45:17:8a:90:64:3a:4a:fb:db:0c:82:
8f:b0:53:89:58:64:b5:41:0d:90:17:87:c1:8c:ec:
34:2e:bd:62:0e:ad:71:9f:78:a0:6c:e2:de:da:fc:
2a:40:cd:0e:99:e6:8c:ca:e5:4e:6e:63:30:1c:cb:
ad:e9:77:46:f1:ec:50:c3:8e:b4:aa:d7:dd:33:99:
c1:8f:18:d9:a1:dd:71:38:91:42:01:a4:5d:04:b7:
35:b2:f6:99:0e:d9:af:f0:55:f1:fc:21:56:ad:36:
60:87:c0:75:b7:89:9f:7e:f4:b2:57:b2:d1:77:5c:
39:c2:bc:19:b5:78:cb:ff:d2:b4:a4:80:62:19:aa:
4b:bf:cf:6a:32:15:77:b0:6a:cf:46:ee:58:ca:85:
ad:07:84:0e:7c:23:07:b0:e2:42:26:48:76:59:39:
9e:df:26:10:48:ea:a9:7c:61:a1:27:ab:38:d9:7f:
2d:14:11:f2:c3:05:8f:c5:17:ed:b9:83:03:a0:1c:
22:33:74:c3:bc:a1:69:85:11:0f:5b:1e:60:a5:19:
c0:9c:a2:8a:8b:7d:6b:dc:7e:1a:48:95:62:52:36:
9d:af:8a:47:2f:19:e8:38:84:51:d8:67:77:37:08:
52:bb:c9:70:63:0b:82:7c:a4:0c:c2:18:a4:03:34:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:CC:C8:12:17:77:FE:46:F5:9D:E2:D5:E6:F5:AE:71:63:84:9E
X509v3 Authority Key Identifier:
keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:7e:d8:11:51:c2:17:a9:3f:f6:68:df:c0:d2:22:57:1e:79:
80:7f:60:91:c4:6f:7f:f9:8a:3d:53:98:70:35:e3:52:b7:88:
a9:3c:03:5c:3d:20:2b:fd:4e:cc:b7:8b:1f:41:17:85:b1:c9:
72:03:54:99:3c:21:01:63:98:2e:e8:83:39:81:34:d0:93:d8:
6c:d3:7a:72:40:80:38:22:b0:2e:70:68:d6:c7:a7:c9:1a:82:
7d:7a:76:4d:2d:2f:0c:fe:2d:68:4f:d6:fb:9c:d5:da:99:6b:
6d:ab:cc:38:83:eb:51:c2:bb:49:e7:0d:64:5a:14:ce:c1:d9:
18:f8:f9:97:b0:1e:d3:7c:b2:6c:6e:5c:88:6e:0c:81:9d:cc:
34:21:69:99:b6:ea:bd:59:7a:fb:c9:5e:39:29:71:2e:05:20:
21:26:6a:89:2a:1b:f5:34:0e:20:2d:8c:92:7b:9e:25:80:98:
8b:87:4b:30:38:d6:e4:20:68:c8:21:38:08:ad:05:35:e3:84:
86:bb:6a:1e:db:8d:8e:09:d3:54:c0:51:b6:37:0e:5d:f5:f6:
bb:9c:f7:9c:d2:10:cb:1a:19:a1:44:9b:95:cd:ad:05:35:6e:
ad:cb:30:bd:76:ec:27:b0:0d:6e:c6:1b:ea:3d:28:74:4c:c9:
cc:bf:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:58 2026 by rpki-client