
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json)
Hash identifier: Tjg+fbedc3JV7XkZ9iCSKD/AlHElSHN9jtd9dpAYh9M=
Subject key identifier: 96:1A:D2:9B:95:6F:A2:28:8A:2B:77:1B:AA:1A:4E:89:F5:9E:91:8A
Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
Manifest number: 0136
Signing time: Wed 25 Mar 2026 04:39:38 +0000
Manifest this update: Wed 25 Mar 2026 04:39:37 +0000
Manifest next update: Wed 01 Apr 2026 04:39:37 +0000
Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: MPdjw9ok3x5nEZHbV646afr4P0vPSaZmlGz3LEsK35A=)
2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: Y0yGffv3HexM685zLf2PONDZDzu0jITDWUgqDOHLKVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Validity
Not Before: Mar 25 04:39:37 2026 GMT
Not After : Apr 1 04:39:37 2026 GMT
Subject: CN=69c3670a-83af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:5e:7c:9e:25:8e:d0:29:f2:8c:7f:7c:2b:
78:fc:c5:64:a4:a7:49:26:11:62:87:46:87:20:49:
91:71:db:c3:e2:81:0c:b8:16:0c:af:7b:68:e9:e4:
b8:7e:7b:14:fc:da:0c:42:16:d3:fb:07:94:fc:cc:
0c:ee:29:9f:8b:47:97:46:e5:de:87:75:d1:01:c3:
62:1e:de:2e:04:d9:4f:8f:38:e4:31:61:8e:fa:96:
a5:7b:a3:14:8f:50:cc:fa:e1:a0:a0:71:46:9d:aa:
35:e9:f1:52:7f:fe:b7:87:69:c9:ee:20:82:d6:f4:
49:64:ec:f1:20:7b:e2:04:56:21:5e:7d:94:de:1a:
60:2b:27:a2:a5:d9:fc:21:66:f6:eb:79:2f:dc:d8:
17:33:da:ea:6f:18:71:a2:ae:5a:7a:ed:68:2f:5e:
6a:b3:f6:e2:32:78:1d:bb:3f:f5:d3:c6:5c:96:41:
7d:ed:29:c0:ae:11:37:4f:90:ca:77:94:c1:3b:64:
32:77:f5:d3:1e:5b:78:34:41:a1:dc:41:31:6d:00:
22:1d:c6:8c:cf:f6:67:28:d2:f5:0d:b6:b7:af:e6:
54:3d:c3:a3:50:e0:44:70:08:55:87:b4:6e:21:38:
d0:66:af:61:42:22:3b:1e:72:9f:82:1c:63:dd:d6:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:D2:9B:95:6F:A2:28:8A:2B:77:1B:AA:1A:4E:89:F5:9E:91:8A
X509v3 Authority Key Identifier:
keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f2:ed:71:72:65:7f:9a:51:b6:5b:22:80:de:56:bc:e7:15:
2f:0c:0f:aa:e8:04:5f:05:c9:87:3a:b3:30:83:6e:8c:84:49:
e2:ff:6f:3d:3a:6e:ea:8d:85:79:f8:bc:54:6e:33:5c:de:81:
6b:58:c3:3b:87:aa:6d:99:21:82:2c:be:75:b0:36:83:54:4a:
f9:11:9e:f3:40:f7:74:17:6b:0c:04:1d:84:b1:4a:d6:53:f3:
53:cd:a6:90:6a:29:87:3c:61:5d:1c:91:2f:a9:c7:df:2a:40:
6b:33:ab:54:91:cd:60:d6:41:4f:11:f0:40:6d:c8:22:48:2f:
cc:72:e0:15:71:d5:37:95:fd:84:28:c3:27:4b:61:83:d6:4b:
ae:80:1f:da:ca:6c:9d:b6:89:5a:59:12:ba:75:3f:22:e2:91:
96:d0:9b:8f:a7:1d:25:c4:54:a3:90:40:74:0e:47:37:f8:08:
bb:c1:4f:61:1d:0d:45:da:d4:d5:67:77:d8:1e:f8:c9:04:ba:
62:14:a6:f0:ca:57:2e:be:1c:17:d9:e9:41:73:b7:d2:47:0d:
15:d2:6d:28:9e:bf:ba:94:5a:b3:99:06:00:48:37:76:90:4f:
0f:dd:33:b6:62:7e:8b:a0:95:cd:f4:96:71:bf:f4:8f:f2:91:
b7:9d:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:19 2026 by rpki-client