
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json)
Hash identifier: 5o2hhmNp1Hb9vH3HbfLJshKOAmXaeU6TWwTQc0bLnno=
Subject key identifier: 99:02:95:64:0A:CB:40:31:2B:87:53:8E:29:B3:A4:78:EE:00:F6:61
Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Certificate serial: 0BE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
Manifest number: 0BDA
Signing time: Tue 24 Mar 2026 18:43:35 +0000
Manifest this update: Tue 24 Mar 2026 18:43:34 +0000
Manifest next update: Tue 31 Mar 2026 18:43:34 +0000
Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: hh1qHZi92/VY/LrMy1VG36/eJRVeEwsRqGcmvIlc2qY=)
2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: c7U9E4x7HWCTnVuZ6VGp81T+MLLhMyYu6vQNMBF1IL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl
rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3044 (0xbe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Validity
Not Before: Mar 24 18:43:34 2026 GMT
Not After : Mar 31 18:43:34 2026 GMT
Subject: CN=69c2db57-33f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:55:65:51:92:c2:5b:39:e6:8d:19:47:2e:
bb:a6:96:a1:37:cd:12:cd:5e:9e:32:7c:1a:7b:55:
f2:9f:c0:7a:cf:c9:9b:28:03:8c:79:05:c6:1d:ac:
6d:47:d9:dd:94:92:c3:48:38:cf:09:d3:02:f7:58:
7c:84:90:28:66:cb:2b:86:21:21:39:07:5b:cc:2b:
80:fc:62:dd:a7:66:09:e4:09:7a:5e:91:5a:c0:ef:
96:6b:a1:ea:be:7d:e7:92:cf:e4:52:59:ec:b2:11:
14:e0:99:f7:03:b4:47:24:c9:f7:4f:90:49:74:35:
ce:50:29:24:f3:af:54:cd:fd:1f:6b:a0:7f:de:e4:
08:bc:5c:02:0e:ea:80:43:d2:a4:0e:a9:b9:41:b2:
a6:e9:d4:a4:b5:9c:c8:7e:8d:57:4a:d3:ce:5b:c4:
34:d4:7b:d8:ec:93:b4:d9:8b:38:f0:1c:1e:bf:52:
e2:9b:08:ec:18:4e:7d:5e:99:02:d9:73:53:c1:43:
b9:d9:78:d5:b4:2c:22:cd:5c:2d:71:ac:02:05:12:
6b:f4:36:ab:99:61:0c:d7:7e:da:a2:05:5e:5c:21:
be:e2:5e:33:03:57:e3:5e:93:d6:dc:34:d7:a9:25:
98:f5:60:06:8f:ec:24:b9:a6:50:6d:5f:13:82:3b:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:95:64:0A:CB:40:31:2B:87:53:8E:29:B3:A4:78:EE:00:F6:61
X509v3 Authority Key Identifier:
keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:10:50:c0:94:4e:80:44:94:5c:db:f7:2a:c2:a3:b6:21:
ba:e4:8d:43:a8:92:cc:f8:e1:33:19:2b:27:5a:62:05:37:a6:
a3:99:45:0b:c9:fe:c0:8a:18:ab:14:d2:6a:0c:aa:e3:3a:f7:
9b:69:94:f6:31:35:84:df:d8:94:e1:69:45:59:e1:9c:bb:42:
15:40:89:fc:8a:24:17:ea:6f:12:f2:14:ce:97:14:68:d3:25:
d1:64:bf:96:1b:3c:1b:14:be:37:59:d2:b5:d3:66:35:a4:f7:
39:67:e1:87:92:e6:fd:16:4e:f2:ac:ef:6a:5a:14:f6:6e:2f:
b8:82:74:26:c8:8f:d4:29:7d:79:73:65:ae:76:a9:9e:e7:2a:
d5:b4:2a:36:bf:99:13:c0:bd:47:23:fa:6d:f7:b8:43:50:38:
4b:22:46:b9:10:9d:41:2c:6e:92:d6:96:ca:72:b9:9d:57:78:
af:cf:89:df:3e:89:89:3b:a2:b0:f3:e3:49:f8:f5:77:9d:81:
57:fe:28:f2:c5:7d:fb:22:d2:4a:03:20:d9:cc:7b:75:b5:7c:
ba:16:60:d8:f4:65:75:95:65:8a:b7:58:ae:e0:94:f4:e5:73:
c5:10:a5:93:95:dc:06:b9:c4:ad:41:5a:cd:37:04:7f:df:d0:
43:da:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:46 2026 by rpki-client