
$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
File: VqcyG_yMPsLpkWD6MztPVMGClGo.mft (raw, json)
Hash identifier: qOP1/Cai5EPoFSxXXxwkvlB95MrRJYi3+lEpo/DGm7Q=
Subject key identifier: A5:81:34:6E:05:82:5F:53:E4:1F:1B:4B:CC:CD:22:9A:DF:9F:AE:50
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Certificate issuer: /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
Manifest number: 04
Signing time: Wed 25 Mar 2026 08:26:50 +0000
Manifest this update: Wed 25 Mar 2026 08:26:49 +0000
Manifest next update: Wed 01 Apr 2026 08:26:49 +0000
Files and hashes: 1: VqcyG_yMPsLpkWD6MztPVMGClGo.crl (hash: C196bfs6Ei/vNO7p7AnbT1dOA0WrcKJP4k6vpQbPEl0=)
2: 955C204027D911F183CCD80FA7833773.roa (hash: tYXGyBLXGMJ9TEdThJmPAhWV7Kw3QjVCE7lJviid3as=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Validity
Not Before: Mar 25 08:26:49 2026 GMT
Not After : Apr 1 08:26:49 2026 GMT
Subject: CN=69c39c49-13c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:ca:e4:b6:27:17:0d:dc:5c:9a:02:f2:47:
a6:e8:dd:fc:d3:0c:5e:2c:4e:37:88:58:ec:dd:15:
e7:da:db:28:c6:04:23:b7:01:f2:2d:32:32:2e:d1:
9e:80:bf:50:aa:2e:ba:64:46:ce:96:c2:6e:16:f9:
4d:82:d8:37:90:ad:81:2e:d9:52:43:56:2d:6c:c5:
15:21:24:e3:b1:01:e7:cc:5d:31:e0:fc:d9:23:55:
69:ef:7b:91:bd:40:d9:2d:50:e0:f0:19:67:31:c4:
2f:2b:d8:4e:ce:05:c5:bb:b7:22:50:53:eb:2d:39:
e7:e7:67:b0:db:68:04:e7:1e:24:15:53:62:a7:af:
c1:a6:2b:36:60:12:5b:a7:76:0d:3b:d8:d5:80:40:
90:53:ba:74:aa:1b:04:52:e1:69:9f:d5:f4:82:3e:
28:df:2d:07:8b:4e:c3:08:60:14:bf:a4:cc:cf:3b:
b0:40:e4:a9:68:63:10:7c:36:79:0b:5d:24:7f:2e:
d7:20:bb:c3:f0:0e:c1:ce:c2:e5:87:bd:91:96:63:
c9:a7:30:ba:82:df:17:f9:72:30:7d:40:2e:21:3d:
dd:5c:49:6b:eb:1e:e1:7e:95:a7:d3:6b:e7:44:3d:
14:89:cd:22:92:90:72:02:61:41:d6:19:d6:b3:cc:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:34:6E:05:82:5F:53:E4:1F:1B:4B:CC:CD:22:9A:DF:9F:AE:50
X509v3 Authority Key Identifier:
keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:a7:3e:4e:85:54:31:6b:c9:c4:f9:62:7a:77:65:d5:80:
a7:ce:8b:0a:22:a1:6b:a7:d0:bd:4c:d7:32:bf:e6:bf:42:75:
f9:ee:1f:3b:ed:22:74:fa:ce:d5:3e:8a:6d:e0:e5:36:3c:f2:
d4:6c:82:fb:2c:5b:88:f6:b6:e9:6b:ce:ab:a5:9e:60:c6:ee:
9d:3a:f9:36:94:be:69:19:69:0e:41:ad:08:26:b2:8d:af:b9:
94:61:84:b3:6f:43:35:61:29:80:2d:f0:9d:52:24:0d:76:18:
c5:e7:35:00:09:da:9e:d9:68:8d:d0:77:de:58:2f:ed:6f:52:
ec:51:39:4e:c6:c3:49:41:45:8e:74:af:43:d1:d8:07:22:e0:
d6:2a:24:33:e2:4e:22:b3:7f:ca:80:9c:70:74:c7:5a:39:d8:
19:24:33:48:09:9e:b8:be:1d:26:f0:e3:b1:b2:f9:1e:a8:56:
49:be:5f:56:68:01:91:1d:02:28:df:80:13:52:39:b4:b0:8a:
6f:51:1c:d6:09:a3:31:03:e6:e7:e3:bf:26:63:82:af:7f:06:
1e:fe:52:b1:2d:4a:6b:e4:74:ca:ee:42:21:32:12:7d:22:73:
ae:e6:fc:03:49:5e:18:cc:61:42:de:de:2b:da:f2:a1:8c:23:
15:67:f5:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTM3QTExMC8GA1UEBRMoNTZBNzMyMUJGQzhDM0VDMkU5OTE2MEZBMzMzQjRGNTRD
MTgyOTQ2QTAeFw0yNjAzMjUwODI2NDlaFw0yNjA0MDEwODI2NDlaMBgxFjAUBgNV
BAMTDTY5YzM5YzQ5LTEzYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7P8rkticXDdxcmgLyR6bo3fzTDF4sTjeIWOzdFefa2yjGBCO3AfItMjIu0Z6A
v1CqLrpkRs6Wwm4W+U2C2DeQrYEu2VJDVi1sxRUhJOOxAefMXTHg/NkjVWnve5G9
QNktUODwGWcxxC8r2E7OBcW7tyJQU+stOefnZ7DbaATnHiQVU2Knr8GmKzZgElun
dg072NWAQJBTunSqGwRS4Wmf1fSCPijfLQeLTsMIYBS/pMzPO7BA5KloYxB8NnkL
XSR/Ltcgu8PwDsHOwuWHvZGWY8mnMLqC3xf5cjB9QC4hPd1cSWvrHuF+lafTa+dE
PRSJzSKSkHICYUHWGdazzAexAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpYE0bgWC
X1PkHxtLzM0imt+frlAwHwYDVR0jBBgwFoAUVqcyG/yMPsLpkWD6MztPVMGClGow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MzdBLzlGODE3QkI2Mjc2
QTExRjFBODkxQjE3RkMyODMzNzczL1ZxY3lHX3lNUHNMcGtXRDZNenRQVk1HQ2xH
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVnFjeUdfeU1Qc0xwa1dENk16dFBWTUdDbEdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MzdBLzlGODE3QkI2Mjc2QTExRjFBODkxQjE3RkMyODMzNzczL1ZxY3lHX3lNUHNM
cGtXRDZNenRQVk1HQ2xHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgaqc+ToVUMWvJxPliendl1YCnzosKIqFrp9C9TNcyv+a/QnX57h877SJ0+s7V
Popt4OU2PPLUbIL7LFuI9rbpa86rpZ5gxu6dOvk2lL5pGWkOQa0IJrKNr7mUYYSz
b0M1YSmALfCdUiQNdhjF5zUACdqe2WiN0HfeWC/tb1LsUTlOxsNJQUWOdK9D0dgH
IuDWKiQz4k4is3/KgJxwdMdaOdgZJDNICZ64vh0m8OOxsvkeqFZJvl9WaAGRHQIo
34ATUjm0sIpvURzWCaMxA+bn478mY4KvfwYe/lKxLUpr5HTK7kIhMhJ9InOu5vwD
SV4YzGFC3t4r2vKhjCMVZ/Xo
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:49 2026 by rpki-client