
$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier: EkEFkqO2ZU6DSBJNGkM49ng6KhxJbpiCnKuBQnGpDn8=
Subject key identifier: D7:8C:E9:41:E4:75:20:C7:1C:6F:A1:AB:2C:45:58:D6:0A:DD:98:7D
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number: 012D
Signing time: Wed 25 Mar 2026 04:50:24 +0000
Manifest this update: Wed 25 Mar 2026 04:50:24 +0000
Manifest next update: Wed 01 Apr 2026 04:50:24 +0000
Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: qGhMVEGwPuVauOZZpzpoty5WVJbbOfg42uqa3pxSykQ=)
2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: FhlQPzHqzyHEsTCRhj+QxZMQM2lLAuEx3Q/b46+pZ5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Validity
Not Before: Mar 25 04:50:24 2026 GMT
Not After : Apr 1 04:50:24 2026 GMT
Subject: CN=69c36990-fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:8f:72:e9:a9:41:86:74:b8:b3:41:ec:3e:
37:4f:02:d0:d7:9c:42:a4:ef:ad:3c:6c:1e:15:cd:
e3:0f:1f:72:69:41:d2:3e:78:8f:1f:76:4b:61:63:
c2:7b:ce:21:fa:8b:93:71:92:96:a2:61:fd:95:a3:
c9:aa:4a:bd:4b:66:dd:20:f4:a4:b9:3a:a2:87:b0:
89:00:77:aa:11:d8:fa:d2:20:3c:7d:57:b6:9f:0e:
34:31:1b:d1:89:f2:d1:fb:1f:26:9a:c1:db:a2:67:
d9:08:f0:53:bf:29:f7:aa:79:5a:d8:ee:a8:b5:a7:
97:e0:46:d0:41:4b:e8:ea:05:6d:9b:12:7b:b6:e9:
b3:7a:37:80:bf:12:77:be:2a:b4:8b:4e:8b:ab:41:
a4:83:8f:ec:9d:b7:85:13:0b:6b:85:23:f4:27:99:
23:5f:50:79:0c:be:9e:c1:a7:20:2d:b8:e1:17:23:
98:1a:20:94:32:a5:e7:de:f0:ad:5f:4a:63:7c:04:
f0:fc:a2:0d:08:9d:32:03:e6:29:0e:98:24:b6:75:
9f:75:16:e3:38:e6:06:a0:60:bc:31:2b:8f:65:27:
62:42:82:d7:21:2d:9b:fa:12:00:3f:c6:ab:da:c1:
3b:ca:eb:6f:bf:50:bf:1c:98:2d:15:75:f7:3e:d8:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:E9:41:E4:75:20:C7:1C:6F:A1:AB:2C:45:58:D6:0A:DD:98:7D
X509v3 Authority Key Identifier:
keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:23:da:72:1f:e8:24:a6:df:5b:e1:0f:30:e1:4e:ca:1d:af:
aa:f3:16:e8:42:0b:5c:3c:62:19:a4:1c:5b:79:c2:7b:18:82:
4f:f1:6f:78:67:ba:b0:60:3b:ab:3d:67:97:93:8a:b5:91:eb:
90:42:57:40:64:a7:62:42:11:25:53:be:9e:bb:7c:20:0f:2c:
39:23:ea:77:e3:96:b2:a9:7a:c4:22:c9:74:d8:8c:db:3d:49:
31:a4:a2:90:e2:86:9a:bc:7b:63:c2:b8:ea:6c:4f:13:76:b8:
08:d5:ef:e3:7b:ab:f7:99:a1:89:ac:e1:53:ac:ad:99:bb:01:
7a:f1:28:a7:76:50:ee:00:c3:d1:84:8b:4a:99:be:4d:5f:36:
c2:05:4b:38:4a:ef:53:f1:9a:14:66:52:10:b7:8c:9a:30:a1:
56:ac:c0:3b:3c:16:dd:b3:2a:c6:8b:a1:ba:0f:76:fa:9b:3f:
a1:81:6c:ec:e4:bf:e6:59:b1:4d:7f:b2:2e:18:c6:de:50:5d:
82:05:65:48:f6:6c:0d:b0:a0:80:32:b5:f9:c5:43:4a:89:4d:
f4:c5:9d:69:47:b7:83:46:23:9e:39:f1:4b:00:0f:66:97:5f:
8c:d9:c9:ee:04:78:2e:aa:c5:c7:5d:dc:e8:8b:38:a1:54:48:
5c:5e:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:12 2026 by rpki-client