
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
File: Vp-1bt2xandk-zENNy4XiFSCg5k.mft (raw, json)
Hash identifier: RzxQVmHnCrTvz/+PrYeEKrs4Avt7ZwA/xvPzv57IBM0=
Subject key identifier: D9:FB:50:69:79:1B:18:6C:9E:5A:CF:B0:8E:FB:97:A2:39:A4:62:6F
Authority key identifier: 56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99
Certificate issuer: /CN=A91878B3/serialNumber=569FB56EDDB16A7764FB310D372E178854828399
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
Manifest number: 3A
Signing time: Wed 25 Mar 2026 07:44:12 +0000
Manifest this update: Wed 25 Mar 2026 07:44:11 +0000
Manifest next update: Wed 01 Apr 2026 07:44:11 +0000
Files and hashes: 1: Vp-1bt2xandk-zENNy4XiFSCg5k.crl (hash: D+f7DUCoRP56kBPL3PR4YS+qxk/VDyWgygH9oyyBunI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl
rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B3, serialNumber=569FB56EDDB16A7764FB310D372E178854828399
Validity
Not Before: Mar 25 07:44:11 2026 GMT
Not After : Apr 1 07:44:11 2026 GMT
Subject: CN=69c3924c-c3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:5d:c2:dc:bf:d0:55:68:15:01:16:17:d1:
e9:20:30:4b:53:4a:39:ac:a9:1b:93:1f:3c:77:cb:
4d:16:b3:65:2c:b3:16:4d:c6:82:c0:dc:7b:04:ce:
3d:fb:82:a6:81:43:7b:08:8c:78:2a:44:e5:15:26:
86:4c:b9:65:d3:b5:56:41:b9:8b:a5:d0:b3:b0:5c:
14:fc:2e:a4:8d:17:fd:18:e0:2a:e4:4a:bb:95:88:
1c:ae:6e:15:84:9f:a0:e0:cc:92:70:65:08:db:d5:
e0:5d:9a:89:d0:75:c0:99:62:ac:6a:d9:a6:0d:81:
db:6c:4c:80:ba:2f:0a:64:0b:a7:f2:74:a8:a6:8f:
79:ea:be:16:17:00:3d:d6:18:8f:62:ea:79:68:da:
b7:8b:5c:cd:af:6f:eb:d5:ce:60:12:53:21:3b:d4:
d8:e4:92:9f:09:06:88:6f:c6:a0:ac:ed:38:3e:5d:
89:ed:a9:fb:db:b1:cc:78:db:0c:ab:5b:62:24:7f:
61:e8:08:4f:59:ae:ba:07:2b:fb:b9:e5:e1:c1:7e:
c3:0b:7a:47:63:10:4c:25:6f:7c:ba:7d:60:3a:9d:
bf:a0:27:ad:55:47:0e:1b:d5:b4:5b:bf:d0:d4:43:
5b:1f:8d:24:15:42:40:fd:b3:03:b0:ad:df:72:01:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FB:50:69:79:1B:18:6C:9E:5A:CF:B0:8E:FB:97:A2:39:A4:62:6F
X509v3 Authority Key Identifier:
keyid:56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9c:84:f6:91:37:18:af:62:a0:54:f7:cd:f0:c8:40:14:81:
dd:84:4c:c0:01:27:bd:19:9c:91:a7:41:ca:62:5f:dc:f5:d7:
32:ba:ab:a6:e1:3e:b7:c2:32:58:25:a3:2c:8d:52:e8:a0:8f:
94:ea:d4:d9:1a:13:8e:df:80:d7:d7:cc:de:b5:fc:36:e5:fa:
5d:b1:1b:3a:8e:a3:11:6f:90:7a:5f:3c:22:fc:3d:53:67:67:
f5:e0:49:9c:6b:4a:a6:c3:cc:81:e5:71:75:58:22:1b:0a:1d:
57:66:88:1f:b9:b1:91:f9:a3:50:56:23:2c:17:8a:6c:16:a8:
2b:0c:c4:61:a2:54:28:b3:48:bd:37:2b:4c:1c:0c:97:f6:e4:
d3:ae:04:0d:b0:5c:53:3f:77:f0:2b:bf:ac:9a:c8:2a:01:a3:
59:c8:fd:4b:50:73:82:16:6d:13:42:cb:5c:44:97:02:c2:71:
44:1e:af:df:9c:e4:fd:a5:c5:f4:9a:0a:be:ec:ad:98:34:4d:
51:c0:a0:97:f0:2b:ec:ea:c7:43:55:b3:7e:44:33:19:5f:f9:
c7:7e:f6:5a:2e:8b:75:5b:ba:f4:4c:79:dc:f7:8f:5a:b9:5b:
81:21:8c:cc:4c:6d:10:9d:e7:78:da:47:45:a4:8e:ac:36:47:
d3:c3:33:5a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzhCMzExMC8GA1UEBRMoNTY5RkI1NkVEREIxNkE3NzY0RkIzMTBEMzcyRTE3ODg1
NDgyODM5OTAeFw0yNjAzMjUwNzQ0MTFaFw0yNjA0MDEwNzQ0MTFaMBgxFjAUBgNV
BAMTDTY5YzM5MjRjLWMzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfa13C3L/QVWgVARYX0ekgMEtTSjmsqRuTHzx3y00Ws2UssxZNxoLA3HsEzj37
gqaBQ3sIjHgqROUVJoZMuWXTtVZBuYul0LOwXBT8LqSNF/0Y4CrkSruViByubhWE
n6DgzJJwZQjb1eBdmonQdcCZYqxq2aYNgdtsTIC6LwpkC6fydKimj3nqvhYXAD3W
GI9i6nlo2reLXM2vb+vVzmASUyE71Njkkp8JBohvxqCs7Tg+XYntqfvbscx42wyr
W2Ikf2HoCE9ZrroHK/u55eHBfsMLekdjEEwlb3y6fWA6nb+gJ61VRw4b1bRbv9DU
Q1sfjSQVQkD9swOwrd9yARjjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2ftQaXkb
GGyeWs+wjvuXojmkYm8wHwYDVR0jBBgwFoAUVp+1bt2xandk+zENNy4XiFSCg5kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEIzLzI4MzU1OTUwRDRC
RTExRjBBM0RFRTIxNkM0RjlBRTAyL1ZwLTFidDJ4YW5kay16RU5OeTRYaUZTQ2c1
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVnAtMWJ0MnhhbmRrLXpFTk55NFhpRlNDZzVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
OEIzLzI4MzU1OTUwRDRCRTExRjBBM0RFRTIxNkM0RjlBRTAyL1ZwLTFidDJ4YW5k
ay16RU5OeTRYaUZTQ2c1ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+nIT2kTcYr2KgVPfN8MhAFIHdhEzAASe9GZyRp0HKYl/c9dcyuqum4T63wjJY
JaMsjVLooI+U6tTZGhOO34DX18zetfw25fpdsRs6jqMRb5B6Xzwi/D1TZ2f14Emc
a0qmw8yB5XF1WCIbCh1XZogfubGR+aNQViMsF4psFqgrDMRholQos0i9NytMHAyX
9uTTrgQNsFxTP3fwK7+smsgqAaNZyP1LUHOCFm0TQstcRJcCwnFEHq/fnOT9pcX0
mgq+7K2YNE1RwKCX8Cvs6sdDVbN+RDMZX/nHfvZaLot1W7r0THnc949auVuBIYzM
TG0Qned42kdFpI6sNkfTwzNa
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:16 2026 by rpki-client