
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier: 3IoMSd0og8OSXt5FEulxKlm8MeMxjaJnE1ZIAt5IX7s=
Subject key identifier: C5:23:1A:8D:0E:A6:EC:D2:63:78:AB:4A:84:4C:13:93:A4:89:40:5D
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial: 353C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number: 352C
Signing time: Tue 24 Mar 2026 14:59:29 +0000
Manifest this update: Tue 24 Mar 2026 14:59:29 +0000
Manifest next update: Tue 31 Mar 2026 14:59:29 +0000
Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: xHCEeOAMY3JA+Yf2aEnn8LZiaqk4/lpIfLk8VRla7n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Validity
Not Before: Mar 24 14:59:29 2026 GMT
Not After : Mar 31 14:59:29 2026 GMT
Subject: CN=69c2a6d1-930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:5d:50:30:ba:2f:db:13:ed:42:ba:0c:ce:
c0:3e:e9:0c:90:45:f0:c3:a0:b6:45:92:96:bf:80:
02:09:8e:21:ac:bc:86:3a:dc:b4:08:80:cf:b9:a8:
c8:06:af:54:84:be:a8:0f:5a:01:e8:ed:e0:d3:b8:
bd:32:df:36:c3:77:22:af:fd:21:96:b3:b1:3a:21:
01:69:b4:0b:3c:90:ce:0e:35:f5:2f:cf:ef:b8:57:
5b:7b:b0:27:fe:90:f1:0f:f1:40:67:71:17:54:aa:
4c:b1:8a:3a:c9:64:87:f5:3c:a7:e8:03:01:85:82:
01:e8:c2:10:6f:ba:ba:f9:6b:77:08:ab:69:20:a0:
e9:76:86:54:f4:42:11:79:e2:e4:a0:b6:cb:dd:3b:
27:81:f9:39:06:97:3c:13:33:8f:68:d7:70:f9:a4:
09:5b:c8:d4:88:3d:8c:d8:a8:5a:1a:5c:11:6c:a9:
6b:2a:67:c2:75:1d:e3:60:ab:d9:dd:e3:45:cf:6e:
8b:99:ad:94:eb:7f:8a:86:56:7c:a4:2b:04:e4:30:
c9:84:27:8c:df:8e:df:28:d3:c3:33:04:9a:cc:6a:
54:e7:de:26:e6:87:a3:b7:68:33:5a:8a:80:c8:d0:
a0:66:9c:58:13:27:bc:eb:8f:3e:fd:2e:85:87:9d:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:23:1A:8D:0E:A6:EC:D2:63:78:AB:4A:84:4C:13:93:A4:89:40:5D
X509v3 Authority Key Identifier:
keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:40:c6:28:c2:76:e1:60:b0:4e:db:11:18:64:eb:ae:b2:21:
cf:0d:a1:82:bc:e2:bb:e2:4a:e2:0c:f2:27:16:e8:11:bc:bd:
f5:df:26:9d:a6:54:fa:81:1e:99:ad:11:c5:0f:21:15:40:ab:
24:78:92:72:83:e9:88:0e:bc:5c:87:f6:d9:30:d0:d4:9b:26:
8c:5e:95:46:2c:5e:37:a8:a8:b1:15:dc:a4:49:60:e4:93:e8:
77:0d:58:08:60:8a:82:cf:ec:f1:4c:51:ba:b1:16:81:9d:03:
75:a5:ae:26:0d:9e:e2:ed:78:ca:a7:fc:11:c8:14:fd:f3:8f:
ff:65:52:91:49:24:f6:3a:19:ff:0d:8e:08:eb:8c:4b:52:74:
f6:fc:d1:c3:93:56:8d:10:5b:bb:71:9c:24:98:2c:ed:83:fc:
b3:4a:07:06:0d:a4:41:b7:5f:28:c8:19:d9:ae:5f:e6:bc:ec:
f7:a5:ea:4a:f0:21:a1:f5:8f:ca:65:fa:1c:8f:f7:cf:d0:bf:
90:7b:e3:69:2a:c0:64:de:d4:26:c4:b5:6a:1e:94:78:df:19:
4d:a6:71:89:27:79:d7:2f:b5:8e:cd:cf:de:16:47:e5:84:67:
49:62:6c:38:b8:43:d9:88:3b:bb:80:83:32:00:e3:c8:97:9d:
e6:5e:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:19 2026 by rpki-client