
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier: QZkw4rQI/ovkwXrdRYEMABOWXlCMyzoaJR5oSCFm120=
Subject key identifier: 15:29:FC:60:31:96:F2:4A:27:54:63:71:1B:A2:C4:29:3B:65:45:09
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number: 01FB
Signing time: Wed 23 Sep 2026 03:09:12 +0000
Manifest this update: Wed 23 Sep 2026 03:09:12 +0000
Manifest next update: Wed 30 Sep 2026 03:09:12 +0000
Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: iW7uG7pDvy2Ekt4F7KKZaFjlxLk0WsMQz+ShX9UZnu0=)
2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: 4BM5LIM23GXw5AfkXFzMdqX+Y7TcpkGGG81Gw9eoyBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Validity
Not Before: Sep 23 03:09:12 2026 GMT
Not After : Sep 30 03:09:12 2026 GMT
Subject: CN=6ab342d8-cb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:b7:ea:e5:9a:05:56:92:72:40:8d:b2:72:
00:d8:f2:99:a9:43:f7:ab:5b:51:05:c7:1c:b0:ee:
57:fd:d8:7e:e1:87:a5:ee:02:5b:c6:88:4c:b2:09:
fc:10:0a:aa:44:42:40:e5:36:5d:b8:59:cc:d8:cf:
54:70:88:c7:d0:fc:54:33:f6:06:7c:6d:a1:e9:1a:
40:4b:82:b0:1d:68:0e:d1:69:1b:c2:bb:05:1c:de:
68:70:96:47:e8:98:04:ce:4c:4b:d3:1f:6e:c5:06:
75:ad:79:36:cc:ee:93:e7:35:72:5e:d8:52:2c:5c:
c6:8b:c3:db:a2:62:0a:97:22:fb:ff:f8:56:9c:12:
27:f0:3e:cb:03:fc:e1:34:85:5f:40:3c:d5:e2:10:
34:14:21:d6:f3:6f:cc:f8:f3:f4:41:fd:78:5f:d2:
a8:8b:c6:a7:02:75:ca:a3:10:e3:5e:57:49:b1:76:
bc:69:d9:18:ef:49:ba:f2:22:f4:01:fa:e8:7b:4b:
72:c4:42:62:07:e5:b4:3e:c7:01:de:f3:bc:55:51:
55:ca:d3:d1:e3:e1:6a:41:bb:a9:b3:93:aa:df:2d:
97:47:6d:5b:00:f7:4c:b5:f5:24:22:66:cd:18:39:
7a:f9:75:b6:f0:6b:88:98:06:21:15:de:ca:45:23:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:FC:60:31:96:F2:4A:27:54:63:71:1B:A2:C4:29:3B:65:45:09
X509v3 Authority Key Identifier:
keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:0a:cb:7e:63:4c:c5:1d:97:f2:ac:d2:ba:be:79:d9:3d:5f:
0f:c6:a3:d4:24:66:c8:de:e9:36:12:08:68:01:1b:44:25:b8:
6c:32:c1:af:3a:15:88:b6:ab:af:b0:bb:55:24:ff:6c:74:ca:
47:b6:1d:ff:80:0e:23:81:0b:64:18:bb:ac:3f:32:2f:a1:e7:
fb:2a:b4:65:b9:99:6e:ae:82:13:2b:38:80:ab:e1:b5:35:e3:
d4:0c:48:6a:b0:6f:80:b0:c3:69:ba:ec:8a:43:01:43:4a:f6:
9e:28:7c:4a:91:de:45:88:7c:d0:bc:b4:a2:f2:27:43:0b:a4:
99:d4:aa:0d:35:41:85:26:bb:41:92:43:8e:fd:bd:56:44:a2:
6d:60:3f:8d:8a:7d:86:db:bc:83:3b:26:2e:07:9d:ac:25:6f:
b1:73:8d:8e:83:cc:67:54:23:9f:08:98:67:89:7e:7a:7e:34:
b0:db:90:0d:c0:e7:1b:83:d1:18:36:93:64:29:26:41:45:9e:
c7:a8:31:00:7b:84:bb:5e:4e:f4:52:ee:16:f6:60:34:eb:85:
83:b3:59:3f:db:5d:62:9c:5a:a1:14:ae:59:6b:f4:67:85:a0:
c7:bd:e1:0a:ac:a6:d1:54:dd:6f:4c:a6:48:65:c7:cf:59:b0:
6e:25:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:14:52 2026 by rpki-client