
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File: VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier: x8E1Mgu6OiwPem5UfBCj2NLsC0S5pkmBReoG4vgn2Xg=
Subject key identifier: E2:2B:14:36:F2:CC:B7:F5:64:15:9D:57:A9:69:23:E8:E1:15:9E:CF
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer: /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number: 8B
Signing time: Sun 05 Apr 2026 07:00:53 +0000
Manifest this update: Sun 05 Apr 2026 07:00:53 +0000
Manifest next update: Sun 12 Apr 2026 07:00:53 +0000
Files and hashes: 1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: zeECM6RlRmisZGfjyTfBqtZUJBPlEe8HX0kQxzGdSBE=)
2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: k7KAeEujUB9hyqnv/uSDh4wrDBFacTBtGdVKJFRlzqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Validity
Not Before: Apr 5 07:00:53 2026 GMT
Not After : Apr 12 07:00:53 2026 GMT
Subject: CN=69d208a5-1227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:c8:d7:f8:24:dc:84:85:8e:37:d0:2f:ce:
7e:47:73:0d:d9:33:61:c1:0b:a0:40:a4:ff:fc:3a:
45:34:d0:95:8d:03:82:6e:75:f9:28:ba:91:fa:ee:
35:bf:4c:4c:93:2a:50:87:8f:de:46:30:5a:7c:6d:
75:1b:44:f1:44:75:9e:9b:3b:f7:56:67:cd:f2:b9:
59:11:dc:6b:de:bf:23:5e:33:09:63:cd:bb:c2:2a:
1a:4d:05:44:4c:8f:ba:79:ce:b1:b4:ad:97:8c:e2:
a2:ad:79:0a:5b:3b:f7:ef:87:ba:72:ef:27:a3:fb:
89:3a:19:d9:d3:6c:64:4e:75:1a:be:be:e2:2b:82:
dc:64:6c:38:26:fc:59:25:d0:c8:b9:f3:95:57:b2:
b6:33:ce:74:c6:a3:fe:29:15:ac:64:09:cf:4b:b4:
f2:94:8a:d4:85:ca:74:d4:2e:fe:da:50:49:6d:68:
69:f6:3a:81:af:22:37:21:fc:a3:f4:f3:9a:5c:5a:
94:ee:9f:91:2f:e1:77:57:7b:07:c5:82:5b:db:8a:
1f:9c:69:4b:27:a4:1a:22:ff:e5:bd:63:66:c4:ab:
71:4a:27:83:c4:68:0a:2c:b4:e7:11:26:48:0e:78:
fb:25:73:8f:55:99:40:13:50:cf:42:1f:f3:6d:4f:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2B:14:36:F2:CC:B7:F5:64:15:9D:57:A9:69:23:E8:E1:15:9E:CF
X509v3 Authority Key Identifier:
keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:0d:f8:9e:a9:ce:f6:e5:43:65:e6:d7:98:02:52:53:b2:ae:
75:ff:07:b7:02:c8:94:99:e6:50:94:a2:dd:70:31:b8:51:df:
78:5c:0d:44:f4:2d:9c:b0:3e:e5:e8:3a:cb:31:3b:ab:1a:e3:
c0:b3:c8:50:dd:ea:3f:aa:a4:80:de:3a:00:89:d3:1b:dd:5f:
f2:aa:fa:a4:c2:06:fa:64:56:a5:81:ac:4c:24:fb:bd:44:4a:
83:42:ee:90:27:0b:52:e6:2d:fc:97:1e:cf:a4:a9:15:01:c7:
33:d3:7e:97:cc:60:b6:c8:28:af:d5:5d:c9:ae:f6:a5:04:75:
08:58:45:32:18:04:73:ae:51:a4:ff:1c:06:f5:7f:86:a2:9a:
23:63:7f:6e:fc:2a:13:e2:03:d6:85:38:03:e5:d7:90:b0:3a:
0a:78:f3:cf:62:ad:78:99:76:71:65:dc:df:5f:28:e2:25:7c:
3f:28:c6:99:0f:71:13:48:a9:21:0b:a4:13:4d:4a:fd:41:78:
a2:4f:49:8d:5b:6b:14:fe:36:27:ba:70:d7:7b:42:68:ff:31:
11:dd:22:35:b8:c0:8b:3a:76:f0:3b:e6:e1:a0:b3:eb:5f:cc:
ae:63:43:74:64:2a:e3:13:fd:c5:04:73:d5:6b:c2:00:1d:6f:
94:f6:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:41 2026 by rpki-client