
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
File: VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft (raw, json)
Hash identifier: t3D1qevX6JYzfUPfNde5Bm2zYqG0wY8Ep3z/2PoodJg=
Subject key identifier: 67:D9:E6:CD:BF:BF:0C:9D:B7:4A:EA:02:9D:58:C9:C8:C1:55:8C:1F
Authority key identifier: 54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0
Certificate issuer: /CN=A9189AA3/serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
Manifest number: 01CB
Signing time: Sun 05 Apr 2026 03:14:15 +0000
Manifest this update: Sun 05 Apr 2026 03:14:14 +0000
Manifest next update: Sun 12 Apr 2026 03:14:14 +0000
Files and hashes: 1: VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl (hash: NJnQ1Tn8ZeN4R3MfeIgx9U/d+pN194i6ncDSMMWhtRo=)
2: 230576C0784C11EE9C354422C4F9AE02.roa (hash: 7xvDxYZ8Q7Qr+JZG4rTDiVXog3eF3DmNJ6tjYp0V/mo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl
rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189AA3, serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0
Validity
Not Before: Apr 5 03:14:14 2026 GMT
Not After : Apr 12 03:14:14 2026 GMT
Subject: CN=69d1d387-8f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:4b:23:f2:88:05:65:04:88:22:10:90:75:
d5:30:2b:9a:20:83:c1:c2:b0:7f:3c:05:74:ca:19:
cb:a3:5c:f2:9a:00:bc:cb:3c:c6:ba:61:f7:39:03:
76:44:ae:02:7b:0c:dc:ad:f9:03:cb:e3:cb:f8:75:
04:1f:8f:86:3a:1f:43:43:4e:a9:16:3a:f8:17:4a:
eb:00:bd:bd:25:60:e3:1d:b3:23:71:ce:ae:7e:e1:
12:b2:25:0b:07:41:71:63:f9:09:88:ea:f8:6b:e8:
39:f0:aa:ed:9a:65:2c:e3:b1:9c:67:ba:02:a9:e3:
4f:74:a0:c1:fd:12:6d:76:b4:90:25:ba:41:d3:10:
99:a2:1a:7c:16:5d:31:0e:a6:9c:d9:8f:9c:fe:a1:
77:28:c5:72:3e:9f:4a:e3:40:ae:54:db:2c:28:e2:
14:08:64:a3:2c:ea:82:56:20:15:00:40:41:7b:91:
7a:55:e1:6f:92:dd:13:c3:e9:ce:13:fd:c5:f3:76:
11:cf:a4:4c:67:a7:70:ab:29:4c:9f:35:d9:33:e6:
67:57:d8:0c:65:35:73:c1:4c:92:6b:f4:1e:11:7e:
4d:b0:cd:c0:54:b7:b3:ce:be:c5:66:14:a1:b1:81:
36:02:17:77:9a:83:9f:93:e3:25:99:bf:dc:93:7e:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:E6:CD:BF:BF:0C:9D:B7:4A:EA:02:9D:58:C9:C8:C1:55:8C:1F
X509v3 Authority Key Identifier:
keyid:54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:24:66:5f:6c:6e:d1:da:fc:91:41:7a:51:29:e9:dd:a8:31:
f4:d2:40:e2:f6:5b:51:dc:a1:70:44:47:a3:92:f4:1a:ec:03:
d5:34:6e:87:66:a2:29:c5:70:b0:56:da:9e:6a:21:67:bf:6c:
0f:06:b0:ec:35:68:7a:99:83:9f:1a:58:da:b4:24:ab:d2:5c:
2a:c4:fe:17:67:69:1c:f0:a6:9c:f7:9e:88:5a:18:3b:d0:bc:
ab:8f:5d:be:be:f6:64:84:4b:3c:de:ac:40:d5:ee:70:7c:5e:
ec:fd:64:51:43:10:29:19:82:41:51:2a:5d:b9:f8:ad:45:d5:
e6:8b:32:a4:b9:f1:f4:37:a2:d3:b4:f9:1b:77:67:28:b6:d3:
1b:2d:f8:f1:34:00:7c:64:dd:35:cd:9b:91:b2:76:62:e6:e2:
49:da:89:5c:1e:68:69:49:bd:d0:d7:67:69:d3:22:bd:7c:64:
19:45:e4:e1:c8:33:1e:d9:14:4d:6a:1a:94:98:b8:c3:5e:b5:
96:9d:ae:c2:fe:97:0b:24:c2:90:f1:8f:51:91:50:99:63:4e:
27:50:3f:52:5a:c0:08:3b:7d:09:5e:c2:2f:48:0c:e0:4f:91:
ac:1e:75:af:4d:26:cc:32:ce:2d:6f:a2:8c:df:61:40:88:c9:
1d:4d:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:02 2026 by rpki-client