
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier: QAkZbUQ4+IsUfrG3HC8J/9OKSq1D/A83fZg7AA92Fv4=
Subject key identifier: C4:7C:E8:DC:C5:DF:55:D9:27:52:46:1D:6C:74:F6:1C:7E:A7:77:CF
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number: 1550
Signing time: Sat 04 Apr 2026 18:08:50 +0000
Manifest this update: Sat 04 Apr 2026 18:08:50 +0000
Manifest next update: Sat 11 Apr 2026 18:08:50 +0000
Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: GTJYBsgYeVeHenx8Egsuum8ykxZGxx6eNREeVkwe7EU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Validity
Not Before: Apr 4 18:08:50 2026 GMT
Not After : Apr 11 18:08:50 2026 GMT
Subject: CN=69d153b2-c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:37:7d:d7:67:67:28:3f:b5:e7:e0:ef:b3:
25:60:6d:db:47:be:46:57:79:0e:69:fa:f9:2d:5c:
50:9a:49:5c:4e:45:b6:a0:4a:4c:da:08:4f:9b:33:
e5:b6:04:8d:21:af:18:5a:01:17:b8:da:1d:35:77:
09:ae:4a:17:78:c7:b5:bc:54:1b:03:7b:16:3e:fc:
21:4d:b0:1c:fc:2e:3c:d7:c0:96:a1:15:0d:2a:75:
b7:41:2f:26:15:f7:00:b1:4a:d1:5b:a3:a0:e2:87:
02:96:15:ef:e8:26:5a:e5:ba:cd:62:b1:9c:4e:c6:
04:62:c9:4d:a8:d3:c0:88:61:1b:d1:84:cf:29:c8:
0c:f4:8a:db:16:86:32:65:8e:2a:b4:b8:24:5a:aa:
f4:78:eb:d6:40:07:8a:7f:46:29:43:2f:e4:cd:6e:
0d:60:21:20:de:49:97:47:0e:85:9e:9f:1f:29:c5:
a3:06:4d:24:4b:0e:c3:14:ca:1d:db:4a:ba:e0:4b:
4d:22:0e:5f:c5:01:49:8d:3a:43:75:8f:cc:86:84:
c5:e7:0e:74:11:29:f2:ab:56:d9:a8:af:40:08:a0:
a0:5d:ee:6e:b1:16:bc:d1:fb:0c:78:7c:e6:7b:79:
49:d6:e5:49:46:79:48:78:88:50:7b:37:ac:90:25:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7C:E8:DC:C5:DF:55:D9:27:52:46:1D:6C:74:F6:1C:7E:A7:77:CF
X509v3 Authority Key Identifier:
keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:26:27:17:d9:c9:5e:80:c8:be:45:7f:67:08:81:8a:33:af:
e2:74:d1:b2:26:d6:ed:ed:b1:24:6d:67:4b:8a:c1:d1:02:4a:
71:0f:99:df:48:10:be:bb:c3:e3:d2:73:ba:1f:97:ab:9e:92:
60:b7:bf:16:9b:66:6f:e4:db:8b:5a:ca:59:13:03:f4:05:2f:
ac:b0:89:bd:f5:2c:2f:5f:01:25:0b:32:85:8d:bd:69:04:58:
f1:c4:50:50:11:cf:9e:0a:01:29:dc:3e:0a:de:2f:7d:b0:ab:
d2:6c:8e:d6:56:38:36:c9:21:a6:c5:6c:3d:a3:6c:7f:fe:16:
2f:3c:49:cc:74:c0:fb:f2:00:3c:97:8f:8d:d5:7a:d8:cd:ff:
92:35:c2:75:38:de:d5:e9:9d:d8:94:4a:0a:26:77:48:3d:ae:
1f:42:e0:c7:db:81:ec:e7:98:ca:fe:66:d8:18:4e:23:81:be:
0c:bc:ea:3c:dd:a1:16:88:ed:26:2a:9d:65:5e:69:54:c0:37:
13:f1:57:32:9f:1c:d8:67:2c:4e:c8:bb:45:41:bc:b7:2b:be:
7d:15:6b:37:c3:3f:fb:13:28:20:40:0f:d2:d7:ea:6c:ce:f0:
44:eb:fd:72:0d:fa:5e:24:eb:8a:9c:b4:f6:1d:bd:6d:e2:e1:
af:55:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:06:54 2026 by rpki-client