
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json)
Hash identifier: N9cvVO4mxLMJBWOnJ7bN7F46deBJ0Dt0fzzp59Pjz+c=
Subject key identifier: 5A:31:DE:19:46:76:E1:6D:55:95:05:EF:06:2E:B5:DA:43:60:89:40
Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Certificate serial: 02AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
Manifest number: 02A6
Signing time: Sun 05 Apr 2026 01:14:07 +0000
Manifest this update: Sun 05 Apr 2026 01:14:07 +0000
Manifest next update: Sun 12 Apr 2026 01:14:07 +0000
Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: HLivf76rCHXcIuIJvSUXjM156bx3/fscc4f2tp1BxOQ=)
2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: /+2x4P+0VjjyulNd+Hlilcjz+a4mQNA9bK+3jYhM9Ew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Validity
Not Before: Apr 5 01:14:07 2026 GMT
Not After : Apr 12 01:14:07 2026 GMT
Subject: CN=69d1b75f-e630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:44:4e:0e:24:3f:19:67:bb:06:07:5c:86:
d5:dc:9c:57:d8:2e:c8:e3:2e:78:ba:6b:ce:01:5a:
c4:14:ac:aa:e3:ab:4f:6e:79:23:11:b0:be:b6:93:
d7:eb:47:da:a4:55:42:36:82:90:fc:20:dd:28:55:
2c:c8:42:67:d7:fc:23:28:1a:dd:16:25:44:fa:2e:
87:04:50:7e:f6:17:d0:5c:0f:6a:b5:fd:2e:ba:e6:
ff:a7:2c:57:4f:30:7f:53:49:cc:85:a7:00:08:ea:
eb:4b:27:99:f5:73:97:e8:cd:5a:7a:6a:11:90:2e:
dc:c0:24:ca:11:5e:47:50:b4:55:f5:27:0e:9d:22:
ac:25:89:bb:d2:7d:9d:38:5e:1b:65:47:69:2c:6a:
50:53:bf:aa:e7:a7:70:c2:ba:1f:17:f9:6c:ca:be:
74:1e:97:05:72:0a:ba:fc:cc:92:e3:62:be:7d:8a:
7f:4b:e1:d8:9d:17:69:f0:af:4b:3b:b9:76:bd:c4:
62:31:f2:e0:99:31:67:ff:d4:12:70:7d:a7:e8:e6:
82:12:32:4b:13:79:33:fd:77:f2:90:b5:99:b4:98:
35:bd:53:55:f4:19:bc:e2:81:ba:44:ba:5f:6f:5a:
ee:80:d6:e6:20:e6:bc:5f:6b:28:ab:fe:7f:6d:04:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:DE:19:46:76:E1:6D:55:95:05:EF:06:2E:B5:DA:43:60:89:40
X509v3 Authority Key Identifier:
keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d2:1c:d6:4a:93:61:ee:c8:26:2f:e4:a8:03:7d:4c:11:de:
6f:da:3f:95:76:bd:8a:23:7f:c2:11:59:4d:0e:4e:28:6e:9d:
9c:32:25:c2:c6:8a:2b:27:da:7c:f8:d1:d5:b5:7c:11:b6:dd:
80:46:24:13:ec:c6:7a:2c:87:87:c6:9c:55:44:aa:40:fb:17:
f0:77:f1:42:7d:3c:01:dd:10:9c:32:13:91:94:82:49:0a:2e:
d3:5f:33:43:6b:d1:9e:f1:76:16:84:60:c0:a2:f3:e1:81:4a:
35:8a:b9:3a:bc:c3:50:e2:85:dc:78:d8:41:f5:75:df:4c:b2:
70:7c:aa:26:97:d0:0d:75:a5:5e:6a:50:7f:96:9c:78:dd:b7:
6a:ca:87:0d:bc:d4:6e:58:1d:61:8d:98:86:88:08:93:34:69:
52:ae:06:ad:5d:a3:15:69:a9:70:55:97:de:05:d5:d2:aa:25:
86:4a:86:70:57:04:3d:f6:98:46:ec:3a:e9:93:cc:00:c8:5d:
a9:1f:1d:32:9b:6a:ab:9c:a4:a9:d8:3c:2f:3d:70:93:c0:6e:
db:01:33:ff:82:7f:0b:19:8b:ab:e3:a7:5a:db:e3:96:69:69:
e2:81:96:b0:84:24:8f:2c:69:67:db:73:23:b8:d6:b9:3d:3d:
bc:a2:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:02 2026 by rpki-client