
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier: OaQyt/ZJvEqUnwuMdgMBJiEkCObm5u4ltlQXf3fPoWM=
Subject key identifier: F0:51:0D:A3:50:25:A7:5D:43:D9:B5:BB:3C:54:75:80:BA:4C:2B:8F
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial: 221F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number: 220C
Signing time: Mon 02 Mar 2026 15:56:37 +0000
Manifest this update: Mon 02 Mar 2026 15:56:37 +0000
Manifest next update: Mon 09 Mar 2026 15:56:37 +0000
Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: X8Gq40s6gKeFdD01QIeUt8hG6hRiJYRhxWuDOV+3464=)
2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: HwypahBFkKbW/pB8Pd+gaE4/P/VRHrxmO2AZ+Ty59Ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8735 (0x221f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Validity
Not Before: Mar 2 15:56:37 2026 GMT
Not After : Mar 9 15:56:37 2026 GMT
Subject: CN=69a5b335-e7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:01:d1:19:c7:a2:10:c6:7b:f6:30:8e:86:
3d:80:09:1c:66:9a:b6:f4:05:38:e5:c7:bd:fc:31:
6d:bd:24:c0:21:5e:c4:3e:d3:5a:24:a1:0a:6b:fb:
87:aa:e0:d1:db:ec:f5:9b:b3:12:49:fb:14:61:ae:
97:c5:dc:22:d7:31:8e:e8:bc:98:39:8e:96:c0:15:
b3:7c:58:19:e6:8a:f8:9b:e1:64:40:5b:76:cc:47:
60:f8:72:1c:be:e3:05:5c:6b:31:1a:c6:ad:8e:b1:
d8:cd:63:22:4a:f1:66:98:ca:17:af:c9:59:01:5a:
4b:09:d7:dc:e1:c1:02:93:3e:f0:71:a7:4c:27:67:
06:6c:1e:71:60:31:bc:dd:70:99:85:d9:7f:af:0c:
10:46:9e:f2:ee:c4:bb:db:83:f5:07:25:54:85:09:
bc:49:f3:52:30:b9:f3:4c:a6:9c:de:bd:43:b0:77:
f5:a7:25:71:ea:3c:b9:50:b1:48:97:5d:7a:70:59:
22:1b:c9:cc:c1:27:45:cc:d0:10:36:57:f1:78:9c:
63:78:7a:61:68:a3:66:fd:20:2e:bf:b7:f5:67:56:
25:8a:a8:6a:97:4c:50:f9:a4:ec:54:3d:2d:8e:4c:
63:e3:3b:14:ef:b6:ff:a2:14:21:37:13:54:5c:f5:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:0D:A3:50:25:A7:5D:43:D9:B5:BB:3C:54:75:80:BA:4C:2B:8F
X509v3 Authority Key Identifier:
keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1d:4a:9e:fb:3f:9f:05:05:19:18:f9:1a:84:96:c2:e9:ea:
bd:7b:23:00:6e:a1:fd:03:59:47:60:ee:45:97:25:de:7e:20:
66:81:bb:46:40:af:9b:85:b8:7e:c5:3b:28:a7:4a:16:9c:b4:
4d:49:43:14:44:53:a3:19:d3:6b:0c:72:3e:93:23:c2:7b:70:
5e:80:5e:e4:93:f7:4c:06:21:74:7f:07:4d:06:09:ae:30:b0:
ef:ad:b7:02:06:b4:8a:70:be:7e:9b:4e:62:5e:e1:ad:67:fd:
d5:fd:b9:cc:30:6f:d9:ed:35:84:cc:22:63:b9:87:f3:79:91:
ff:b0:aa:ab:25:e0:05:a1:45:ef:a5:f6:73:c9:3f:a0:c5:d8:
0c:6f:de:c7:4f:a6:ac:4b:65:9f:a0:9b:dc:9b:8a:d1:da:6c:
ce:6c:a6:33:46:d9:c5:ed:84:b4:a7:f6:13:66:41:29:fc:99:
d4:b9:5a:81:78:82:46:84:c8:bd:a5:8c:f1:95:37:10:dd:de:
79:13:e0:63:09:27:bf:e3:90:fa:2f:a3:25:3b:b7:7a:46:78:
2b:19:de:79:b2:64:f7:65:8c:e5:a4:08:cf:aa:71:b3:b0:c7:
c2:d9:14:91:2b:7c:74:8b:11:ae:48:f2:64:da:23:3a:f6:0e:
49:48:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:52 2026 by rpki-client