
$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier: tCRKudwwCTSWsuJ4QolGveFyay92LKde40ODyHU+Rw0=
Subject key identifier: B1:EB:2A:F1:DC:99:1B:5A:B0:AF:AF:6E:00:D0:15:E1:E5:0C:6B:22
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number: 01CB
Signing time: Wed 11 Mar 2026 02:54:43 +0000
Manifest this update: Wed 11 Mar 2026 02:54:43 +0000
Manifest next update: Wed 18 Mar 2026 02:54:43 +0000
Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: zmyqyL1qGGudL9vf1U3rXx7yaX9VW0jwES38NSWIukQ=)
2: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: v276QOnwKRfPbFy/NDP7PYynjy4E6kAsd497Z2Qjh9E=)
3: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: nhgX20QyBAliVjR34gYeCpAPvjxaRsYtwg9FMkMe0f0=)
4: EE44E774314411EF956C0046C4F9AE02.roa (hash: mSB8uynASz5JULPqU2um7D00gtNkbXdaEHU3YnsuCGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 02:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Mar 11 02:54:43 2026 GMT
Not After : Mar 18 02:54:43 2026 GMT
Subject: CN=69b0d973-a893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:d9:6e:9c:65:9c:fd:46:d3:e5:c1:c3:f4:
f7:6f:73:ac:3d:08:0a:1a:50:d2:44:c4:af:7e:df:
8b:9e:7c:15:12:0d:07:4f:48:82:f5:2a:63:04:3b:
50:e6:87:10:3d:e8:b6:8e:c1:0e:cb:b8:80:ef:41:
2c:c8:63:43:ed:ca:3f:b8:79:01:e1:1b:17:77:68:
0d:ce:88:50:cd:2e:2b:55:73:62:ae:db:3b:8f:27:
c0:0b:50:0e:40:d7:40:04:6d:14:00:87:07:d0:ba:
2f:5d:0d:aa:44:12:64:74:e1:cc:80:d0:f3:e3:a0:
aa:d5:b5:ee:91:aa:52:f4:0e:b6:f7:0e:40:a5:00:
64:0c:c1:00:99:49:31:77:5c:9a:21:58:2c:99:7b:
f8:f1:9d:78:a0:00:df:27:4b:7c:7c:d6:7e:5b:e2:
5e:6b:b1:60:18:83:f7:b4:ba:3f:be:4f:0c:8b:78:
4e:ea:be:8d:66:3a:0a:69:74:8a:17:f8:08:dd:22:
5c:d2:4b:d1:75:65:9c:ee:36:3e:c0:43:50:5c:d1:
cb:1b:9c:9f:13:de:3c:4d:23:a4:b7:7e:61:8c:d3:
42:35:0e:e0:03:57:d3:30:46:5c:77:60:84:22:80:
28:48:8d:5c:74:fa:c6:86:a8:3d:53:66:d9:47:6f:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EB:2A:F1:DC:99:1B:5A:B0:AF:AF:6E:00:D0:15:E1:E5:0C:6B:22
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:73:28:ed:fe:97:2d:e7:47:52:cc:87:6e:3e:cd:c0:1c:
b2:c0:45:e6:04:e8:6a:9b:6c:12:b4:2e:b3:10:1c:3c:6b:ca:
1b:dd:78:6c:69:4e:61:cc:51:c2:1d:cc:bb:76:76:45:50:59:
f8:a4:dd:45:a7:79:32:20:48:2f:14:ee:fd:8f:e9:32:9b:00:
7d:4a:e2:5c:bb:a0:29:48:d1:9a:28:26:b9:75:a7:cd:d8:13:
d1:ce:f8:5a:7c:e2:aa:49:77:f1:d8:dd:77:25:2d:23:15:94:
ef:fb:dc:41:40:79:95:7c:9a:16:9f:86:c9:eb:10:36:dd:0e:
22:1e:b9:c4:38:c2:a7:54:58:a5:e5:ff:62:5e:f4:7c:c3:21:
69:79:2e:59:9b:2c:84:1c:e7:64:23:8d:7c:8d:36:77:f2:17:
91:71:02:fd:7e:69:c1:03:2b:49:42:00:0b:75:52:b7:a7:15:
ab:56:38:1f:40:67:fe:df:d4:ac:d0:22:cd:05:4e:25:a1:63:
4f:e6:00:33:f9:50:cb:fa:58:73:76:05:73:e3:f2:49:6d:65:
00:62:15:ba:4b:11:39:97:73:7f:ea:08:7d:2b:08:18:78:01:
55:81:97:c8:46:5a:53:b0:dd:50:05:0f:a6:f2:42:08:ca:29:
78:42:6c:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI5QTUxMTAvBgNVBAUTKDU2RjkyOEM3MkE1NzI4QzE3QTk4MjUxMDlCQkJCNzIx
MDMxM0JCQ0EwHhcNMjYwMzExMDI1NDQzWhcNMjYwMzE4MDI1NDQzWjAYMRYwFAYD
VQQDEw02OWIwZDk3My1hODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoljZbpxlnP1G0+XBw/T3b3OsPQgKGlDSRMSvft+LnnwVEg0HT0iC9SpjBDtQ
5ocQPei2jsEOy7iA70EsyGND7co/uHkB4RsXd2gNzohQzS4rVXNirts7jyfAC1AO
QNdABG0UAIcH0LovXQ2qRBJkdOHMgNDz46Cq1bXukapS9A629w5ApQBkDMEAmUkx
d1yaIVgsmXv48Z14oADfJ0t8fNZ+W+Jea7FgGIP3tLo/vk8Mi3hO6r6NZjoKaXSK
F/gI3SJc0kvRdWWc7jY+wENQXNHLG5yfE948TSOkt35hjNNCNQ7gA1fTMEZcd2CE
IoAoSI1cdPrGhqg9U2bZR2+W+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHrKvHc
mRtasK+vbgDQFeHlDGsiMB8GA1UdIwQYMBaAFFb5KMcqVyjBepglEJu7tyEDE7vK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjlBNS9FMjlFNzM2MDdB
MTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtNRjZtQ1VRbTd1M0lRTVR1
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjlBNS9FMjlFNzM2MDdBMTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtN
RjZtQ1VRbTd1M0lRTVR1OG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY39zKO3+ly3nR1LMh24+zcAcssBF5gToaptsErQusxAcPGvKG914bGlOYcxR
wh3Mu3Z2RVBZ+KTdRad5MiBILxTu/Y/pMpsAfUriXLugKUjRmigmuXWnzdgT0c74
Wnziqkl38djddyUtIxWU7/vcQUB5lXyaFp+GyesQNt0OIh65xDjCp1RYpeX/Yl70
fMMhaXkuWZsshBznZCONfI02d/IXkXEC/X5pwQMrSUIAC3VSt6cVq1Y4H0Bn/t/U
rNAizQVOJaFjT+YAM/lQy/pYc3YFc+PySW1lAGIVuksROZdzf+oIfSsIGHgBVYGX
yEZaU7DdUAUPpvJCCMopeEJsPA==
-----END CERTIFICATE-----
Generated at Thu Mar 12 11:02:00 2026 by rpki-client