
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier: WVClZLvHDciLpXzE3cgCDu3rYn5PKD8Svs3bkM7ifOg=
Subject key identifier: C5:54:BC:51:51:DF:87:04:0E:FD:CD:FA:92:9B:C8:35:86:6E:0F:3C
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial: 2AC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number: 2AB0
Signing time: Fri 18 Sep 2026 15:32:47 +0000
Manifest this update: Fri 18 Sep 2026 15:32:46 +0000
Manifest next update: Fri 25 Sep 2026 15:32:46 +0000
Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: /rzrBb+SeFk3l7V95h5yQJvv5lJw3oDdq7H8KUsmgKQ=)
2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: mpjVMZqgsEDLte7km/wxxa0aijeYSHyV/D4q8GjzrZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10951 (0x2ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Validity
Not Before: Sep 18 15:32:46 2026 GMT
Not After : Sep 25 15:32:46 2026 GMT
Subject: CN=6aad599e-b6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:c1:46:9c:62:e7:7c:69:4c:39:c7:19:2b:
e2:0c:1a:ca:d7:3c:2d:cb:21:ca:51:ef:59:b0:d6:
0f:95:93:77:0d:4e:e3:4e:55:64:47:73:c9:a7:65:
e0:31:eb:94:37:43:de:f8:1a:c3:85:c4:d1:8a:f0:
d7:56:77:d1:d6:56:52:19:56:3d:45:87:fe:11:fb:
1b:8a:bb:8b:fa:be:32:0d:8c:8e:35:b6:b5:06:e3:
80:cf:ed:2c:1e:91:e5:1a:54:71:fd:af:83:0d:5b:
c4:ea:1f:9e:9f:72:19:28:57:13:37:15:81:53:ab:
72:4d:02:9f:25:b0:6c:ac:fb:70:d9:a8:91:b1:0d:
c2:9f:9b:b7:5b:01:32:52:a3:41:a0:ff:b2:4c:23:
f7:c2:e2:5c:93:10:0f:9b:fe:1b:96:40:2b:94:50:
08:c8:cb:23:69:a1:28:fd:69:2e:a9:57:97:08:d2:
94:bd:62:35:7d:4a:c4:77:25:b1:07:b5:23:37:22:
70:3f:6a:09:fa:4f:7d:b4:3f:0e:ed:7e:b9:57:16:
25:7c:1a:20:bd:d9:aa:0d:40:d6:d2:54:a9:b1:2b:
3e:2d:6d:ab:b1:83:2b:a7:cc:12:a5:db:73:fc:39:
e5:91:29:fd:58:ed:20:89:87:67:35:a2:7d:a2:e3:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:BC:51:51:DF:87:04:0E:FD:CD:FA:92:9B:C8:35:86:6E:0F:3C
X509v3 Authority Key Identifier:
keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b1:26:3d:76:e7:32:9c:62:36:e8:2c:e6:83:b1:74:c3:3b:
5f:25:83:59:34:ee:4a:39:e6:b2:05:87:d0:e0:92:96:44:81:
1e:93:27:68:c7:9d:c1:8e:d8:22:91:5a:a6:62:42:82:40:62:
ba:e5:ec:84:2f:ce:d6:dd:47:2f:c7:0a:68:86:4d:cf:dd:e3:
04:00:fc:d5:8d:9d:71:97:ae:64:98:4b:52:85:83:4f:c1:b6:
1c:ce:b2:17:bd:bb:50:80:54:0f:a8:5d:76:8b:34:3b:1e:7c:
97:3a:db:6a:6e:3b:09:33:fd:75:0e:76:be:0f:7b:72:b1:bc:
0a:c5:73:df:27:ee:e4:11:67:38:26:c1:84:37:15:16:07:f4:
b3:7c:f6:11:96:e9:ff:12:fc:8a:dc:7c:e2:21:dd:f8:ef:3f:
6d:c8:05:b9:d1:98:fa:44:64:f0:54:9c:bf:5d:5c:64:db:e6:
e0:f5:96:9f:e6:94:73:ab:d1:61:08:72:23:4a:cc:a6:ba:89:
96:bb:ff:48:f7:61:14:3a:26:ae:9e:2c:71:db:af:b8:70:8b:
87:32:b1:a1:45:9e:9e:bc:d3:b1:9d:34:e5:88:77:e4:17:6c:
38:46:65:6a:95:ff:36:f6:95:a6:bd:f5:ed:b3:2b:d2:ed:45:
7d:02:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:15:55 2026 by rpki-client