
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier: wvr8W3xp1uxaa1sxnso47IzPrTFHmYJhx84+Fhytxcg=
Subject key identifier: 49:18:99:9D:20:D3:19:CA:E7:67:22:5A:D3:54:FD:AC:2A:3B:C1:31
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number: 0182
Signing time: Sat 17 Oct 2026 05:18:14 +0000
Manifest this update: Sat 17 Oct 2026 05:18:13 +0000
Manifest next update: Sat 24 Oct 2026 05:18:13 +0000
Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: piQhHVCKFdkvQKmDswtVD4yddtxsTEFZhFMR3JqGlXk=)
2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Validity
Not Before: Oct 17 05:18:13 2026 GMT
Not After : Oct 24 05:18:13 2026 GMT
Subject: CN=6ad30516-9e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:ff:aa:51:ac:c8:cb:b2:8c:29:cf:f7:f1:
d8:32:46:8f:88:b0:a7:bd:48:7b:da:ea:9d:1c:e4:
5c:83:74:35:a9:08:5b:a4:67:0f:10:05:3e:f6:8d:
74:91:08:76:6a:c6:cf:7a:95:28:df:e9:de:db:a6:
92:72:64:28:d5:2b:17:ad:3b:b3:c7:1e:93:f8:91:
4d:60:ee:d5:de:78:85:39:57:54:16:04:99:0d:7e:
bf:52:86:cf:32:16:d3:d6:60:d1:50:3d:2f:a5:f3:
0d:2c:47:94:50:40:bf:c6:9c:d9:a3:f0:ce:c1:7e:
51:c4:22:1f:cd:ab:75:70:06:6d:c2:0f:de:64:60:
97:c2:7c:6f:5e:2c:ae:fd:22:59:55:66:ff:77:29:
b5:ae:43:f6:03:2e:71:e0:33:10:f0:03:90:36:1f:
72:f6:58:bc:6c:78:e5:f9:73:87:d7:57:d4:73:63:
92:e0:ad:05:27:1b:52:6f:bb:12:e2:59:f1:e9:b6:
ce:8a:46:b3:b4:be:73:ee:14:bb:23:1e:d2:c4:31:
cc:57:f4:e6:04:2a:8a:0c:d1:37:38:d7:1c:32:22:
41:28:7e:fa:18:dc:2c:f2:20:09:7e:34:45:d9:d1:
68:d9:b5:dc:54:6e:af:a1:ae:ee:70:ed:26:cf:36:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:18:99:9D:20:D3:19:CA:E7:67:22:5A:D3:54:FD:AC:2A:3B:C1:31
X509v3 Authority Key Identifier:
keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:5d:66:db:58:66:09:84:dd:e5:a3:d2:6e:1c:fd:97:78:1e:
6e:d7:39:2d:71:70:3b:0e:fc:9a:50:82:69:86:93:53:0a:d9:
60:43:49:2a:53:0c:71:0e:ab:df:d5:75:39:a2:6f:d6:31:05:
00:c4:85:33:e2:f3:c5:d8:2f:2e:52:a2:53:8d:24:c8:cc:b2:
1f:72:f2:f9:2d:f4:23:ee:58:a2:85:ca:4c:af:69:56:0e:db:
82:40:c8:9d:8e:de:90:9f:8d:b9:90:ea:f1:c1:be:55:b9:d1:
2d:a6:1c:d5:b1:d1:79:b6:09:c5:f5:6e:bc:d9:a5:e4:74:a0:
e0:4e:e7:b5:65:21:45:0a:1f:60:c1:e0:32:21:93:38:32:d3:
97:d3:eb:b0:13:a8:aa:82:52:08:29:95:7c:89:57:3a:d1:92:
26:74:cf:21:65:f9:47:a9:c5:d8:ca:59:94:d0:6a:f3:ba:3d:
ab:ce:22:8c:a7:fe:3d:7c:b9:a8:1e:35:7f:5b:10:a5:9f:ed:
20:10:fa:30:c8:45:02:7f:f0:c0:f1:cd:3c:78:87:30:97:6a:
04:55:38:84:fa:1e:8f:c0:44:62:74:a8:a8:87:0c:26:43:d3:
a5:b6:1f:23:bb:77:cd:63:7f:21:a3:c5:13:46:5b:9b:55:a0:
93:8a:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:07:11 2026 by rpki-client