
$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json)
Hash identifier: 3WO+xqkaATFBWrCfoI1D3Wv67MICGGfSQ+7ccI3ryFw=
Subject key identifier: 38:F0:27:8F:F5:89:FC:5D:C9:34:C0:67:2B:7A:52:91:9A:71:13:10
Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
Manifest number: 7B
Signing time: Tue 03 Mar 2026 07:20:46 +0000
Manifest this update: Tue 03 Mar 2026 07:20:45 +0000
Manifest next update: Tue 10 Mar 2026 07:20:45 +0000
Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: R0nMSKcCZXI95tcLXzKJbgavTlnSLr9VWL3utWfSNtQ=)
2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: eGLRs5+xRo2yh8UxiEyYoaUHZFSoi/sB9xgpO/Oq4V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Validity
Not Before: Mar 3 07:20:45 2026 GMT
Not After : Mar 10 07:20:45 2026 GMT
Subject: CN=69a68bce-b3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:8b:a3:19:c5:97:72:8d:ba:83:76:af:02:
38:41:b8:d4:d6:c2:1d:48:06:e2:2e:83:c5:7c:16:
6c:61:8d:0e:08:47:40:e8:12:1f:35:a0:41:39:37:
1a:6d:07:bd:c6:d0:c2:f0:85:5a:38:9c:ee:97:76:
9a:8e:18:18:0d:32:43:a4:75:f6:de:66:d7:77:38:
05:cc:01:48:53:89:37:03:3e:5f:90:64:d3:74:e8:
3e:fd:c6:b7:6d:7f:82:80:2d:9a:d9:59:43:99:4b:
db:e7:3e:3c:39:a5:1a:74:64:07:dc:2d:bb:80:e7:
c8:03:45:47:00:5b:a4:86:81:07:60:ae:c8:72:9c:
f8:b4:bf:14:7c:b6:bf:42:63:3e:50:0f:20:b2:0f:
23:30:c0:ac:b3:44:7b:3b:7f:fa:ae:6a:e5:1f:64:
c4:2e:86:eb:ed:9c:63:b8:98:ea:cf:7f:96:82:bc:
27:63:bf:e8:01:16:db:82:14:21:c5:77:11:11:25:
68:3a:56:f6:ee:15:cc:56:0d:94:80:9f:32:ca:f8:
05:be:cc:57:0b:77:42:0a:79:1d:18:e6:f2:fe:8a:
f2:12:d7:5b:08:3b:ad:f7:02:d4:d1:ba:13:93:26:
8e:d2:04:09:b6:47:f7:49:94:24:85:f5:6c:f3:3d:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:27:8F:F5:89:FC:5D:C9:34:C0:67:2B:7A:52:91:9A:71:13:10
X509v3 Authority Key Identifier:
keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:7a:ca:f3:b4:7d:ed:5c:24:d3:55:a7:a1:c6:26:1b:4c:
33:ce:03:36:6b:85:2d:63:72:d3:2d:03:01:78:43:e9:d8:ea:
9a:5a:eb:24:4b:4e:30:12:50:fe:2e:5c:9f:08:aa:53:e2:5d:
dd:a7:30:e9:75:7c:a0:74:5c:4a:d1:e6:71:96:c0:6a:c7:44:
bf:1d:7d:d2:91:92:a9:74:1e:7f:97:3d:3f:cd:1d:4f:0e:c4:
df:d8:da:1b:23:0e:ad:5e:47:39:30:07:5a:69:6a:a3:d4:7a:
27:90:fa:21:43:9c:64:11:92:50:38:0f:33:ed:57:72:81:0d:
ba:9f:11:c7:88:57:d0:16:ff:63:b6:0a:30:6b:9a:14:c1:46:
17:b8:d7:3a:be:d1:28:fe:fc:f9:db:65:25:1c:4a:d9:56:16:
7e:13:ae:cb:70:54:d1:ef:c8:5f:27:d3:fe:db:4e:6e:55:be:
b8:c2:c1:04:f3:33:9e:02:ea:da:50:f6:a8:b5:f6:c6:8c:62:
c0:8d:e3:61:f0:d1:26:84:0a:42:5c:a0:9b:8e:56:0c:46:0a:
4a:02:14:08:dd:55:9d:4b:75:6d:f5:0d:dd:8f:92:e8:34:b2:
23:ea:a0:93:ff:6e:9a:2b:68:5f:02:64:d3:e1:f3:09:bd:c9:
64:12:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:29:47 2026 by rpki-client