
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier: XFZrpRhEVOTPkMtLzn9Teon8Cah446CjCIbEimYZWWs=
Subject key identifier: A0:66:98:04:B3:4C:E4:BC:09:65:05:9F:E7:15:FA:3B:5D:01:F3:23
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial: 06A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number: 0688
Signing time: Sat 04 Apr 2026 22:19:33 +0000
Manifest this update: Sat 04 Apr 2026 22:19:33 +0000
Manifest next update: Sat 11 Apr 2026 22:19:33 +0000
Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: ltRetSmkk+bYFo7okMeUonEw7c6hKHnKdNEcWOB7NeM=)
2: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: FsIfjE1hCId4WZSmCGZi8B4pcoqpgzCAhgnEUj6OePM=)
3: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: 9SWvU83uta5yQV6kASYfDhqApkdxCt/37HDqSjzPVj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Validity
Not Before: Apr 4 22:19:33 2026 GMT
Not After : Apr 11 22:19:33 2026 GMT
Subject: CN=69d18e75-d698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:73:8e:a5:64:91:3a:85:b9:1a:7a:c0:af:
35:ed:da:c1:d7:15:63:95:32:11:84:d8:f3:95:41:
31:02:73:ef:a0:95:53:c0:79:5c:b5:e1:0b:be:aa:
8c:cd:1a:2b:e4:a3:e3:9d:97:b3:e7:c8:4b:f2:72:
a4:83:3c:9a:53:2b:0f:80:cf:66:3e:b8:a8:cf:f1:
7e:d9:84:9b:33:08:a1:27:7a:91:d3:5d:c6:6e:b3:
ce:e6:05:cb:f5:ba:4b:a1:42:15:5e:cc:f0:d4:1b:
a1:9a:7a:b6:33:cd:6d:2b:cf:bf:39:5a:4f:80:a7:
e3:cf:46:9f:61:61:1d:1c:d8:3f:8d:62:56:2a:c3:
18:6d:cd:6b:e1:c9:54:8e:eb:67:f2:3b:ab:95:73:
95:0a:90:39:71:a9:c9:d4:af:e3:36:9c:c7:56:bf:
e6:2e:b2:fd:e9:c9:f8:14:29:3a:a4:ea:1f:db:71:
e7:65:4b:e9:8b:d5:91:cd:7f:96:45:42:31:67:4b:
7c:96:8b:47:ae:de:53:ab:bf:93:4a:52:1a:e2:ab:
e9:3c:25:fd:a6:d2:97:9f:f6:8a:db:6f:ff:34:6b:
51:a6:f0:93:f4:8a:a7:6b:86:44:88:db:40:27:40:
ff:df:6f:89:ef:57:b5:2d:54:8e:94:1f:67:23:19:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:98:04:B3:4C:E4:BC:09:65:05:9F:E7:15:FA:3B:5D:01:F3:23
X509v3 Authority Key Identifier:
keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:57:31:8c:af:ce:22:32:60:22:5c:08:a4:c6:1f:a6:fd:88:
8c:d4:a6:3c:3b:4a:40:37:1a:37:87:eb:ec:d0:d7:47:2f:55:
09:f8:90:28:a2:cb:c2:cb:2f:21:e8:a7:1d:2a:72:8c:98:c1:
f1:11:9a:98:24:fc:57:58:5d:c6:35:f4:80:20:be:9a:67:d1:
2f:8a:3f:88:c7:c4:0a:c4:ec:77:4a:c9:68:38:d4:45:06:53:
8b:f5:f1:01:96:76:75:a2:40:a2:d4:4d:65:db:be:e9:87:4f:
da:45:08:b3:cf:f9:6d:3c:ca:8d:ba:25:5e:80:37:8b:2a:d1:
59:24:11:ab:36:55:aa:9e:7a:f3:4a:5a:0c:c2:76:6a:e5:1f:
91:a1:da:70:a3:64:b8:2e:09:8b:3d:0c:cf:a1:22:43:f5:ff:
02:a5:4d:2a:59:4d:f7:e6:0a:a7:0e:e3:bd:29:b5:c0:f5:e2:
61:4d:be:bf:72:9d:27:b9:e6:d7:24:bd:00:7d:ce:b0:5d:5e:
38:6f:dc:86:c4:97:f1:22:30:50:6d:87:56:1e:5b:8a:64:a3:
55:55:88:7c:9e:1b:0e:7b:19:20:92:d8:fc:0d:01:c2:7d:68:
75:3b:23:9a:27:13:61:82:9f:77:b1:a8:c0:17:36:64:84:f8:
78:e8:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:48 2026 by rpki-client