
$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
File: VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft (raw, json)
Hash identifier: Kg3PWQNLUArpF7tAYBuji8DB+n8JP5zxOQCgpEDu+k4=
Subject key identifier: AF:BB:F2:DA:4E:27:F8:BA:3B:3F:5A:EF:F2:37:56:1F:80:F9:4E:43
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Certificate issuer: /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
Manifest number: 0136
Signing time: Sat 21 Mar 2026 04:33:33 +0000
Manifest this update: Sat 21 Mar 2026 04:33:33 +0000
Manifest next update: Sat 28 Mar 2026 04:33:33 +0000
Files and hashes: 1: VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl (hash: VOp1rrSchh49NHuxy3fEW3DO4nqkiNl9ise3bPGn0nE=)
2: CEF77C10FB3811EF8D87CD5DC4F9AE02.roa (hash: GbhVn0VE3FP24YsW08zI1eZuA4bs5ppt8H1p2aPPVzc=)
3: C4C5449EABD111F0A9879016C4F9AE02.roa (hash: tJWszT3hQG7KyZ59DcsDJbma2Zpx+xHHx0ZP3u0HdGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Validity
Not Before: Mar 21 04:33:33 2026 GMT
Not After : Mar 28 04:33:33 2026 GMT
Subject: CN=69be1f9d-d815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:6f:bd:08:86:73:b2:60:ff:87:8f:6d:12:
4e:21:bf:b6:20:1f:94:b5:74:bb:74:82:24:bc:3a:
15:f0:42:d8:e9:b2:9b:7a:1b:be:e9:c3:9a:c1:53:
ab:5c:f2:3a:01:79:9e:18:4b:be:3e:5e:3b:ea:26:
96:8f:d5:ec:8f:c4:41:b8:cc:14:e2:a8:1c:66:65:
57:e2:05:7e:3d:bd:9a:45:1f:47:25:58:a1:89:5b:
eb:0a:c4:01:d6:93:e8:df:14:74:a8:67:b7:e7:c0:
45:01:89:b9:3f:9a:91:91:5e:73:27:d4:ec:6e:86:
29:22:97:32:14:3f:c1:d6:6a:00:e3:11:a7:00:d4:
0f:09:73:ee:17:cc:0b:6e:4c:fd:f1:34:d8:3a:48:
e5:3d:34:c0:e5:24:37:69:38:45:74:60:59:90:4c:
23:7a:27:d8:ec:8a:e3:74:2a:b2:aa:c7:0c:c8:3d:
3b:80:99:17:52:e5:05:fc:ce:16:06:c5:08:8d:8d:
a7:90:f6:af:d3:40:88:3e:86:22:a1:8c:41:62:f9:
3d:43:76:d4:66:d8:fa:88:87:0a:e2:b0:bf:f6:6c:
17:39:8c:79:7d:ad:c7:3e:fa:9b:81:49:4f:74:43:
a8:e9:49:0f:55:5f:64:90:78:b7:84:bf:93:f5:8e:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BB:F2:DA:4E:27:F8:BA:3B:3F:5A:EF:F2:37:56:1F:80:F9:4E:43
X509v3 Authority Key Identifier:
keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:c5:17:f6:ad:cc:50:70:bb:71:9e:49:fb:a1:07:b9:06:68:
51:10:40:f7:b4:da:bd:d4:0f:fd:b3:b5:db:3f:02:f7:1b:a0:
53:b9:1c:53:83:b1:bd:73:14:e3:d5:dc:2b:40:49:05:6d:d7:
db:4e:9a:ff:ca:10:7d:1f:c9:9d:e7:e6:49:9a:97:d8:a7:31:
35:c8:4f:49:a0:12:e3:6c:cd:9e:02:cf:b9:93:d1:aa:41:58:
14:d8:c9:38:82:90:cf:82:ae:b5:b9:83:90:44:67:b1:da:16:
bc:05:b1:a3:46:70:db:a0:c3:4a:a6:54:02:15:fb:79:c8:18:
c9:32:d7:96:57:0d:bb:ce:22:9e:6b:49:b9:24:da:fb:9a:67:
be:94:48:0c:a0:63:5f:e4:5c:1a:2f:a1:cd:c8:74:5c:1e:a8:
c5:d1:8c:5c:af:ff:0e:3c:99:1e:ba:27:b5:09:bb:7f:be:08:
b8:b0:58:3a:08:8f:04:c1:ee:67:72:4b:53:e5:1c:50:b4:8e:
6e:cd:93:c1:ba:b4:b7:a7:98:a7:e4:82:d2:b3:79:5f:16:c2:
c2:37:fe:e2:8f:16:5d:09:25:6c:35:db:9b:bd:14:69:20:25:
73:74:64:17:f9:cf:c9:40:be:e4:6f:1a:56:49:18:1b:27:72:
4b:c1:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:51:18 2026 by rpki-client