
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier: cT8qEQGq/GrBwK1l05Q2kH3zv02LjapwM1PfLXaHp3w=
Subject key identifier: 22:4F:A8:21:AC:0B:40:51:3E:63:DF:F7:7B:44:AF:72:C7:F1:AC:09
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial: 3528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number: 3518
Signing time: Wed 18 Feb 2026 14:56:26 +0000
Manifest this update: Wed 18 Feb 2026 14:56:26 +0000
Manifest next update: Wed 25 Feb 2026 14:56:26 +0000
Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: XyJmfjvyJJwWmGM9A6t7q7Ez50wkj7UEhOerq9Zx/tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13608 (0x3528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Validity
Not Before: Feb 18 14:56:26 2026 GMT
Not After : Feb 25 14:56:26 2026 GMT
Subject: CN=6995d31a-7b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:b8:b1:1c:eb:f2:8e:2a:44:72:25:99:fd:
cd:5b:06:e1:09:8e:d6:32:ae:e2:31:7a:eb:5e:8e:
0a:33:3a:b5:8e:8b:69:c8:c0:33:a3:2a:52:a2:c3:
79:75:3b:ea:77:ce:a4:39:18:b7:b0:f7:55:2a:b7:
84:50:b8:ed:15:68:79:61:2f:91:4b:98:83:eb:e2:
df:46:29:7b:68:dd:cc:82:94:88:ef:b2:f1:92:db:
21:00:ed:a4:15:a5:16:9b:16:9d:c8:cb:3c:24:e6:
5d:3f:8e:c6:cc:45:97:f7:86:ab:d4:e3:db:5e:17:
5d:c0:16:ea:87:5d:9d:13:05:e4:8a:3f:c9:9b:7f:
60:f8:c0:39:fc:9b:6d:f6:b9:06:cd:7c:73:df:c8:
64:be:b9:02:fb:64:c2:00:17:52:52:3b:04:65:88:
a5:95:63:09:c6:78:d8:e3:57:9a:d3:36:ee:17:f4:
52:31:71:f7:a6:e5:16:c0:d6:2d:a4:43:88:63:ab:
87:fa:6b:fb:4c:31:42:bc:af:43:e9:de:dd:18:0c:
75:42:ac:d0:8c:0b:1c:fa:7c:7f:9b:1d:e1:4f:68:
2d:89:d6:ce:22:48:13:46:7f:b1:2b:86:78:7f:c7:
ca:ba:17:23:cf:65:b0:75:aa:72:de:b0:dc:10:7d:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:A8:21:AC:0B:40:51:3E:63:DF:F7:7B:44:AF:72:C7:F1:AC:09
X509v3 Authority Key Identifier:
keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:a1:b4:79:9d:d4:b9:f1:0e:55:ee:2f:43:71:b7:7f:70:
32:e8:52:c6:c1:8a:d0:ac:0e:bb:cf:1b:a5:96:aa:aa:1d:43:
6c:8c:66:c7:b1:e5:83:79:e8:64:05:4e:13:82:74:f8:b2:5e:
2b:1a:ae:f7:aa:63:4e:48:c1:e6:f4:b8:f3:d0:29:89:a9:25:
83:a9:e7:66:9a:ed:6c:66:47:08:79:f0:fa:2d:58:76:7f:85:
5d:4a:89:03:81:1d:6b:00:66:f3:ad:26:13:89:75:4b:ae:b0:
ed:10:49:86:24:d6:eb:9a:e2:87:db:f8:47:69:61:dc:e8:58:
ca:2d:b9:90:88:8b:4d:ba:46:e0:02:d3:10:80:6c:f9:37:bd:
c1:91:e6:92:e1:d6:60:b6:f0:c7:d1:d9:b3:9b:19:84:24:5e:
de:81:91:19:ba:a9:a8:e1:38:c1:92:42:5f:e5:bb:ed:4c:76:
55:04:d7:0f:ec:47:8c:ce:64:38:5b:9a:3e:09:01:f4:33:41:
0e:3d:19:9b:6e:ad:73:be:f1:c3:7c:06:dc:34:75:3e:ac:aa:
bf:be:c3:11:8d:ca:05:f3:86:5b:b6:61:7c:09:5c:be:cf:ab:
68:ee:dc:af:8d:10:75:95:e7:5b:6c:cb:68:4e:15:7d:db:d9:
a2:fc:45:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1
RkVEOTQ1MTEwHhcNMjYwMjE4MTQ1NjI2WhcNMjYwMjI1MTQ1NjI2WjAYMRYwFAYD
VQQDDA02OTk1ZDMxYS03YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwm64sRzr8o4qRHIlmf3NWwbhCY7WMq7iMXrrXo4KMzq1jotpyMAzoypSosN5
dTvqd86kORi3sPdVKreEULjtFWh5YS+RS5iD6+LfRil7aN3MgpSI77LxktshAO2k
FaUWmxadyMs8JOZdP47GzEWX94ar1OPbXhddwBbqh12dEwXkij/Jm39g+MA5/Jtt
9rkGzXxz38hkvrkC+2TCABdSUjsEZYillWMJxnjY41ea0zbuF/RSMXH3puUWwNYt
pEOIY6uH+mv7TDFCvK9D6d7dGAx1QqzQjAsc+nx/mx3hT2gtidbOIkgTRn+xK4Z4
f8fKuhcjz2Wwdapy3rDcEH06WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJPqCGs
C0BRPmPf93tEr3LH8awJMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE
OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS
UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k
X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBj1KG0eZ3UufEOVe4vQ3G3f3Ay6FLGwYrQrA67zxullqqqHUNsjGbH
seWDeehkBU4TgnT4sl4rGq73qmNOSMHm9Ljz0CmJqSWDqedmmu1sZkcIefD6LVh2
f4VdSokDgR1rAGbzrSYTiXVLrrDtEEmGJNbrmuKH2/hHaWHc6FjKLbmQiItNukbg
AtMQgGz5N73BkeaS4dZgtvDH0dmzmxmEJF7egZEZuqmo4TjBkkJf5bvtTHZVBNcP
7EeMzmQ4W5o+CQH0M0EOPRmbbq1zvvHDfAbcNHU+rKq/vsMRjcoF84ZbtmF8CVy+
z6to7tyvjRB1ledbbMtoThV929mi/EWC
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:49 2026 by rpki-client