
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: I5OBfkUICauJ8PSSkg1Omt/9Q/9xfz08bz0o1QdkNHc=
Subject key identifier: 7D:19:A0:81:C4:0F:D5:1C:C0:A9:DE:92:E6:94:CC:AB:98:99:71:C3
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: BB
Signing time: Tue 03 Mar 2026 06:34:21 +0000
Manifest this update: Tue 03 Mar 2026 06:34:21 +0000
Manifest next update: Tue 10 Mar 2026 06:34:21 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: O5Z1E0PzqYvCVAuImObFTUAlckrmKh+fkL/3WEFDTXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Validity
Not Before: Mar 3 06:34:21 2026 GMT
Not After : Mar 10 06:34:21 2026 GMT
Subject: CN=69a680ed-b4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:1a:3f:44:d9:7a:f4:69:25:17:94:0a:7c:
be:1c:80:b9:9c:fe:13:04:57:b8:d3:3b:82:73:82:
7e:bc:17:01:fd:4a:9b:34:ec:cc:f8:74:c0:ba:18:
1a:61:ea:b8:b4:8a:05:9e:37:96:a8:3b:8b:ef:eb:
fd:0c:b4:84:94:14:10:9b:00:58:37:9a:d4:fb:6e:
90:e5:94:ae:66:bd:9a:e7:93:46:7a:cf:0e:00:bb:
4a:80:f4:aa:dd:2e:e1:7a:e0:b0:81:34:58:23:2d:
62:99:2e:97:cd:ce:33:ad:a8:cb:13:e0:fb:fd:7e:
5f:84:30:a6:cb:d3:b4:29:11:c2:cc:45:66:a3:74:
7f:e6:4a:12:b3:70:fc:ad:bb:3a:fd:80:5c:41:40:
17:4d:c2:7f:91:ce:be:f5:e2:13:2d:30:c5:f9:7a:
19:01:52:e8:7a:32:74:6d:06:64:73:dd:80:89:c9:
ef:1b:f3:89:be:1a:f4:24:4d:e2:66:a5:07:19:66:
47:e4:61:cd:a8:d0:5b:36:ae:e0:a7:42:3b:9c:cd:
33:7f:d8:e6:9b:92:bb:25:72:75:59:52:5c:46:d3:
f4:27:00:d7:d5:20:54:7a:37:92:df:d8:a4:ec:66:
0c:4e:99:1c:41:c5:de:f2:30:99:3c:40:61:48:c9:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:A0:81:C4:0F:D5:1C:C0:A9:DE:92:E6:94:CC:AB:98:99:71:C3
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cf:58:cf:c1:2b:99:4d:49:8b:82:24:ee:48:73:46:64:b2:
7a:d6:05:c7:34:3c:56:7c:c4:56:d2:2f:24:1e:d1:5f:9f:d9:
0a:e1:6b:b1:6b:ba:44:ae:a5:32:a9:6b:ad:26:95:e4:1d:3a:
70:c6:7a:0e:c4:1c:5b:43:bf:f1:c2:eb:41:0b:ae:d7:22:17:
47:18:f3:45:1b:8a:4b:76:28:c9:42:d1:96:98:fc:80:f0:1c:
80:36:ac:3a:24:e3:56:1a:fc:a9:48:60:9a:c6:81:4e:d7:10:
05:de:39:89:56:20:53:22:34:14:b6:b7:08:74:13:8d:7c:42:
35:f1:6a:bb:9e:23:22:fc:fc:bc:44:22:fd:02:04:35:90:fb:
6f:81:5b:51:a4:ce:8e:8c:8c:91:32:e0:27:bc:f8:44:ca:25:
21:01:94:76:f9:30:d8:d6:c9:40:84:ea:2c:33:bd:3b:c9:59:
16:a5:b7:21:0c:84:f5:83:37:71:0d:a3:8c:9d:0c:bd:5a:57:
b3:64:45:2b:70:28:97:e4:75:e5:33:e6:33:29:c4:77:bf:ac:
cf:c2:25:9f:b0:ae:e5:79:e7:74:ea:95:da:32:f3:47:69:53:
01:dc:28:5c:c6:ab:43:8f:e6:c5:4e:6e:ec:94:c9:e6:ad:b2:
37:21:ab:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU4RDcxMTAvBgNVBAUTKEJEQTNFOEE4MjMxQzc4N0Y2QjdGMThCQzE0NkI5NUZC
NUMwMzhFRDkwHhcNMjYwMzAzMDYzNDIxWhcNMjYwMzEwMDYzNDIxWjAYMRYwFAYD
VQQDEw02OWE2ODBlZC1iNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+saP0TZevRpJReUCny+HIC5nP4TBFe40zuCc4J+vBcB/UqbNOzM+HTAuhga
Yeq4tIoFnjeWqDuL7+v9DLSElBQQmwBYN5rU+26Q5ZSuZr2a55NGes8OALtKgPSq
3S7heuCwgTRYIy1imS6Xzc4zrajLE+D7/X5fhDCmy9O0KRHCzEVmo3R/5koSs3D8
rbs6/YBcQUAXTcJ/kc6+9eITLTDF+XoZAVLoejJ0bQZkc92AicnvG/OJvhr0JE3i
ZqUHGWZH5GHNqNBbNq7gp0I7nM0zf9jmm5K7JXJ1WVJcRtP0JwDX1SBUejeS39ik
7GYMTpkcQcXe8jCZPEBhSMkoPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0ZoIHE
D9UcwKnekuaUzKuYmXHDMB8GA1UdIwQYMBaAFL2j6KgjHHh/a38YvBRrlftcA47Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy80QjAxQzRBNkY5
M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VIOXJmeGk4Rkd1Vi0xd0Rq
dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RThENy80QjAxQzRBNkY5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VI
OXJmeGk4Rkd1Vi0xd0RqdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi89Yz8ErmU1Ji4Ik7khzRmSyetYFxzQ8VnzEVtIvJB7RX5/ZCuFrsWu6RK6l
MqlrrSaV5B06cMZ6DsQcW0O/8cLrQQuu1yIXRxjzRRuKS3YoyULRlpj8gPAcgDas
OiTjVhr8qUhgmsaBTtcQBd45iVYgUyI0FLa3CHQTjXxCNfFqu54jIvz8vEQi/QIE
NZD7b4FbUaTOjoyMkTLgJ7z4RMolIQGUdvkw2NbJQITqLDO9O8lZFqW3IQyE9YM3
cQ2jjJ0MvVpXs2RFK3Aol+R15TPmMynEd7+sz8Iln7Cu5XnndOqV2jLzR2lTAdwo
XMarQ4/mxU5u7JTJ5q2yNyGrkw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:19 2026 by rpki-client