
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File: VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier: A937XW1NxqCUjIQde38VG3GvWMFE3SXD8zN1OPQrOD4=
Subject key identifier: FC:DC:A5:4D:D8:7F:94:BA:B9:90:CD:8F:73:E3:17:98:8C:62:36:A9
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer: /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number: 75
Signing time: Sun 01 Mar 2026 09:12:01 +0000
Manifest this update: Sun 01 Mar 2026 09:12:00 +0000
Manifest next update: Sun 08 Mar 2026 09:12:00 +0000
Files and hashes: 1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: TPDnOGq04u9h02XtTSl83h+Hbq8XTaNuczZn+x2/Lbs=)
2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: iENsMSoALP99bR1N5hhDPtffTTwsxcPuKsVO6aYiFUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Validity
Not Before: Mar 1 09:12:00 2026 GMT
Not After : Mar 8 09:12:00 2026 GMT
Subject: CN=69a402e0-7578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:37:9a:25:e2:9c:62:79:d6:33:1f:78:78:
3c:93:ef:ba:44:dc:f4:0e:f0:86:dd:db:1b:4f:95:
69:43:fd:49:51:03:b5:f4:95:4e:de:1a:27:01:05:
11:d0:4a:28:52:59:65:51:f9:df:f4:bb:1d:64:67:
c3:07:d6:04:e8:05:75:21:c2:e9:e2:f1:69:9c:c4:
2a:93:6f:b6:a8:be:3a:07:98:a4:5a:ad:fc:71:ea:
14:6b:a2:25:29:d2:ed:35:f2:5e:65:db:8a:d3:1a:
c9:f4:a5:cb:ca:0b:1a:49:c0:1e:66:d3:ed:8e:d1:
03:44:7d:80:42:36:e9:7b:e7:3a:b5:c9:1e:98:bd:
d6:b1:73:17:92:51:83:f5:b7:2f:56:0a:6f:81:53:
76:28:ae:1a:99:53:8c:94:b0:2d:e1:6b:9c:37:c9:
85:a0:21:30:43:0f:11:a9:9e:41:8f:81:f6:2b:8f:
c1:dc:07:af:2c:91:b9:92:ed:f7:b5:92:5f:81:18:
9f:db:f2:c5:24:73:17:d6:4c:0f:bb:8b:3e:81:db:
86:a3:c0:6b:2b:02:a6:f9:44:0d:b8:e6:d7:fc:8d:
a1:a7:c4:d9:c1:b1:bc:fc:bf:4e:9e:dd:e6:71:d0:
a1:0e:6c:f1:d1:01:36:4d:49:6f:ed:1b:85:ef:21:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:A5:4D:D8:7F:94:BA:B9:90:CD:8F:73:E3:17:98:8C:62:36:A9
X509v3 Authority Key Identifier:
keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:13:7a:32:c3:36:ec:39:e2:d0:fb:5e:0e:c7:ce:b9:9d:56:
7f:18:8e:8e:3a:13:5a:e3:e0:de:93:7b:dd:67:b4:26:d0:15:
92:16:6f:0a:a0:94:6b:a4:ae:36:32:64:8b:ff:7e:a2:2d:c2:
a9:28:a6:73:ce:5c:02:44:21:b1:b2:32:85:c6:f1:e6:2b:95:
fd:e8:c0:36:31:93:a9:6a:1a:a9:9e:01:02:71:36:50:2c:ca:
64:0b:1b:2d:1e:27:31:f0:53:12:16:31:6e:3b:f3:a0:fc:4e:
ae:a9:2c:54:b3:78:76:7b:7b:32:a5:aa:fd:ef:6d:c7:af:8e:
6a:37:39:fd:1a:83:0b:75:09:e0:be:d4:2d:4d:93:3f:77:51:
7d:df:38:15:d8:f3:03:be:0d:4a:d2:6d:e0:8b:28:29:72:1a:
89:34:12:15:19:bb:27:8b:cb:5a:ec:a3:e1:26:9e:8f:e9:51:
1a:9d:de:c1:55:ea:72:68:31:ce:99:89:84:42:42:4b:7e:40:
7e:71:89:a3:9a:66:15:65:18:73:d6:1e:41:88:30:ba:07:91:
19:a8:c0:44:14:10:94:d5:85:7b:dc:47:51:a4:f9:21:fe:fe:
37:a5:78:2a:da:e0:57:d8:60:f5:a4:c9:40:91:ab:ef:4d:a6:
32:bd:a1:24
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Q0U0QTExMC8GA1UEBRMoNTQxREQxNUUxNTRFNTA4RkIwMEZEQjI0NUM0RTc2RjJB
RDNEODgxRDAeFw0yNjAzMDEwOTEyMDBaFw0yNjAzMDgwOTEyMDBaMBgxFjAUBgNV
BAMTDTY5YTQwMmUwLTc1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF5TeaJeKcYnnWMx94eDyT77pE3PQO8Ibd2xtPlWlD/UlRA7X0lU7eGicBBRHQ
SihSWWVR+d/0ux1kZ8MH1gToBXUhwuni8WmcxCqTb7aovjoHmKRarfxx6hRroiUp
0u018l5l24rTGsn0pcvKCxpJwB5m0+2O0QNEfYBCNul75zq1yR6YvdaxcxeSUYP1
ty9WCm+BU3YorhqZU4yUsC3ha5w3yYWgITBDDxGpnkGPgfYrj8HcB68skbmS7fe1
kl+BGJ/b8sUkcxfWTA+7iz6B24ajwGsrAqb5RA245tf8jaGnxNnBsbz8v06e3eZx
0KEObPHRATZNSW/tG4XvIb+NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/NylTdh/
lLq5kM2Pc+MXmIxiNqkwHwYDVR0jBBgwFoAUVB3RXhVOUI+wD9skXE528q09iB0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDRTRBL0UxRUExOUY2Njcz
ODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUktd0Q5c2tYRTUyOHEwOWlC
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVkIzUlhoVk9VSS13RDlza1hFNTI4cTA5aUIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD
RTRBL0UxRUExOUY2NjczODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUkt
d0Q5c2tYRTUyOHEwOWlCMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPE3oywzbsOeLQ+14Ox865nVZ/GI6OOhNa4+Dek3vdZ7Qm0BWSFm8KoJRrpK42
MmSL/36iLcKpKKZzzlwCRCGxsjKFxvHmK5X96MA2MZOpahqpngECcTZQLMpkCxst
Hicx8FMSFjFuO/Og/E6uqSxUs3h2e3sypar9723Hr45qNzn9GoMLdQngvtQtTZM/
d1F93zgV2PMDvg1K0m3giygpchqJNBIVGbsni8ta7KPhJp6P6VEand7BVepyaDHO
mYmEQkJLfkB+cYmjmmYVZRhz1h5BiDC6B5EZqMBEFBCU1YV73EdRpPkh/v43pXgq
2uBX2GD1pMlAkavvTaYyvaEk
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:06 2026 by rpki-client