
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json)
Hash identifier: 0wW8UrOg+wllqAXp7rm0rr1QsGldnJ0ci4KUWxyqdDM=
Subject key identifier: 03:70:BF:D0:2B:93:BD:AA:99:15:D3:49:DC:89:99:64:31:C7:AF:29
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
Manifest number: 0101
Signing time: Fri 17 Apr 2026 05:55:39 +0000
Manifest this update: Fri 17 Apr 2026 05:55:38 +0000
Manifest next update: Fri 24 Apr 2026 05:55:38 +0000
Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: iju+XqXmjY+/3yzHrlDGWChdPLS+JdE4FcvlzM9u4VE=)
2: 57680C9CCA9911F0A4E15D65C4F9AE02.roa (hash: EJnyDwuSIzHst7JusIvMU9zwalSsj+VmD0NvAr/I8zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Validity
Not Before: Apr 17 05:55:38 2026 GMT
Not After : Apr 24 05:55:38 2026 GMT
Subject: CN=69e1cb5a-09dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:b9:2d:75:65:39:d2:8c:3e:75:27:eb:e4:
eb:3a:85:54:97:c1:dc:69:ba:99:fd:b4:99:f7:fc:
ba:f7:32:3a:cc:d0:c3:29:b9:66:76:3f:43:f6:89:
20:4f:ae:62:16:2c:e8:aa:2d:36:89:d3:9c:27:b0:
ae:4e:6c:dc:ea:40:12:f8:77:10:1a:36:a2:21:26:
38:7b:17:1f:2e:e9:6b:5b:63:69:0e:17:16:14:4d:
d5:6e:ac:9d:f9:f0:70:4b:1a:cf:5a:c0:72:07:21:
a6:c8:8e:5f:48:7b:6f:bf:7c:71:9f:2b:76:01:4e:
ad:73:da:1d:7d:24:80:67:53:c7:d2:8d:49:43:55:
95:05:a1:fd:2b:75:b2:9d:88:2f:bd:58:df:b4:70:
88:7c:3e:d2:ed:4d:a8:7c:8e:e5:74:2b:d4:a9:b2:
ff:be:c5:db:77:4f:e6:b3:48:53:6f:3b:a8:65:6a:
9c:f1:6d:82:2b:87:63:8c:68:4e:0a:79:92:ed:45:
0e:d3:aa:b5:1e:63:6b:24:ef:99:c1:6a:44:ef:c0:
26:01:78:6b:74:d5:b0:ec:a5:1b:27:0b:43:e7:dd:
d9:b1:fe:0d:a5:e7:a8:00:56:63:ec:88:39:52:83:
06:96:8e:7c:1e:d1:14:28:37:04:5e:d1:33:c4:27:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:70:BF:D0:2B:93:BD:AA:99:15:D3:49:DC:89:99:64:31:C7:AF:29
X509v3 Authority Key Identifier:
keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:4f:a2:c2:84:b0:e0:0d:c1:08:c3:f8:d2:24:be:c1:b9:28:
df:85:4e:c3:52:67:29:ea:3f:3f:42:d6:ef:0e:7b:9a:6a:ae:
12:b3:77:7d:3c:91:b9:e0:52:35:0c:e1:2f:08:f3:da:2d:54:
cc:0a:a7:5a:a6:c6:63:67:16:e3:b4:70:9c:bb:53:6e:e2:82:
2f:3e:da:cd:91:e3:73:77:da:df:c8:7c:c0:65:99:63:7a:a0:
8b:ec:56:ff:2e:03:06:95:3a:f2:1d:21:7d:49:98:6c:aa:d1:
17:a9:26:e5:a3:76:61:e2:be:0e:37:0c:b3:70:8c:f6:56:b5:
91:a6:ab:cd:16:6a:6a:20:75:14:62:c4:29:f1:83:64:68:19:
c6:c6:ab:7b:42:5c:77:46:a8:02:8c:3d:82:07:ca:fb:68:3f:
ca:98:14:0b:33:30:cd:e3:d2:d9:93:7c:05:83:f8:4b:b1:28:
81:cf:a7:4c:af:82:ff:cb:8d:9f:f0:c4:14:46:5b:27:54:40:
7d:32:e3:73:68:67:b2:d8:1f:58:71:a6:ba:c6:13:c3:0c:96:
f0:02:d2:53:e9:1f:b6:9a:3c:6d:ed:ba:7d:2b:2e:77:b8:2f:
94:47:cf:c8:04:84:06:f3:82:6a:1c:9c:76:7f:ae:2e:ed:6a:
e0:a8:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:55 2026 by rpki-client