
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier: occuD5gUY5Lw6CgpIndtCxw2xTdVAvvXV+CYlEdHnVo=
Subject key identifier: 40:FB:8C:39:47:39:46:A5:5F:AD:80:D7:4F:40:8C:5A:6E:5C:1F:66
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial: 2286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number: 2273
Signing time: Sun 20 Sep 2026 15:49:20 +0000
Manifest this update: Sun 20 Sep 2026 15:49:20 +0000
Manifest next update: Sun 27 Sep 2026 15:49:20 +0000
Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: JrffWIVf39oVryJEbaU2KwdVs4UIuVFBC6whobYZaQw=)
2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: HwypahBFkKbW/pB8Pd+gaE4/P/VRHrxmO2AZ+Ty59Ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8838 (0x2286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Validity
Not Before: Sep 20 15:49:20 2026 GMT
Not After : Sep 27 15:49:20 2026 GMT
Subject: CN=6ab00080-4aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:bf:19:73:5c:a4:9b:1b:42:91:48:2a:65:
c4:97:b7:dc:dd:bd:f2:1c:75:3c:84:3e:ef:84:e9:
3b:d5:71:d9:a7:3e:95:47:9d:28:7b:2b:06:ef:e1:
c3:da:b7:fc:19:31:79:2d:73:a9:3d:e2:23:d5:7b:
ee:49:ef:6f:d7:c8:2f:93:ef:8d:38:f3:69:5c:95:
7d:6c:b7:a0:1a:cb:20:97:0d:fa:32:55:0f:77:dd:
7e:3c:25:c4:f1:fb:f4:4b:2e:8a:b2:1b:e9:dd:aa:
8c:79:d7:bd:7a:e9:b9:bd:f5:ac:05:03:85:83:75:
b4:64:e2:e0:5f:7f:2f:24:ab:08:2c:b5:1d:f6:83:
38:fd:07:75:e8:d3:f7:ee:de:38:17:75:1f:39:06:
7d:b6:44:2f:c7:76:65:2f:2f:b3:34:f1:b6:0f:8c:
2e:9f:0d:21:51:a3:ed:3d:22:3c:ad:57:17:75:1d:
a2:db:8f:01:36:c4:5e:6f:1c:ff:72:8a:db:86:bf:
02:94:8f:d1:ad:b9:b6:24:69:f5:ac:4a:75:69:85:
37:7a:97:14:c8:7a:8f:ab:f1:e1:53:fd:ad:72:19:
58:45:72:ed:a8:6c:97:c9:a0:be:4e:2e:5f:57:86:
6b:0b:98:bc:49:ce:bb:f4:d5:c7:fd:00:ac:f8:21:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:8C:39:47:39:46:A5:5F:AD:80:D7:4F:40:8C:5A:6E:5C:1F:66
X509v3 Authority Key Identifier:
keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:7e:2e:97:ba:46:f0:07:ef:92:a6:aa:37:78:f4:2b:b8:f5:
cc:85:6f:be:7d:7c:07:98:b7:c0:6f:49:39:67:10:87:70:e2:
70:ef:8f:20:f6:d4:86:30:af:30:e6:89:d9:d1:ea:8c:3f:05:
a4:3a:58:a5:aa:7d:a0:6c:e0:f2:e1:d1:96:c5:42:3e:40:2d:
30:fe:7f:c4:7a:de:4e:65:f4:2e:d3:7d:fd:93:2f:2a:97:7f:
72:c5:3a:c2:1f:f6:90:fc:e1:f1:f7:2f:2e:b9:5b:ed:44:4b:
41:67:a8:12:54:40:3b:f4:3b:4f:1e:ca:3f:71:00:b1:69:c3:
b1:5c:ce:ad:6b:fc:6b:b1:be:14:94:27:05:4b:ff:66:5a:59:
f2:1a:1f:b0:56:21:75:4f:4c:f8:8f:1d:ba:dc:57:c9:e2:44:
2b:68:be:53:a8:ab:eb:8a:5b:b2:43:74:57:c5:07:cc:27:3a:
1b:a1:11:72:89:49:6c:a0:ee:46:15:c2:5b:50:7e:9f:16:c3:
bf:14:cf:f9:d3:a7:81:2d:26:b9:6b:a8:ae:21:29:ff:45:df:
59:c1:85:e3:f0:22:84:6d:e9:ee:02:30:c4:84:02:87:07:56:
5e:04:a5:c4:d6:35:ab:23:29:6d:8a:90:90:0d:e0:24:50:0b:
7b:42:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:55:22 2026 by rpki-client