
$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier: /IX+0X5xMCndGvSseYn6OTh9dmOwfhfLDn8YSwZ1HoU=
Subject key identifier: B1:43:DF:C4:9F:20:76:26:5A:39:0D:01:E7:DC:B6:4E:02:13:55:A5
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number: 01DE
Signing time: Fri 17 Apr 2026 03:24:47 +0000
Manifest this update: Fri 17 Apr 2026 03:24:46 +0000
Manifest next update: Fri 24 Apr 2026 03:24:46 +0000
Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: EAZ2B+R/BEaTjIHnSU/VbWxm92d8Y1Ijgf8eeDg+03A=)
2: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: nhgX20QyBAliVjR34gYeCpAPvjxaRsYtwg9FMkMe0f0=)
3: EE44E774314411EF956C0046C4F9AE02.roa (hash: mSB8uynASz5JULPqU2um7D00gtNkbXdaEHU3YnsuCGU=)
4: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: v276QOnwKRfPbFy/NDP7PYynjy4E6kAsd497Z2Qjh9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Apr 17 03:24:46 2026 GMT
Not After : Apr 24 03:24:46 2026 GMT
Subject: CN=69e1a7ff-6e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:df:d3:b3:d7:cb:8a:8c:d7:a1:c1:02:f8:
53:6b:c7:23:e3:fd:f6:31:f0:d9:3d:7d:f7:0c:79:
ef:d1:43:c0:9a:99:f1:e4:17:6e:24:64:6d:a8:7d:
91:31:79:5c:fc:24:17:f8:55:86:1b:3d:96:12:6b:
dd:65:f1:83:33:c1:f8:e2:2f:27:40:b8:a4:77:15:
b6:7a:f6:15:2d:49:d4:c4:b3:5b:69:b8:78:ef:f0:
d7:24:d4:ab:f3:35:35:29:b3:03:07:b6:1d:08:21:
ba:ee:88:7a:f1:08:f8:db:d7:e5:8a:fe:af:91:4b:
bf:91:79:c9:f0:27:60:90:5f:fc:b8:0e:7f:c6:4b:
1d:45:ba:ff:69:92:b6:c3:50:1c:51:73:05:d7:0f:
15:fc:52:d3:f9:ac:08:f6:96:79:0e:e3:e9:01:1e:
85:e4:81:b1:94:4d:77:dd:10:6b:76:6e:f1:0e:c8:
fe:60:dc:68:1b:d3:d0:ce:e1:06:97:46:be:61:8a:
10:04:ca:b2:85:29:e7:31:a3:ce:44:4e:41:d9:db:
b0:44:d0:2a:b3:67:c7:32:4b:1d:67:99:81:51:38:
aa:a6:4c:de:2d:59:9c:63:3d:82:0c:05:81:3d:5e:
47:e7:b2:37:aa:34:bb:46:96:0f:5b:8e:06:14:73:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:43:DF:C4:9F:20:76:26:5A:39:0D:01:E7:DC:B6:4E:02:13:55:A5
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:de:3b:e1:25:44:bd:a0:2e:8c:2a:68:7d:f4:ba:7c:3b:74:
d9:58:c9:e3:af:ed:ba:db:4c:b2:9f:db:d7:cd:c3:15:04:db:
49:e9:da:23:73:49:b5:8b:91:93:25:1d:95:61:e2:2e:6a:74:
66:5c:9b:51:0d:0e:fc:a7:d8:f6:b3:38:a8:21:8c:a4:76:ef:
15:91:53:6f:07:78:1b:15:c5:ef:ca:20:ac:5e:30:01:5a:78:
b5:ca:b7:92:8e:09:91:b0:be:ab:f7:e3:7b:56:d9:1b:c2:88:
0a:56:73:88:5d:3b:f7:6b:c9:34:48:2d:19:94:7f:81:24:cc:
2e:3c:51:52:75:4f:35:53:a5:f8:ad:6e:e3:11:bb:e6:bc:35:
ba:d2:6e:2c:af:77:bf:f8:5a:e6:bd:29:96:3c:5d:fe:8b:d1:
fc:2d:7c:5e:93:47:95:f9:cf:4f:ca:92:e3:10:0b:85:29:4b:
aa:44:3b:4a:a4:96:f7:65:9d:92:ba:b0:9e:df:07:7f:00:65:
b9:f2:fc:a6:e5:cd:40:57:c3:9b:e5:c6:3c:4d:d8:73:a8:b8:
16:2d:d7:ac:3b:4a:13:43:9a:f7:7d:fc:cb:68:a3:40:3e:3e:
10:77:59:fc:db:96:40:3d:bc:e5:c9:85:1d:c4:da:93:25:9e:
9c:df:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:15 2026 by rpki-client