
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier: F/ONtPRGXC/xu9Mwei41B+uHOVgz+MFXs70Q/u5cg/k=
Subject key identifier: EE:99:F9:BD:86:A5:48:33:E0:4A:D0:B3:95:10:0D:67:97:2F:3F:90
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial: 2A78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number: 2A61
Signing time: Thu 16 Apr 2026 15:33:20 +0000
Manifest this update: Thu 16 Apr 2026 15:33:20 +0000
Manifest next update: Thu 23 Apr 2026 15:33:20 +0000
Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: Rv+eRCMGMPP0GTbyQI+Pu0crRXzh8TOMtwdG5KEbb30=)
2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: mpjVMZqgsEDLte7km/wxxa0aijeYSHyV/D4q8GjzrZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10872 (0x2a78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Validity
Not Before: Apr 16 15:33:20 2026 GMT
Not After : Apr 23 15:33:20 2026 GMT
Subject: CN=69e10140-e701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:71:8f:f2:3b:0e:23:5a:b0:be:01:30:46:
30:ee:64:5b:04:5d:d2:ad:c5:3a:a9:e7:bb:e7:3d:
bc:aa:0b:f6:01:e1:cc:31:e8:19:e9:c9:73:cf:90:
f4:70:1c:e0:db:01:26:a3:e0:62:3c:74:3e:0a:c7:
2f:79:77:99:e6:2e:1d:3e:fb:da:a0:02:79:93:8f:
02:bf:ba:f2:92:a8:dc:10:52:cf:95:40:b3:e4:b5:
b9:7f:0e:e1:04:5d:79:9c:1c:e4:42:ac:de:30:b5:
e6:69:30:a1:4f:05:4f:3d:37:65:d4:11:e5:80:8f:
e4:74:1e:5c:cf:a4:8f:f7:94:0b:8d:c9:ac:63:af:
fe:bb:8c:92:f7:07:d7:95:c1:c9:bc:12:26:51:11:
40:e6:36:73:7b:4c:f6:f9:2a:54:b1:0f:5b:e8:95:
c0:e9:15:90:30:58:5a:df:0f:7f:47:76:ef:f4:88:
2b:89:86:cf:3c:0a:08:4f:c2:af:6b:90:af:cc:7e:
60:21:49:d3:45:48:5f:06:4a:9f:5a:6e:6c:0a:e6:
6e:4b:74:55:37:5c:e3:8c:40:07:7c:1d:62:48:20:
70:96:9e:12:83:1c:7d:a7:e9:f4:cf:f5:a1:a1:b5:
ae:45:7d:7a:d0:3d:be:56:2e:a1:51:c7:c0:28:d6:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:99:F9:BD:86:A5:48:33:E0:4A:D0:B3:95:10:0D:67:97:2F:3F:90
X509v3 Authority Key Identifier:
keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:60:54:a2:d3:ac:24:43:af:9e:04:6d:c5:ea:41:86:3e:
57:08:6c:8a:fb:ed:c5:ed:47:ee:b6:43:23:1c:5e:66:5d:a9:
cd:67:41:5a:1c:a3:90:37:f3:26:fa:ac:27:55:a7:b0:84:89:
8f:f0:55:95:99:46:df:87:8f:a7:b6:bd:8e:b6:c2:f3:13:d2:
8f:04:9c:af:bf:d9:fc:9d:91:1b:85:de:40:2a:28:78:ad:59:
b8:6c:0b:6b:ec:ed:d0:51:b9:cf:b8:21:71:47:4f:0b:b0:97:
de:e2:7a:f7:85:e0:82:41:8c:5f:92:1f:38:df:90:b2:19:05:
34:b9:60:67:ee:19:ce:68:b2:78:a4:4e:7d:aa:94:af:e9:d7:
f4:39:de:9b:11:ae:e2:75:3f:00:6d:05:7b:aa:a1:26:30:48:
d7:7a:48:57:f5:50:12:a6:1a:70:b8:75:42:21:53:ef:43:6f:
a2:96:63:e0:2e:2f:e1:35:a1:de:b4:db:dd:a1:be:97:63:57:
9b:db:36:32:38:c4:3d:d0:83:c3:a0:57:78:79:de:2b:a8:a1:
2e:65:1b:14:ed:55:27:99:67:df:e5:de:e2:7f:14:0d:1b:d2:
91:82:78:93:10:e0:46:c1:2e:10:31:e4:b7:9d:ca:6c:02:0c:
ff:15:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:15:54 2026 by rpki-client