
$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier: JzAMTKGPIsnQ/jrAkVHWNEYsXwMWDc0S+dhXO99d1mc=
Subject key identifier: AD:D8:90:7A:E7:7B:D1:89:E8:A6:26:1B:08:C9:ED:13:82:C3:61:5E
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number: 0126
Signing time: Fri 17 Apr 2026 05:24:57 +0000
Manifest this update: Fri 17 Apr 2026 05:24:56 +0000
Manifest next update: Fri 24 Apr 2026 05:24:56 +0000
Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: +aIFyz28UeU/H7iA3tvkdUCMYCh5UvyzinuuxGtocOQ=)
2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Validity
Not Before: Apr 17 05:24:56 2026 GMT
Not After : Apr 24 05:24:56 2026 GMT
Subject: CN=69e1c429-a2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:46:20:d9:80:19:93:c4:98:4c:b3:b2:8e:
92:9b:b4:53:0c:c4:1c:ed:43:f9:b7:f0:67:64:49:
7b:7f:9b:11:76:31:7a:11:2d:c6:22:0c:3e:77:db:
33:b9:c4:09:b8:03:95:28:9e:d9:65:aa:26:97:90:
ab:8c:bb:a6:ef:c4:a6:7a:77:30:06:ae:e4:66:b6:
94:b2:f6:36:7a:79:2e:0d:44:34:9f:59:5d:1a:ec:
58:1d:b6:61:27:40:45:90:8a:a7:4a:3a:10:61:1e:
98:8d:fd:a7:dc:a7:e8:ee:d1:cd:44:bd:5a:ba:b7:
ff:2b:4f:da:b2:78:34:4c:ee:38:fb:98:27:aa:ca:
8d:bc:e4:81:0e:12:f2:9d:8f:87:1f:e9:87:de:5f:
82:9f:2c:cc:38:41:b4:a1:b0:a0:af:34:65:a4:a2:
be:ba:f6:f1:e3:83:32:52:24:e0:c2:10:e0:d8:b3:
aa:a9:83:c3:86:43:8a:90:e0:0a:c3:c7:da:81:8e:
cf:6d:d8:54:d7:fd:96:fe:ae:4d:14:16:63:d9:b5:
31:64:47:a3:70:63:20:21:48:74:aa:0c:b6:ff:02:
50:90:98:ab:d6:71:80:b1:92:c6:65:12:ac:82:08:
2e:90:6b:00:ce:d7:8c:3d:a6:7c:ee:f3:b9:ad:98:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D8:90:7A:E7:7B:D1:89:E8:A6:26:1B:08:C9:ED:13:82:C3:61:5E
X509v3 Authority Key Identifier:
keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:56:ca:85:5f:f3:06:2a:1c:96:9b:f7:5c:1b:2f:c5:be:cd:
c2:6a:64:b0:c2:f1:f7:bb:9b:f5:91:db:88:94:df:6c:69:ac:
4a:c1:e4:13:ff:64:84:d1:f9:89:ff:07:14:ca:b1:a5:43:2f:
86:80:5d:92:cd:c2:a3:2d:5d:78:8d:f9:92:5a:d8:ab:37:06:
b6:c8:10:28:43:09:15:d4:50:b5:15:47:b5:13:9b:20:b6:78:
0f:60:e6:89:3c:49:8a:0b:56:1f:d2:db:61:bb:02:dd:61:19:
c7:64:7c:ea:08:d6:f3:98:3e:65:c9:84:b8:a8:23:23:4a:ca:
e0:c0:5e:00:c6:fe:21:65:b9:cb:aa:34:d7:40:73:26:ed:29:
fb:d1:8d:99:dd:bc:11:69:7e:dc:70:df:0d:84:ba:44:fe:ca:
4b:16:76:60:00:03:b5:da:8f:7d:6a:de:86:0d:78:6e:44:00:
f4:fb:40:a9:56:0c:4a:e4:d4:36:e4:a6:89:de:6e:d6:af:2f:
cc:52:a2:7a:e9:b5:53:0b:88:9a:7c:7d:fd:e1:12:af:96:d0:
46:ab:43:21:db:ef:6c:5a:9a:26:92:6d:48:0d:a7:56:24:cd:
01:6e:14:38:fc:99:00:01:28:a8:fc:ff:82:5f:25:55:69:fb:
a8:07:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:37 2026 by rpki-client