
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json)
Hash identifier: zlld6sEwz8RSUg1TSVF8bES0AZx3u4Lsx1vD6m/4ZVs=
Subject key identifier: BB:F1:3D:78:1F:5F:F7:E4:EF:3C:3C:66:4B:CB:22:EA:EC:E9:C7:B2
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
Manifest number: 01A3
Signing time: Sun 01 Mar 2026 05:01:18 +0000
Manifest this update: Sun 01 Mar 2026 05:01:18 +0000
Manifest next update: Sun 08 Mar 2026 05:01:18 +0000
Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: wGJN9G6JyeUUwLpsAYGDW/WA4i/oTcZdb6rZsPldLIU=)
2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: 5ufkJhadDjmSbn9KxeXaHvmYvUy6gVe8Ny2xHV7J7e8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Validity
Not Before: Mar 1 05:01:18 2026 GMT
Not After : Mar 8 05:01:18 2026 GMT
Subject: CN=69a3c81e-a3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:91:c4:e1:0b:b9:99:53:67:97:b7:cd:4f:
c8:21:fa:64:f7:14:ec:76:4b:46:42:cb:82:2f:39:
d8:54:a4:99:18:7f:be:32:2a:54:f6:31:74:84:53:
cc:3d:ee:06:fc:4b:3c:b7:25:09:5d:3b:bb:de:22:
9f:29:75:a7:af:a9:ba:d0:94:91:74:6c:fa:e2:fb:
5a:f1:f8:f9:83:f0:80:30:e1:b8:34:f0:63:ca:b0:
02:d3:b1:f9:5a:74:b2:d0:31:c6:1f:13:05:78:25:
9f:e8:d2:ed:2d:16:b4:40:2b:0e:a5:da:7f:8f:9d:
bd:41:ca:4f:57:46:91:b0:68:0c:1b:53:1a:bc:3f:
ff:79:6c:54:ea:ab:19:03:1c:b1:e5:54:df:34:f7:
73:79:d7:85:9d:2a:3a:9b:b7:81:81:e8:66:52:1e:
02:79:c2:73:76:3b:b6:2e:59:3e:47:76:58:23:ce:
9b:c8:6b:e4:5d:74:64:cb:94:96:4f:57:b3:d8:0b:
98:3d:ed:da:fd:cb:bb:0a:41:57:e6:64:04:a2:da:
f6:0b:42:ce:22:58:58:c1:a3:03:16:e3:7c:df:bf:
50:18:c8:33:ff:e5:b7:5e:69:37:2d:e0:62:10:94:
16:99:4d:54:c1:4f:fc:18:3c:d3:c2:c7:c6:81:c2:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F1:3D:78:1F:5F:F7:E4:EF:3C:3C:66:4B:CB:22:EA:EC:E9:C7:B2
X509v3 Authority Key Identifier:
keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:08:bd:be:e1:6b:d1:81:93:41:7d:de:1b:3c:a8:7e:8a:2f:
ae:95:3c:01:95:58:09:ba:fb:0b:7f:8f:1b:26:98:b1:e3:91:
d8:2b:49:aa:34:34:82:7f:e5:f4:d1:9d:52:4f:e6:20:b4:00:
3c:b7:da:d8:32:58:0e:62:82:a8:28:d3:09:53:0c:fa:e6:b0:
a6:89:aa:51:2c:9e:3b:99:8a:e4:58:43:7f:49:6c:b3:5e:87:
19:27:2f:1c:d5:66:11:79:b8:a0:08:6f:33:9a:f6:51:0c:a1:
79:1a:4c:b3:93:9e:f7:cc:e8:98:c0:bd:40:37:83:4e:1f:a0:
29:34:22:99:dc:cd:51:8d:37:3f:8d:2c:f5:30:d5:d7:88:60:
c6:79:f8:95:8f:19:4f:f0:bc:0c:e0:d2:1b:e0:40:5f:3e:6b:
90:20:99:c6:80:cb:fc:19:bf:9d:7b:34:83:74:ac:86:aa:6b:
d3:dd:a7:ff:c5:55:96:24:dc:72:0c:6b:45:ff:54:f5:d4:64:
a6:6b:cc:d4:05:31:db:bb:5d:5d:bd:53:52:cd:3d:20:3a:37:
73:1d:9b:fa:47:24:41:f8:67:cf:f1:29:1f:0a:d8:25:de:ed:
c4:99:bf:90:e1:c6:cd:39:4b:b8:7f:92:1b:85:5d:59:47:25:
01:b3:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:40 2026 by rpki-client