
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json)
Hash identifier: DonhzJ+whmqwLM9b2apLcUZ5AQdJw816GfmNxtLzwP0=
Subject key identifier: C5:A3:A7:AE:B3:A8:14:B3:56:34:3A:F5:28:C6:7D:AD:B5:FC:09:51
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
Manifest number: 01BD
Signing time: Fri 17 Apr 2026 03:39:56 +0000
Manifest this update: Fri 17 Apr 2026 03:39:55 +0000
Manifest next update: Fri 24 Apr 2026 03:39:55 +0000
Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: 6YLCN69B7ajv+RSvsFDxDn4PmCFJ3p5h5zvH2NwVYAA=)
2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: N6u8lktiSuz53pP54cFitasaAX+N1ZG30viqDycFfZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Validity
Not Before: Apr 17 03:39:55 2026 GMT
Not After : Apr 24 03:39:55 2026 GMT
Subject: CN=69e1ab8b-a524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:76:81:df:69:79:15:bb:be:b2:1f:3e:36:
64:14:45:ef:ba:62:7e:e1:37:d9:cc:2a:3f:1f:26:
02:2e:ec:7f:dc:2e:b9:a8:2d:21:2d:3b:63:13:d1:
4c:90:d2:68:1e:94:4d:ff:d9:97:94:92:f8:c7:d8:
be:d7:c2:25:16:01:1d:dd:92:d4:f0:ed:5b:84:68:
dd:51:4c:a6:a0:1c:7f:c9:fb:3f:17:29:a6:9f:1a:
18:f2:32:e5:36:ba:5b:2e:d0:d9:f2:d1:f8:c2:95:
f8:ff:1c:37:de:a4:16:c6:95:4f:d6:ca:d6:6c:84:
17:ca:81:a2:5a:b4:eb:68:e0:dd:c2:f9:eb:4c:92:
32:94:26:25:11:a0:9d:4b:ee:c2:ac:c8:d6:b1:c1:
80:cd:83:ae:db:48:0d:43:18:4c:66:63:db:07:bf:
1f:32:47:6a:04:1c:b1:a8:14:e9:9b:a7:bc:1e:42:
c6:b7:7b:03:bb:89:74:84:f9:35:6b:9f:7c:08:11:
06:41:30:28:79:f6:d6:7c:0f:33:b1:c9:3d:ac:d6:
ab:8d:86:a7:06:02:3d:a2:97:a3:f0:cc:d0:54:ab:
84:b2:8e:a8:1a:7a:c5:b4:b2:0e:32:1e:f4:0d:6a:
0b:2a:87:c7:33:f3:53:e2:5a:e8:2b:b3:c6:f7:06:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:A7:AE:B3:A8:14:B3:56:34:3A:F5:28:C6:7D:AD:B5:FC:09:51
X509v3 Authority Key Identifier:
keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:61:5a:bf:fb:c1:62:de:f1:ac:4c:d5:61:ff:98:0c:84:b7:
d3:a4:13:55:27:70:bd:52:5c:42:95:b6:13:29:1f:ba:69:53:
1d:59:64:fc:74:0b:4f:fc:a8:0d:43:64:ee:30:e3:6b:d5:49:
f5:ac:ed:c8:5d:09:7c:39:bb:79:aa:25:c2:48:fc:e2:3d:dd:
5e:b7:6a:27:0c:70:bf:49:e9:94:39:ef:29:62:fb:9c:89:47:
0f:3a:3a:50:32:ac:5d:64:50:9f:bc:b9:02:08:97:5e:69:1e:
46:34:53:2b:9c:58:76:29:67:6c:34:ae:45:8b:4b:6f:3b:d3:
a7:09:bf:ce:9f:07:87:00:f1:4f:e8:48:b7:0c:90:db:32:1a:
21:7b:36:49:e5:58:0c:1a:db:a4:9f:19:35:8f:be:4a:41:17:
78:dd:4b:99:5b:83:09:33:d6:1e:b3:ed:22:7e:d4:e7:7c:e0:
01:78:85:18:d6:b3:66:a1:b8:0e:f3:6b:01:e8:f5:9e:b5:53:
ed:0d:16:f1:7f:c4:d1:73:d8:8f:6e:4e:a9:1e:50:0c:8c:5e:
f3:0a:b6:8f:5c:01:e2:79:87:f8:5c:16:2e:4f:43:ec:4d:a2:
b3:d8:8b:de:70:63:b3:c1:48:d5:61:58:03:3c:30:00:07:98:
99:71:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:33 2026 by rpki-client