
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier: SXFqNnwMpO1u/JTkuH8V9a5wDq4n1nrMERlRWFtXivo=
Subject key identifier: 54:90:8B:44:98:9C:85:FF:DF:AF:18:19:2C:B3:14:11:42:43:70:D4
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number: 021F
Signing time: Fri 17 Apr 2026 02:31:22 +0000
Manifest this update: Fri 17 Apr 2026 02:31:21 +0000
Manifest next update: Fri 24 Apr 2026 02:31:21 +0000
Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: BMgm0JF2f9DmWE6d/gsOH6Rb9qRC3fn3mAC5iIfuVFQ=)
2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: WgI7CDc59isqqRIyCU2539zLb8jArZwcztjdz4JpKEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Validity
Not Before: Apr 17 02:31:21 2026 GMT
Not After : Apr 24 02:31:21 2026 GMT
Subject: CN=69e19b7a-b051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:db:41:85:83:95:61:05:27:d9:98:74:21:
77:c5:dd:cd:9b:1c:12:ec:21:95:44:c4:d8:4d:a8:
38:4c:47:99:7d:1e:cd:8c:de:a0:87:6e:94:7a:78:
46:5b:6c:fa:8e:ea:d3:86:a7:d5:fc:97:e3:53:d7:
de:1f:1a:ff:39:cc:38:58:ee:9a:0f:17:49:47:8e:
24:8c:7e:90:18:b0:3d:54:c5:5a:fe:67:cf:a6:cd:
59:f5:d5:45:be:f2:99:79:49:d1:05:4f:6e:27:26:
31:12:8d:ee:55:95:8d:12:0a:51:30:16:12:d3:58:
74:2e:6b:42:b9:a8:42:6b:b9:27:8e:9f:ac:bc:df:
2f:88:20:df:16:57:ad:a3:47:bf:12:51:c2:9c:37:
f6:15:5e:53:70:fb:57:63:4e:36:2c:0b:51:b9:f2:
bf:35:62:19:b5:44:69:a1:31:2a:a5:81:c3:55:ad:
04:ad:f5:3d:d6:1c:3c:0c:b8:f0:07:e3:f9:7f:4e:
e6:00:64:58:a4:47:a5:ca:eb:8f:52:e4:6c:9e:80:
41:73:90:82:56:67:d2:e8:91:3d:64:6b:e0:ca:94:
ba:03:1e:ea:a0:9f:5f:de:ef:4e:1f:f0:ee:21:82:
0c:4c:7e:89:a2:ee:ed:e5:8d:44:45:12:b7:ce:2b:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:8B:44:98:9C:85:FF:DF:AF:18:19:2C:B3:14:11:42:43:70:D4
X509v3 Authority Key Identifier:
keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:41:82:ca:e5:bd:83:f7:ef:0f:1f:36:27:d7:d3:26:0a:
2c:f4:a7:33:80:d6:b8:39:f0:97:6b:a6:47:06:ad:54:b6:66:
86:66:6c:26:89:c2:5f:90:f1:16:3c:70:d8:03:50:c2:80:6a:
90:76:a1:a7:58:d0:82:1e:d9:ab:40:0b:0d:ae:59:e1:a9:09:
47:a4:e9:ca:63:bb:06:ba:43:fd:a3:1e:5f:fa:2c:29:00:92:
bd:e3:f4:3a:26:59:17:31:80:02:3b:03:3a:db:c1:1f:f3:f9:
52:20:6a:18:30:77:a7:73:1f:6e:4f:77:66:a3:c4:e7:cc:f0:
b8:44:24:48:48:11:b8:e2:7c:ee:cb:52:a9:ef:d1:e8:ff:48:
47:ea:a1:fe:4d:5c:64:89:78:1a:f1:b1:3e:dd:3f:23:e1:4c:
f4:cf:d5:ab:3b:f4:c7:1c:1f:b2:e1:7c:0c:fc:67:7c:81:52:
37:a7:2c:30:9f:66:e0:0a:a7:de:ab:f6:fc:93:d4:9b:63:b8:
ab:b3:1f:d0:7f:b4:73:60:e6:f5:55:c6:3e:4e:72:b2:f1:d5:
de:74:a4:91:24:c4:69:8a:09:e7:19:36:e8:2f:8e:a1:ec:eb:
5a:d0:1e:8f:22:13:f6:95:28:92:3b:a5:60:aa:e8:b7:15:d2:
90:e0:6a:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2
MkRCNkQ4REYwHhcNMjYwNDE3MDIzMTIxWhcNMjYwNDI0MDIzMTIxWjAYMRYwFAYD
VQQDEw02OWUxOWI3YS1iMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnRPbQYWDlWEFJ9mYdCF3xd3NmxwS7CGVRMTYTag4TEeZfR7NjN6gh26UenhG
W2z6jurThqfV/JfjU9feHxr/Ocw4WO6aDxdJR44kjH6QGLA9VMVa/mfPps1Z9dVF
vvKZeUnRBU9uJyYxEo3uVZWNEgpRMBYS01h0LmtCuahCa7knjp+svN8viCDfFlet
o0e/ElHCnDf2FV5TcPtXY042LAtRufK/NWIZtURpoTEqpYHDVa0ErfU91hw8DLjw
B+P5f07mAGRYpEelyuuPUuRsnoBBc5CCVmfS6JE9ZGvgypS6Ax7qoJ9f3u9OH/Du
IYIMTH6Jou7t5Y1ERRK3ziuK4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSQi0SY
nIX/368YGSyzFBFCQ3DUMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB
MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm
bnYyMUpnN2h1emhpMjIyTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZltBgsrlvYP37w8fNifX0yYKLPSnM4DWuDnwl2umRwatVLZmhmZsJonCX5Dx
Fjxw2ANQwoBqkHahp1jQgh7Zq0ALDa5Z4akJR6TpymO7BrpD/aMeX/osKQCSveP0
OiZZFzGAAjsDOtvBH/P5UiBqGDB3p3Mfbk93ZqPE58zwuEQkSEgRuOJ87stSqe/R
6P9IR+qh/k1cZIl4GvGxPt0/I+FM9M/Vqzv0xxwfsuF8DPxnfIFSN6csMJ9m4Aqn
3qv2/JPUm2O4q7Mf0H+0c2Dm9VXGPk5ysvHV3nSkkSTEaYoJ5xk26C+OoezrWtAe
jyIT9pUokjulYKrotxXSkOBqgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:36 2026 by rpki-client