
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json)
Hash identifier: v+VPci2ygEfgW+RA94WSYC1ysawl4DHucn0AMrXEsf0=
Subject key identifier: 3D:37:E1:11:96:CF:47:D2:58:38:F7:60:A3:14:4F:37:BB:5E:25:CC
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial: 041F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
Manifest number: 0413
Signing time: Fri 25 Sep 2026 00:13:08 +0000
Manifest this update: Fri 25 Sep 2026 00:13:08 +0000
Manifest next update: Fri 02 Oct 2026 00:13:08 +0000
Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: N3MqjND/nlDWD0s3dlKYOnur0smXTxUhxEH+F0peVac=)
2: A05195B4633011ED9122442CC4F9AE02.roa (hash: 3Rr4xhV/IE5GzJYBq3nqGCxveOMf64SI35CYsnefXng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Validity
Not Before: Sep 25 00:13:08 2026 GMT
Not After : Oct 2 00:13:08 2026 GMT
Subject: CN=6ab5bc94-ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:b7:42:f4:2e:64:f4:89:bd:3e:56:f1:60:
87:d0:5c:66:2f:c1:83:91:47:30:cb:3d:dd:1c:37:
87:2f:2a:3a:fb:79:e0:ae:10:17:fc:90:e9:cc:67:
9c:a3:8e:cb:86:c0:bb:7f:c5:f9:d6:3e:29:82:b8:
84:e9:93:f6:25:f1:80:fc:d5:2e:b5:92:1c:1f:55:
17:78:6c:df:19:d3:6c:bd:e7:43:05:74:1b:04:9c:
9d:e0:97:d8:b4:af:43:06:97:82:46:3f:1e:36:72:
94:df:1c:d6:20:da:1e:2e:81:f2:39:7a:a6:7b:2d:
f1:57:19:e8:c7:79:7f:9d:17:f5:c8:0e:76:de:b1:
5d:c0:ec:a1:e9:c9:55:c1:fb:68:32:f1:5c:70:62:
cf:7e:fa:1c:61:32:26:af:c8:ab:ee:cb:c9:a5:a6:
2a:a4:d2:ed:f6:ac:4f:2d:29:6a:1b:e9:63:16:91:
ec:82:fa:91:be:0b:e7:66:a2:00:cf:34:e8:6f:3c:
67:4a:a0:44:2a:3e:ae:ff:d8:19:68:5f:0b:a6:0e:
f7:67:f4:86:64:e9:a2:8b:36:b6:84:d1:df:d9:14:
f5:1e:f4:29:80:bf:cb:7c:2c:8f:40:64:3f:46:98:
17:7b:72:a6:32:b4:de:05:2a:b8:1b:a0:4a:9f:46:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:E1:11:96:CF:47:D2:58:38:F7:60:A3:14:4F:37:BB:5E:25:CC
X509v3 Authority Key Identifier:
keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:54:b9:88:dc:44:0c:a3:2f:18:06:12:f7:d0:06:e1:74:1a:
c9:62:26:d4:79:57:f8:1c:60:4d:42:86:07:14:1d:8f:13:6a:
59:75:c8:eb:d0:c7:20:ca:41:38:d9:19:b2:ad:2f:04:fb:d2:
36:2c:78:65:bf:ba:f1:6e:b4:cc:1c:6f:cb:77:36:e4:ce:db:
fa:d4:a3:7a:9a:07:45:34:c2:fe:1c:91:64:91:cd:df:b9:2a:
7f:dc:fe:d0:57:23:92:53:33:d9:1c:59:84:5a:f0:31:d7:99:
15:5c:65:f7:51:97:53:2f:6f:a4:67:f8:dd:11:5d:41:a6:13:
70:39:a8:81:51:70:3c:88:dd:39:f6:57:81:e5:66:b8:25:56:
e6:11:c8:c2:fd:4f:d0:85:54:8b:f7:2d:ad:16:5b:be:ec:5c:
de:58:aa:ae:c8:f1:cd:60:9f:e7:38:5d:fa:a6:33:db:43:2b:
ca:a6:cf:9f:c2:e3:13:be:84:66:6b:25:c3:b6:ab:57:cb:2a:
76:20:67:00:6d:91:1c:24:b3:27:cf:cb:ad:b1:78:d0:fb:0a:
cf:28:4c:32:9b:ec:51:28:39:b9:da:69:0d:d5:77:fa:35:71:
2e:ce:1a:af:16:2f:2f:16:65:aa:45:72:95:0e:9f:a0:db:cf:
b9:d7:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:18:33 2026 by rpki-client