
$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json)
Hash identifier: SahvYvi4obb1uK/9idegyj5stV9USpncaJUIMB8FtbY=
Subject key identifier: 4A:32:80:87:7C:7B:B9:F3:F7:1D:B5:B4:D1:21:44:88:86:AE:56:DA
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
Manifest number: 03A3
Signing time: Sun 01 Mar 2026 01:35:48 +0000
Manifest this update: Sun 01 Mar 2026 01:35:48 +0000
Manifest next update: Sun 08 Mar 2026 01:35:48 +0000
Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: e0xj1zIu6NfeW3X7C2v/vu1fWS9DmTkED68i9Ei6y/c=)
2: A05195B4633011ED9122442CC4F9AE02.roa (hash: j7aoei+ek1gcLQq8wVfrfWk2y1zauvGzuHEFdrbSbVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Validity
Not Before: Mar 1 01:35:48 2026 GMT
Not After : Mar 8 01:35:48 2026 GMT
Subject: CN=69a397f4-c4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:b8:0c:74:16:a7:47:76:97:8d:68:84:25:
01:76:bd:33:d1:1f:a5:b9:e8:07:6e:a4:a9:6a:65:
0a:d1:58:b2:ff:5c:e3:eb:4a:08:b8:ac:9f:04:8c:
50:d8:8e:82:48:62:00:8a:73:52:06:53:2a:e0:7c:
17:d2:5f:00:7a:7f:57:27:af:b7:b4:07:a9:38:5e:
a0:0b:ce:46:f3:ad:44:a0:e6:df:e8:0b:d6:fc:84:
76:a0:cf:59:37:98:f1:71:3a:8f:b9:c0:08:3b:3a:
73:c8:88:1f:b7:0f:64:5d:23:06:05:5f:fb:11:6a:
4b:c5:e6:ec:5f:78:f4:e2:47:7d:5a:87:c3:8e:43:
c0:f2:4e:82:54:5b:71:b3:7f:ba:59:96:26:a2:62:
2e:ba:52:1b:ed:74:7e:4a:05:38:35:5d:e7:b7:1a:
49:61:0b:5c:f7:e8:80:6a:49:50:a5:68:e2:05:f5:
23:2d:3f:04:53:b1:e4:84:2a:fb:e1:52:1a:f7:f0:
e6:fa:8b:a7:06:58:41:48:a4:44:84:fb:b3:3a:4e:
5d:ae:1e:31:84:4c:df:a1:89:ce:1b:54:bf:87:9a:
e1:1b:9f:a0:a1:be:e1:f9:42:56:5b:f9:a0:cb:4b:
ce:ba:24:bc:b8:7a:2f:c4:82:ad:a5:01:b5:56:42:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:80:87:7C:7B:B9:F3:F7:1D:B5:B4:D1:21:44:88:86:AE:56:DA
X509v3 Authority Key Identifier:
keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c5:59:20:6c:a4:e4:af:e9:7c:d5:3e:27:de:76:8a:fc:6d:
1d:72:49:11:04:68:05:18:4e:51:a8:32:16:60:36:5b:4c:70:
0c:1b:86:fd:aa:a9:37:34:0d:19:d7:c0:80:e7:dc:e2:9d:0e:
71:57:54:63:b9:0b:b5:dd:34:a1:d2:10:cf:23:98:2b:91:b1:
17:31:ca:41:9a:44:1b:09:9e:6d:99:28:33:44:db:da:ea:ef:
66:28:52:e8:21:80:f0:3a:32:b7:76:ce:66:f8:85:05:42:2b:
03:7b:a4:11:42:1d:9d:a5:42:f5:62:04:b3:81:85:b3:df:39:
e9:9e:ce:b4:ca:0c:fa:40:1d:3d:ec:c3:e6:97:9d:66:ce:6b:
bf:03:ed:9d:61:63:86:f6:88:7c:73:d6:f4:2a:ff:84:2a:d0:
16:0d:15:31:8a:ee:9a:1e:5c:72:07:b6:d4:00:11:e0:e8:84:
aa:45:33:f4:79:2e:8f:14:05:21:28:eb:fd:bc:b2:ba:32:b8:
27:5b:b8:29:93:3b:79:79:32:e2:fe:d8:84:24:2b:83:ca:29:
8d:59:5a:41:9b:1f:6b:d5:7e:9a:cb:9d:41:ba:94:44:33:94:
80:a6:55:92:ff:b8:24:de:57:13:14:14:9b:c2:7e:df:cc:4b:
5d:a9:90:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1
NDNCMzFFNjIwHhcNMjYwMzAxMDEzNTQ4WhcNMjYwMzA4MDEzNTQ4WjAYMRYwFAYD
VQQDDA02OWEzOTdmNC1jNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprG4DHQWp0d2l41ohCUBdr0z0R+luegHbqSpamUK0Viy/1zj60oIuKyfBIxQ
2I6CSGIAinNSBlMq4HwX0l8Aen9XJ6+3tAepOF6gC85G861EoObf6AvW/IR2oM9Z
N5jxcTqPucAIOzpzyIgftw9kXSMGBV/7EWpLxebsX3j04kd9WofDjkPA8k6CVFtx
s3+6WZYmomIuulIb7XR+SgU4NV3ntxpJYQtc9+iAaklQpWjiBfUjLT8EU7HkhCr7
4VIa9/Dm+ounBlhBSKREhPuzOk5drh4xhEzfoYnOG1S/h5rhG5+gob7h+UJWW/mg
y0vOuiS8uHovxIKtpQG1VkK0iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoygId8
e7nz9x21tNEhRIiGrlbaMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx
MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP
OUhXVVh4bVppZVpVT3pIbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH8VZIGyk5K/pfNU+J952ivxtHXJJEQRoBRhOUagyFmA2W0xwDBuG/aqpNzQN
GdfAgOfc4p0OcVdUY7kLtd00odIQzyOYK5GxFzHKQZpEGwmebZkoM0Tb2urvZihS
6CGA8Doyt3bOZviFBUIrA3ukEUIdnaVC9WIEs4GFs9856Z7OtMoM+kAdPezD5ped
Zs5rvwPtnWFjhvaIfHPW9Cr/hCrQFg0VMYrumh5ccge21AAR4OiEqkUz9HkujxQF
ISjr/byyujK4J1u4KZM7eXky4v7YhCQrg8opjVlaQZsfa9V+msudQbqURDOUgKZV
kv+4JN5XExQUm8J+38xLXamQ0Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:15 2026 by rpki-client