
$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier: iuluBJP97AYw9uRJoXNmyTxR096HSQMin3FCc7MCgV8=
Subject key identifier: 6E:BA:ED:AC:93:34:AD:AA:70:85:3B:E0:E5:08:0F:D1:C1:15:10:8C
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number: 011F
Signing time: Sun 01 Mar 2026 06:49:25 +0000
Manifest this update: Sun 01 Mar 2026 06:49:24 +0000
Manifest next update: Sun 08 Mar 2026 06:49:24 +0000
Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: 6y+J4aK5NDCRF1o5vZYuHCGzIh8MNUTmI0eZVVYpCNY=)
2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 1Bz9COXjLNAhKPWsXADzGRMHjeGcdVBDGhNMe07ozjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Validity
Not Before: Mar 1 06:49:24 2026 GMT
Not After : Mar 8 06:49:24 2026 GMT
Subject: CN=69a3e175-0d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:70:bf:af:db:47:c7:8e:bf:a1:d5:f9:4a:
09:af:99:17:25:75:04:95:1c:44:07:b6:24:49:ac:
0b:83:a8:d5:1d:b2:3c:37:0e:30:aa:5b:2a:e7:9d:
b6:27:28:43:7b:04:81:de:60:9b:0a:17:29:54:ce:
f0:a2:8c:fc:fb:01:21:42:af:6a:10:87:58:c7:0c:
8b:ac:bf:2c:bd:ad:02:7d:4d:e2:c1:60:b7:f0:a3:
08:3e:4e:8f:a2:56:a1:a5:dc:d0:92:4f:b1:ab:bc:
92:d7:32:2c:14:26:f6:89:f4:0e:ae:7e:b5:be:6c:
be:8b:92:93:81:81:78:ac:53:22:01:ea:f2:cc:b9:
c6:01:66:53:0e:5e:ba:ae:75:a6:01:8c:e3:03:8b:
6b:7b:0a:8f:03:89:6d:d7:30:e3:c2:22:7e:b7:5d:
3c:ee:6a:0d:01:61:38:6f:96:32:58:0e:4c:07:9f:
d2:7a:09:af:76:78:82:32:95:2e:2b:29:79:15:ff:
59:4d:5a:d4:e5:92:32:55:0f:80:ca:8a:83:07:79:
3c:3f:1a:3f:30:2a:16:25:10:7f:39:7b:65:fe:7e:
d6:8a:71:43:65:af:0d:46:e7:cf:29:1a:69:5e:6c:
ae:88:43:bb:51:e5:ac:85:4d:cf:d4:16:e2:09:b3:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:ED:AC:93:34:AD:AA:70:85:3B:E0:E5:08:0F:D1:C1:15:10:8C
X509v3 Authority Key Identifier:
keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5b:e7:fe:0b:87:d1:51:c2:e0:46:f5:4f:03:b1:02:a9:24:
98:d6:e0:3e:32:83:aa:0e:19:b7:1f:55:c4:83:94:4f:48:97:
b0:97:e7:28:78:ca:3f:6d:cb:34:85:dd:d1:eb:0a:34:4b:82:
9a:98:6b:2f:86:a4:15:e7:3e:7b:9d:91:95:bf:04:4c:56:c5:
64:de:19:83:08:38:7c:7a:1a:bf:3b:b7:8c:ce:96:3b:da:f2:
96:1f:1c:1d:92:23:da:87:ac:f4:48:02:27:50:06:36:bf:a6:
d0:d3:79:d6:fe:55:f7:ac:e3:46:2d:ea:87:82:ce:80:ca:7f:
2c:ec:1d:e3:d4:31:4b:4a:df:58:0d:ab:9b:02:b9:74:ae:b3:
14:e6:f4:66:2a:3a:aa:b7:a8:3d:d5:b1:a2:ba:08:c4:50:df:
b2:c9:38:aa:02:cc:71:a0:6f:5c:06:36:26:ec:8d:e8:1b:26:
17:13:89:ab:2c:16:ee:86:cf:9a:f3:58:f1:4c:e0:ba:c0:d2:
cd:8c:ad:35:11:c4:60:73:8e:05:2a:15:c7:09:b5:9c:3d:cd:
e9:4e:5c:77:8f:00:98:12:cc:02:d1:f8:1f:de:ed:1d:eb:1e:
64:ab:d7:56:dd:6f:31:95:a0:8b:a7:1f:93:a3:8b:d7:55:26:
00:ae:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:41 2026 by rpki-client