
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
File: Vp-1bt2xandk-zENNy4XiFSCg5k.mft (raw, json)
Hash identifier: 9i/XF2fiR0U7QZf21bHJbGOCLGn4MwhjdurBvmHiUsk=
Subject key identifier: 37:32:CB:83:03:8F:EE:C8:6E:A3:30:BF:18:DE:2D:FD:CE:BF:43:5F
Authority key identifier: 56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99
Certificate issuer: /CN=A91878B3/serialNumber=569FB56EDDB16A7764FB310D372E178854828399
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
Manifest number: 2D
Signing time: Sun 01 Mar 2026 10:09:00 +0000
Manifest this update: Sun 01 Mar 2026 10:08:59 +0000
Manifest next update: Sun 08 Mar 2026 10:08:59 +0000
Files and hashes: 1: Vp-1bt2xandk-zENNy4XiFSCg5k.crl (hash: REXdE4GQ/bX5LvNcVTxrLBMQrkRoFYsQDL4XWl6R528=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl
rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B3, serialNumber=569FB56EDDB16A7764FB310D372E178854828399
Validity
Not Before: Mar 1 10:08:59 2026 GMT
Not After : Mar 8 10:08:59 2026 GMT
Subject: CN=69a4103c-7045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:56:16:e5:aa:7a:70:f1:a2:8d:17:fb:dc:
cb:08:33:11:01:81:7c:28:be:a2:18:6b:a8:ea:b4:
9c:34:00:fc:0d:d1:39:35:f8:06:08:76:98:64:72:
5d:87:97:21:77:84:16:4e:ab:08:3e:85:6a:e7:92:
69:27:9b:d7:d5:b2:80:79:32:c5:25:95:87:e3:f6:
82:1f:ba:8c:17:35:e9:9b:f5:39:77:13:ea:89:72:
95:dd:20:12:03:df:54:64:38:97:2f:99:6d:aa:e3:
df:7a:72:7a:dc:5c:f2:4d:5e:26:9c:e0:b9:cc:58:
1b:40:9b:71:f9:48:57:37:d7:a5:b7:6f:87:b9:ca:
de:a5:f7:79:9f:d2:94:72:81:31:43:f7:9f:59:30:
3e:67:de:92:bf:5c:ce:0c:ec:90:64:70:6e:0a:1a:
d3:ae:54:36:cc:ce:85:52:76:4d:57:06:c9:61:b2:
88:1c:aa:0e:07:68:e4:85:de:38:0e:46:a2:da:e0:
00:27:c0:f6:b9:89:86:50:07:14:b5:e8:64:a7:47:
08:da:c1:21:77:2f:e4:c6:0e:99:30:fe:90:61:28:
55:79:34:86:f5:f3:1a:05:91:68:bf:3b:18:fd:77:
97:19:f9:0c:d6:11:07:de:a2:f8:41:eb:fa:17:e8:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:32:CB:83:03:8F:EE:C8:6E:A3:30:BF:18:DE:2D:FD:CE:BF:43:5F
X509v3 Authority Key Identifier:
keyid:56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:42:b7:ae:eb:37:aa:6c:0a:8b:21:e1:24:5c:10:a2:10:1c:
16:09:4b:b2:7c:ac:9c:4f:5f:8f:9d:eb:3d:a2:44:3c:75:07:
af:b1:6c:5c:70:c4:2a:b8:6d:fa:72:81:01:1e:a5:c7:1e:46:
75:1f:ab:81:ba:fc:d4:70:8b:4a:6a:aa:72:7b:6b:6e:0c:ac:
c8:cf:8f:ab:80:78:32:bc:23:f1:7a:0e:48:7a:6a:4d:4a:a2:
95:e8:bc:4f:19:a8:65:b7:1a:eb:0f:27:41:e5:f7:a4:f0:39:
b1:a5:b5:78:f9:25:3f:7a:dd:2c:2b:51:93:5d:c8:cf:38:7c:
71:28:7d:4e:90:4c:93:b8:94:fa:55:52:5f:91:f5:41:8b:80:
3e:9b:4b:77:d7:80:75:33:28:16:95:f4:5f:01:90:84:10:d0:
1c:63:eb:2c:56:8b:ac:f4:6a:a9:75:dc:5a:65:d6:d5:6e:8a:
5d:9e:a1:74:38:10:75:40:92:5c:58:ff:ac:99:2b:6c:2e:ca:
07:07:a9:b9:1f:97:e6:22:4d:6f:b5:78:b1:9a:15:17:bc:ee:
75:f1:aa:67:8c:6f:19:ce:02:aa:49:ab:ca:ed:81:20:45:d5:
6f:dd:fa:ee:ce:3c:be:f5:9f:d4:e9:de:2a:cd:92:9a:75:60:
8b:fb:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:52 2026 by rpki-client