
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
File: VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft (raw, json)
Hash identifier: 5sVjt0Dtp+MqzvoxyOqeqwzOCYv9OnoKwyKrGtQaUAo=
Subject key identifier: 74:5E:F9:55:5B:30:72:4D:60:29:DE:CD:E0:2C:66:14:62:16:70:C0
Authority key identifier: 54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0
Certificate issuer: /CN=A9189AA3/serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
Manifest number: 01B7
Signing time: Sun 01 Mar 2026 04:42:45 +0000
Manifest this update: Sun 01 Mar 2026 04:42:45 +0000
Manifest next update: Sun 08 Mar 2026 04:42:45 +0000
Files and hashes: 1: VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl (hash: qRuU9KAqScBSHJIWnVbVb7C0r7ZCmuRscAvjIXuXwC4=)
2: 230576C0784C11EE9C354422C4F9AE02.roa (hash: 5/tz+zV+KYTuT4GPIpqQGv7xmSUoiPQVsrX2Ae3OaPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl
rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189AA3, serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0
Validity
Not Before: Mar 1 04:42:45 2026 GMT
Not After : Mar 8 04:42:45 2026 GMT
Subject: CN=69a3c3c5-fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:33:29:ed:c7:71:2e:16:1a:28:3c:fa:fe:47:
78:67:1a:dc:36:d7:cd:fe:61:74:67:11:50:91:bf:
24:7e:af:6e:58:81:32:63:de:72:72:90:cd:72:fc:
6d:a1:c2:01:dc:21:bd:d6:0c:df:30:94:bd:62:7c:
db:58:af:ee:d6:fa:9d:e4:83:06:55:3a:a5:f9:5d:
b2:37:ed:44:b0:df:31:9c:2c:1c:36:fe:9f:91:03:
2c:2d:e2:4f:03:9e:f4:78:e2:85:29:39:25:5d:50:
cd:ed:4a:c1:35:1b:25:f4:f0:2f:4f:f4:0f:43:25:
b7:37:8f:04:d8:8d:f7:3f:86:e4:3f:2d:a0:82:f5:
2b:72:b7:27:84:b9:e3:3e:36:f4:69:3f:26:ff:af:
66:91:c5:d2:dd:44:b6:b4:33:82:df:08:8b:9b:e0:
2e:6b:5b:4d:72:03:78:a2:d0:3c:1c:61:d0:87:57:
78:95:cb:08:6a:1b:f8:22:af:a6:49:df:d7:63:e5:
ea:42:4e:a1:03:5f:96:de:00:10:85:cf:42:21:fd:
24:33:04:8e:93:cd:d3:c0:eb:08:76:74:20:6f:aa:
6e:9e:8e:d4:72:6b:29:0c:d4:82:bc:80:0f:d4:f0:
ef:22:9d:19:f7:eb:18:fb:c1:07:7d:26:8d:d7:92:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:F9:55:5B:30:72:4D:60:29:DE:CD:E0:2C:66:14:62:16:70:C0
X509v3 Authority Key Identifier:
keyid:54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:4c:89:9f:ac:68:22:14:74:32:53:6e:26:ef:74:26:52:
ca:1e:a3:53:44:9c:f8:a5:f5:bf:cd:dc:6d:27:78:03:73:3f:
f8:ad:48:20:ea:51:a5:98:69:d1:dc:87:e9:d4:61:83:7f:e6:
db:86:64:aa:d2:96:88:a8:53:cf:ae:7b:29:db:ae:70:95:47:
9a:39:4a:ea:d5:06:ce:f8:74:e6:81:39:39:45:bf:73:68:30:
0b:e6:e9:00:47:25:6b:9a:9f:2d:02:25:98:28:a3:a4:8a:c3:
b8:fa:d0:f7:4d:6c:f8:46:41:94:4a:3e:cb:e6:7f:9d:14:83:
a9:55:74:35:62:55:8c:75:30:d8:54:9e:c9:e1:29:9d:f9:1b:
fd:5f:0b:84:c1:f4:ae:14:b3:f8:2a:89:14:d0:ff:69:08:79:
dd:f1:17:5c:80:80:1c:21:93:ae:85:e3:2c:bc:25:f5:39:13:
14:ff:d4:27:a7:3e:fb:1f:38:c5:cd:d5:46:8d:b8:c7:80:b8:
85:5e:a7:7b:60:a7:42:3d:8c:ee:d3:49:97:1a:f7:df:d9:9f:
ec:d9:70:a1:51:ce:11:83:76:3e:2e:44:f5:6a:5e:09:82:52:
dd:95:74:50:dc:de:21:b8:ca:3b:f3:9d:46:4b:3e:58:97:ee:
96:4a:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:07 2026 by rpki-client