
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier: 5fJsBLTJXvJ9YsJzIZQXh/QiFQH/0s4deQjVA18/bDI=
Subject key identifier: 0C:33:70:E0:B6:AF:E7:0A:CF:FF:D8:4C:81:F7:45:C0:A2:F7:BD:9E
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial: 0D18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number: 0CFE
Signing time: Sun 01 Mar 2026 23:59:55 +0000
Manifest this update: Sun 01 Mar 2026 23:59:53 +0000
Manifest next update: Sun 08 Mar 2026 23:59:53 +0000
Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: hhJoqR0uDOi3Gb4jqnSauJqW56ck0JLbyy8xMf9IBDI=)
2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI=)
3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3352 (0xd18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Validity
Not Before: Mar 1 23:59:53 2026 GMT
Not After : Mar 8 23:59:53 2026 GMT
Subject: CN=69a4d2fa-aaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:1d:fb:8b:2c:9f:56:ef:3c:89:2a:4f:80:b7:
80:30:27:43:de:04:cd:27:5e:9c:2f:d2:99:71:37:
b4:32:7f:f8:cc:dd:74:34:da:6c:6c:74:a6:89:7d:
55:26:bb:4b:a2:2d:cb:a1:d9:67:f1:23:6b:b4:6f:
55:0a:78:6a:c8:07:fd:f9:0d:01:34:f1:23:16:b8:
2f:9c:23:5d:e4:b2:fd:42:42:54:4f:46:c5:01:52:
6e:b3:9d:27:f7:11:ce:d2:a0:43:58:c5:9f:cf:fd:
91:24:00:97:78:57:cf:2e:bc:47:1b:5c:15:d2:71:
fb:35:59:91:cc:17:82:bc:6b:c4:00:70:6d:10:e6:
b1:d8:0a:08:b1:e3:2f:61:04:0f:a7:46:a6:f1:35:
b9:59:61:f5:30:35:7e:25:35:bf:c0:03:00:f0:16:
f8:a1:2e:00:bb:3c:b8:74:55:0c:9f:c9:43:a9:49:
0a:30:dd:65:9f:34:99:18:0c:10:7a:ed:65:3e:a5:
9a:af:ad:51:dc:cc:75:54:09:ab:a9:8d:46:92:69:
70:c8:5f:a5:4c:97:8f:a9:51:08:36:03:b3:01:fd:
15:38:d1:d7:50:9b:43:8a:d1:ae:c4:b3:00:6f:e9:
7a:dc:72:87:14:d0:59:74:0f:87:41:04:ac:73:08:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:70:E0:B6:AF:E7:0A:CF:FF:D8:4C:81:F7:45:C0:A2:F7:BD:9E
X509v3 Authority Key Identifier:
keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b0:f3:11:9a:1b:bd:4a:bf:30:6f:51:d9:b3:c0:df:ad:73:
18:73:e2:5b:81:94:75:31:22:8b:60:be:d0:79:20:2b:ee:72:
4f:b2:1e:09:fa:af:35:cf:b9:85:cb:51:1e:57:65:40:2e:a8:
fe:04:c4:c4:3c:fc:71:79:2e:0b:dd:2c:f4:cd:ce:da:07:9a:
c0:ce:50:ad:c4:e3:f1:0d:03:64:d4:3f:3c:03:37:e5:6c:fb:
fd:88:9f:73:f4:ce:aa:2b:64:10:78:0b:8c:6a:07:5f:f5:c4:
2c:bf:4c:40:b7:cc:33:66:de:0f:ee:d1:a9:07:91:ea:09:d4:
43:ea:38:2e:49:a4:5f:35:28:23:dd:9c:63:59:a7:75:64:60:
26:8d:01:9e:1c:a0:f8:aa:50:a5:98:cf:93:b5:87:0b:10:9e:
41:5e:1a:61:dc:b1:a0:61:b0:67:e4:b9:7f:03:f8:49:f7:e1:
9a:7d:46:d8:e6:d3:2c:97:7b:a7:ee:b9:4f:02:a5:d1:40:20:
fb:c6:6a:68:fc:17:e7:2d:bd:9c:53:48:b8:e3:fc:32:4e:e1:
ea:6c:15:9b:67:23:af:cd:15:04:86:b7:ff:8c:3b:a7:7b:3f:
0b:55:0e:88:67:18:1b:6e:84:de:2c:eb:7c:5a:b6:ff:2f:11:
dd:14:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:56 2026 by rpki-client