
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json)
Hash identifier: YUB5lY3ljRUzSG4Mk3MnoAi8SfHAOwaByzMPyFZDehQ=
Subject key identifier: F0:4B:1F:75:C4:65:D5:A8:1D:B7:66:66:32:F6:A2:28:DF:D8:33:9D
Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Certificate serial: 0CA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
Manifest number: 0C93
Signing time: Thu 16 Apr 2026 18:28:49 +0000
Manifest this update: Thu 16 Apr 2026 18:28:49 +0000
Manifest next update: Thu 23 Apr 2026 18:28:49 +0000
Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: UrqZt31apVOCeLxxcvLJ/s4N1aS7bDhqYOEc7bSUrNc=)
2: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=)
3: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Validity
Not Before: Apr 16 18:28:49 2026 GMT
Not After : Apr 23 18:28:49 2026 GMT
Subject: CN=69e12a61-2649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:01:b4:0c:1c:02:e6:c1:e1:ec:49:1b:4f:
5a:f1:22:77:95:3e:37:09:1e:f5:b2:12:72:20:e6:
9a:f2:46:5a:40:b9:52:bd:9b:21:da:4c:84:44:6a:
50:11:90:b5:d5:0b:7c:ef:7b:57:93:96:f5:2e:2f:
31:4f:af:40:ca:80:3f:3f:6f:05:c3:ab:fb:5b:cf:
9f:e9:ef:bb:47:00:3b:2c:93:86:de:6c:10:83:70:
5a:b2:d5:6e:13:33:ed:40:39:98:f9:48:fc:3d:23:
cf:4f:76:ac:c4:0d:0f:dd:10:f0:e7:0d:7f:8c:d2:
ad:1c:ee:ca:b0:a3:87:03:70:c9:4b:6c:7b:b1:29:
e1:9b:07:a2:8e:36:5b:2a:56:49:7f:70:98:53:42:
18:09:73:d9:b0:25:ca:f4:cb:50:ed:9e:fa:9f:19:
74:0a:48:3c:fe:a2:b7:82:07:f4:b8:93:87:b4:6c:
7c:66:d6:4f:53:81:0d:23:92:ad:5c:3e:29:d2:33:
75:59:16:8e:b1:1e:82:56:cc:56:41:d2:2f:ff:a2:
51:0e:03:a4:d4:bb:5b:d0:a8:85:5e:a5:f2:60:28:
f4:54:2f:b3:b5:62:87:6b:b2:c9:03:9c:6d:8c:4c:
e0:54:70:50:81:c7:46:dd:9f:a2:f1:f1:6b:bc:d8:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4B:1F:75:C4:65:D5:A8:1D:B7:66:66:32:F6:A2:28:DF:D8:33:9D
X509v3 Authority Key Identifier:
keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:06:7b:43:15:1d:69:2d:cf:77:b2:b3:0e:95:b6:dc:45:62:
e6:3b:a7:34:cf:e9:a7:a2:60:29:4d:67:82:25:08:7a:22:45:
dd:78:f1:02:e8:ca:8c:b8:90:db:21:d8:b7:af:c8:1a:62:d2:
e6:df:f6:b4:b2:17:32:07:85:d2:b4:f9:90:56:a0:bb:26:d4:
6e:80:bb:ad:6e:9d:ea:5e:01:35:5f:13:50:2b:22:22:97:32:
33:a1:b5:27:5f:5d:52:97:38:31:a7:22:6e:e6:43:ab:72:b9:
18:d5:c7:38:f4:fc:7e:90:86:50:0e:fa:c2:c7:f8:2c:86:a9:
9d:93:21:50:eb:05:87:1c:62:6b:d6:a0:1f:7b:8f:19:4a:1b:
5d:a6:f6:df:46:64:ce:e7:f9:a4:1e:90:7a:07:27:f8:12:44:
5e:a4:a1:d1:5c:c3:b5:47:cc:5b:77:b6:2c:f2:46:51:8d:d9:
fc:f1:a9:da:9e:17:45:88:0e:75:83:01:0e:6f:26:54:f3:ca:
fa:e4:b8:6a:17:02:98:6f:61:1f:ca:cf:89:10:6e:34:9f:7b:
a2:51:ad:d6:cc:39:48:28:e6:21:0a:78:ba:bf:af:76:c8:0e:
90:f4:95:86:57:4f:76:16:49:19:48:f8:c7:c9:e6:56:ac:84:
ec:78:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:01 2026 by rpki-client