
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
File: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json)
Hash identifier: 5gbrL/gMy0zEpcKz9rY9AHPPzkSou1iuvnj8eZrPw9I=
Subject key identifier: 85:09:46:12:5B:BB:AF:14:CD:E2:71:94:32:E2:D1:78:33:27:29:43
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
Manifest number: 026C
Signing time: Fri 17 Apr 2026 01:56:59 +0000
Manifest this update: Fri 17 Apr 2026 01:56:58 +0000
Manifest next update: Fri 24 Apr 2026 01:56:58 +0000
Files and hashes: 1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: 9mYUt/6cE2ngwp/wiCw+ht+RJ28jmkZNo4shdKwzX4k=)
2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: TsYbtlzYuFIcHRyU9vKWwptu5/ItOjGOn1ZrqYpBfEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Validity
Not Before: Apr 17 01:56:58 2026 GMT
Not After : Apr 24 01:56:58 2026 GMT
Subject: CN=69e1936b-c32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:42:ad:a9:f2:7b:3c:48:12:fa:3b:b0:95:
36:b6:64:31:d2:7e:65:1c:5d:d4:1e:29:50:39:75:
d1:90:99:a6:6b:3a:d0:73:fa:6e:26:08:f8:13:85:
70:75:f6:f8:3a:dc:a6:fe:5a:1f:39:26:2b:64:85:
65:4f:bc:e0:e1:a9:6d:5e:80:b1:3a:fa:96:0f:eb:
75:d9:48:db:5c:e6:2f:7e:80:2e:d6:8f:de:f2:44:
cd:25:29:e9:9b:33:52:45:75:de:8e:39:c5:5b:63:
02:a5:30:00:dd:ed:d3:c5:05:27:1b:11:fb:92:71:
0d:b6:8e:46:be:2a:c8:04:93:34:be:43:67:ae:b4:
db:a2:cb:1b:8c:ea:fd:ad:29:49:c7:74:b8:99:a6:
79:ed:c1:da:db:30:46:cc:30:ac:07:29:eb:7f:37:
7f:19:73:f3:2a:1a:6d:ee:7f:5c:b2:39:c7:9b:67:
c3:5c:1a:12:f5:10:08:2c:83:e5:ef:de:7c:c7:89:
8e:5c:5e:07:b3:1c:67:9b:81:7a:ef:a4:8d:dd:31:
31:78:fa:3d:8a:51:9b:8e:85:12:7e:59:fd:0b:4b:
75:44:2a:7d:40:c5:31:e8:a3:0f:08:20:58:e3:28:
a7:af:6a:68:00:9e:5b:3d:8b:ae:99:f6:e3:fa:78:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:46:12:5B:BB:AF:14:CD:E2:71:94:32:E2:D1:78:33:27:29:43
X509v3 Authority Key Identifier:
keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:24:4d:8b:83:ee:d4:8a:9f:cd:b7:05:fc:f1:1e:24:57:d7:
ed:fd:99:80:ee:82:61:18:ec:2d:0a:08:32:1c:f5:3c:34:9b:
91:05:86:f7:49:a2:ce:51:38:0f:ab:2f:87:86:b3:da:61:bc:
ba:f1:46:c8:8c:7c:f6:09:fd:33:2f:c3:c7:32:b4:ac:f1:18:
d2:a9:b8:d1:1f:b2:d1:00:23:73:8b:3f:e7:62:5e:55:9e:9b:
d7:32:72:a8:76:bb:b0:bb:1f:44:ec:52:c6:19:f9:53:90:9c:
10:2a:71:90:69:1b:20:04:1c:f8:a1:51:38:03:ce:12:60:64:
d2:d4:f2:13:35:d1:b4:08:2c:81:10:c8:a6:b5:98:63:c8:dd:
0d:c2:8e:44:9d:5c:a5:a4:b6:63:48:e0:57:85:cc:4c:b2:f2:
db:5e:9f:44:d7:00:4c:e7:0e:94:a5:e2:0f:49:15:60:65:7c:
c8:5e:2d:9f:34:cf:e1:4f:aa:77:ae:af:46:2d:81:51:80:79:
61:9d:14:9a:eb:28:e5:6f:f7:de:67:65:ae:ef:b9:0a:ae:5e:
40:2f:c2:f6:41:3e:d8:95:bc:94:d0:00:49:46:d1:80:3a:ba:
81:f9:78:64:0e:19:de:7a:df:af:3b:69:6c:af:e0:ad:7e:a4:
1d:5e:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:13:56 2026 by rpki-client