
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: Zawe76o9W/R5d2b8FyYTPzlusY06qeV29H30/bLMpmY=
Subject key identifier: 03:A2:70:82:57:E4:7F:45:17:3B:BF:13:E7:E3:18:87:E6:BB:FF:47
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: D3
Signing time: Sun 19 Apr 2026 06:18:40 +0000
Manifest this update: Sun 19 Apr 2026 06:18:40 +0000
Manifest next update: Sun 26 Apr 2026 06:18:40 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: HyM/lmD7RuTPMNHM4rijAbXVya9N9IWe3uAFbZs47Kw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Validity
Not Before: Apr 19 06:18:40 2026 GMT
Not After : Apr 26 06:18:40 2026 GMT
Subject: CN=69e473c0-a473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d1:c2:74:9a:a9:70:32:1f:c5:29:8c:f8:0e:
ee:39:81:2a:a2:79:9b:b0:94:51:cd:b5:6d:af:72:
07:eb:73:a2:bc:d4:b1:ae:de:7f:91:cc:80:7a:24:
70:9e:83:f4:8e:cc:12:72:17:58:31:65:d1:82:67:
c9:de:cc:1d:17:c9:ee:d7:54:44:cb:da:01:fe:a8:
8d:8c:f5:54:02:76:6f:76:cb:04:59:bb:ea:81:a5:
0c:e7:19:4b:97:ed:2a:e4:60:80:84:f7:f4:b5:d2:
fb:16:b6:4b:0b:e1:21:c0:62:8d:ed:1b:8a:4a:8a:
c7:64:d1:b8:68:1a:3c:23:13:e2:c0:3f:56:00:d5:
56:6c:e7:38:4b:50:9e:4c:8f:34:77:78:86:f4:99:
f8:a9:0b:20:f6:bb:b3:4e:7c:b5:e3:01:4c:fb:89:
a9:02:51:3d:15:00:a6:43:f0:e9:fd:4a:24:bc:0f:
5c:a3:f7:fe:55:c1:80:3c:e4:4c:76:6c:c9:60:96:
0e:ae:48:0b:7b:61:93:f4:5f:66:71:11:2d:9f:30:
56:64:a2:af:e0:79:7b:fa:1b:0b:f3:bf:8e:6d:8d:
85:09:5d:e7:8f:08:99:07:40:c0:f7:03:c1:09:02:
79:77:3d:58:5b:0d:15:73:a5:f3:7f:fb:9b:2a:06:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:70:82:57:E4:7F:45:17:3B:BF:13:E7:E3:18:87:E6:BB:FF:47
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b1:34:8b:58:3e:dd:5a:a6:3b:ff:26:40:43:fc:85:b4:b3:
9a:e0:4f:4a:44:96:92:4f:04:89:e4:52:2b:26:68:81:f3:42:
8c:4a:2d:ea:e1:2f:33:25:f1:14:9b:50:d7:94:88:db:17:62:
3d:02:8c:48:c5:83:a0:eb:8e:9e:49:db:f3:61:12:64:5f:8d:
26:36:2d:f4:64:f3:c3:e6:76:b0:69:db:9e:50:13:48:79:57:
27:0d:dc:80:6c:ba:f0:fa:21:50:51:bf:79:8a:90:3a:05:ea:
3f:54:56:60:6b:d5:cc:e7:9b:9a:43:d6:c7:0b:74:0d:6d:f7:
f7:ca:8d:95:d1:5f:e1:73:2b:bc:8b:44:79:be:fc:96:fb:e3:
c9:4b:3a:e2:08:06:1e:82:f7:eb:2e:91:1b:8a:d9:fc:ae:a7:
a8:e1:a1:ac:e3:39:91:e1:00:e2:fb:44:98:16:c2:21:2b:11:
f5:7a:92:66:be:c7:cc:5f:dc:be:bc:46:35:fb:63:7c:21:a5:
98:25:61:ba:27:9f:05:c4:ce:b3:42:0a:f1:e1:bc:ed:f0:b3:
dc:44:69:88:b5:81:7d:44:02:d4:52:fc:f6:85:1c:44:c1:0c:
75:14:56:62:a1:30:5f:86:71:d3:a1:de:8a:99:a3:2c:20:3e:
5e:42:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:31 2026 by rpki-client