
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
File: vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft (raw, json)
Hash identifier: vLGyvj/UVWGgmBCQrWqZNCziKX/mf/tb3FSgFJvpQI8=
Subject key identifier: 5D:B5:8C:47:0F:9B:C2:1D:9F:1C:31:35:DE:C7:40:E5:3B:C8:3D:DA
Authority key identifier: BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66
Certificate issuer: /CN=A91BCA5B/serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
Manifest number: 3A
Signing time: Sun 01 Mar 2026 09:54:51 +0000
Manifest this update: Sun 01 Mar 2026 09:54:50 +0000
Manifest next update: Sun 08 Mar 2026 09:54:50 +0000
Files and hashes: 1: vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl (hash: bcgakY0nbp+SaDl7dqa06kbeKBHI8wtp4PvPoHpRbFk=)
2: 36FD77BEC38511F083512C58C4F9AE02.roa (hash: oPufGh3TbxsBiRCVBIvGzGeTz7MKmf1Vpq5ZzFSRq0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl
rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCA5B, serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
Validity
Not Before: Mar 1 09:54:50 2026 GMT
Not After : Mar 8 09:54:50 2026 GMT
Subject: CN=69a40ceb-44cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:46:37:ed:85:67:5b:51:4b:6c:6a:b6:8f:
c4:71:f0:8c:2f:46:9e:42:77:c5:f5:fa:ab:4a:73:
fb:49:2f:f4:dd:de:f1:77:9f:3c:4d:2f:7c:39:00:
73:b6:95:09:a6:91:0f:0e:24:7b:92:71:db:e8:1d:
4f:b0:a7:0e:e2:b3:9f:bc:3a:4c:54:fd:52:bf:dc:
75:cb:f4:ae:43:c5:31:84:72:62:ed:ee:f6:36:3b:
65:ac:b6:8d:95:78:cc:64:7d:c5:38:9b:17:8f:e7:
2b:ea:d0:5c:f9:ab:35:e7:13:e5:d4:63:14:fa:c8:
00:49:52:15:4c:af:e6:4d:d9:9c:31:04:e6:5b:f6:
66:06:fc:9a:fe:82:ab:87:15:9c:f0:fe:ad:00:03:
14:8f:b6:f5:70:75:a6:01:53:9c:50:bf:7c:57:37:
b3:e1:00:75:e4:d9:58:52:e8:cf:de:62:e0:f8:10:
3c:30:ef:70:a5:0e:06:a3:89:d5:18:f9:80:a2:28:
54:1b:50:3f:4c:0e:25:04:ad:53:79:8f:92:f4:64:
25:ef:64:fb:15:26:60:01:ca:6d:35:55:8f:dd:0a:
ba:7b:3d:fa:a8:01:52:5a:d4:9e:42:6e:95:ed:4b:
ef:af:e2:b2:b0:a3:6d:c6:8b:85:3f:0c:cf:59:36:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:8C:47:0F:9B:C2:1D:9F:1C:31:35:DE:C7:40:E5:3B:C8:3D:DA
X509v3 Authority Key Identifier:
keyid:BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:66:3d:75:04:17:b5:ee:e5:e5:9c:82:65:8b:7f:d8:3f:64:
15:5d:d4:82:64:9d:c2:93:bb:53:be:a9:f9:57:aa:45:81:f2:
db:41:8e:ce:16:b7:58:06:b5:ec:64:d9:65:f2:e0:02:00:7b:
5d:a1:db:80:b8:e5:e2:8f:34:4c:f8:62:79:df:f0:00:18:75:
1d:d1:63:94:39:2a:e5:54:2a:3b:95:bf:b7:34:67:99:a3:14:
fe:df:b1:3e:44:9a:7a:86:a1:22:13:04:b2:82:3e:de:96:85:
22:91:1e:9c:71:86:ae:92:cd:35:20:df:11:df:6d:fc:03:3d:
43:74:f9:72:a6:ac:65:cf:79:cb:a9:da:75:9c:b0:f1:50:e5:
3c:0f:f2:56:4f:7f:9e:82:43:4e:68:b3:98:c0:07:1c:ac:fd:
0c:28:fa:21:70:41:f9:e0:64:67:ef:2c:34:71:50:7c:fa:ef:
d0:07:3e:33:1f:94:d5:92:9d:d4:f8:66:39:62:40:a4:e1:9b:
9b:08:05:47:18:af:ec:10:59:58:16:d5:c9:01:b9:d1:f7:e4:
49:28:70:b2:67:d8:ec:25:10:17:68:ac:98:bb:b3:0e:cf:ce:
1c:e1:e0:08:24:62:b7:67:ca:13:37:d9:9c:28:67:f5:4f:ce:
ea:72:87:a6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
Q0E1QjExMC8GA1UEBRMoQkVBMTZCRDNFNDdFRTdFRTMyOUI2RkNFQTdDRjE3MDlB
Mzk5NzM2NjAeFw0yNjAzMDEwOTU0NTBaFw0yNjAzMDgwOTU0NTBaMBgxFjAUBgNV
BAMTDTY5YTQwY2ViLTQ0Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC32kY37YVnW1FLbGq2j8Rx8IwvRp5Cd8X1+qtKc/tJL/Td3vF3nzxNL3w5AHO2
lQmmkQ8OJHuScdvoHU+wpw7is5+8OkxU/VK/3HXL9K5DxTGEcmLt7vY2O2Wsto2V
eMxkfcU4mxeP5yvq0Fz5qzXnE+XUYxT6yABJUhVMr+ZN2ZwxBOZb9mYG/Jr+gquH
FZzw/q0AAxSPtvVwdaYBU5xQv3xXN7PhAHXk2VhS6M/eYuD4EDww73ClDgajidUY
+YCiKFQbUD9MDiUErVN5j5L0ZCXvZPsVJmABym01VY/dCrp7PfqoAVJa1J5CbpXt
S++v4rKwo23Gi4U/DM9ZNnYlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXbWMRw+b
wh2fHDE13sdA5TvIPdowHwYDVR0jBBgwFoAUvqFr0+R+5+4ym2/Op88XCaOZc2Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQTVCL0REMEFDQUM0QzAz
QTExRjA4OEQxNDYyQ0M0RjlBRTAyL3ZxRnIwLVItNS00eW0yX09wODhYQ2FPWmMy
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdnFGcjAtUi01LTR5bTJfT3A4OFhDYU9aYzJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD
QTVCL0REMEFDQUM0QzAzQTExRjA4OEQxNDYyQ0M0RjlBRTAyL3ZxRnIwLVItNS00
eW0yX09wODhYQ2FPWmMyWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAYZj11BBe17uXlnIJli3/YP2QVXdSCZJ3Ck7tTvqn5V6pFgfLbQY7OFrdYBrXs
ZNll8uACAHtdoduAuOXijzRM+GJ53/AAGHUd0WOUOSrlVCo7lb+3NGeZoxT+37E+
RJp6hqEiEwSygj7eloUikR6ccYauks01IN8R3238Az1DdPlypqxlz3nLqdp1nLDx
UOU8D/JWT3+egkNOaLOYwAccrP0MKPohcEH54GRn7yw0cVB8+u/QBz4zH5TVkp3U
+GY5YkCk4ZubCAVHGK/sEFlYFtXJAbnR9+RJKHCyZ9jsJRAXaKyYu7MOz84c4eAI
JGK3Z8oTN9mcKGf1T87qcoem
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:29 2026 by rpki-client