
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json)
Hash identifier: 9M8dGUpfBgBwlxSlLWpx3gybsnOZZjamKdkfHSRBz+o=
Subject key identifier: 34:99:41:F9:D2:BF:DB:C8:B4:9B:7F:4A:7F:6C:21:96:90:18:A4:21
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
Manifest number: 0216
Signing time: Fri 17 Apr 2026 02:36:57 +0000
Manifest this update: Fri 17 Apr 2026 02:36:57 +0000
Manifest next update: Fri 24 Apr 2026 02:36:57 +0000
Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: Qb9JEGDCnH+m82SmIlJshvlAwUVYd+i6v5kAFncfKB0=)
2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: /TgdYccSrgV/wS8wSr/QJm7tUdYZcbb5hDBslMgQWF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Validity
Not Before: Apr 17 02:36:57 2026 GMT
Not After : Apr 24 02:36:57 2026 GMT
Subject: CN=69e19cc9-5f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:5f:3c:5b:21:80:7d:1e:06:41:e0:95:09:
81:3a:1d:cc:dd:31:46:9b:b0:4a:a5:2b:23:6a:e0:
46:29:7f:93:72:99:a8:c6:fa:60:d7:58:fa:df:f5:
fa:65:95:03:2a:db:70:72:4f:38:4e:c7:63:45:81:
da:b8:5f:e7:17:b9:e8:95:a7:9f:8c:03:e1:2c:20:
c1:45:17:e4:dc:f0:f3:b8:4c:c8:ef:19:02:5c:6a:
14:36:e6:05:2b:35:4e:97:8d:c4:c9:8f:4e:ad:a1:
86:2a:41:6b:ca:e7:78:f0:24:36:f5:52:73:4d:42:
45:10:e8:99:fa:16:35:04:32:5f:24:7a:88:5e:3a:
e2:92:f3:9b:87:ba:3f:af:11:e4:ea:fe:07:4e:d6:
e5:5c:fd:f0:c7:03:0e:85:75:2d:0e:be:ad:25:8e:
f4:3b:1c:56:7d:1c:1b:0b:44:55:4a:08:e9:b7:d3:
d4:5b:0a:de:ea:48:bf:4b:5a:ea:35:27:36:4a:8e:
d9:08:5e:fe:2e:d4:e2:fe:97:8b:89:47:4b:2f:db:
27:2e:de:0c:fe:57:d3:56:be:6c:61:36:e0:83:f8:
b6:75:21:dc:5a:e6:be:3f:3c:c7:bd:a4:f1:6f:c0:
eb:90:a8:b6:4f:1a:48:4d:1f:b4:41:ab:3d:ea:0d:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:41:F9:D2:BF:DB:C8:B4:9B:7F:4A:7F:6C:21:96:90:18:A4:21
X509v3 Authority Key Identifier:
keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:fa:d5:2c:ec:c0:a5:40:cd:b6:93:98:69:f4:f7:1e:98:5d:
de:2e:9b:35:da:b3:ba:c1:ad:6b:dd:e9:90:db:67:47:d7:4f:
3d:0f:87:3b:c6:2c:46:7a:33:82:1d:ef:ce:eb:54:f4:89:77:
29:b5:cb:c0:79:e8:cc:68:1f:cf:e8:aa:81:5a:7c:3b:f4:1c:
72:24:f8:8e:8c:ab:1e:61:fe:26:52:71:12:91:fb:08:49:53:
8f:d5:0b:37:49:88:f2:19:23:8e:55:da:3c:b3:9c:db:b8:e0:
02:db:4a:10:e5:90:47:30:78:47:3d:39:a4:3b:7c:50:fd:ce:
f3:57:f7:d8:86:88:b9:63:e7:2f:dd:5c:c5:4c:98:41:32:ce:
8e:2c:af:93:22:32:a1:1e:70:ea:29:c1:73:ee:8b:57:d8:5e:
af:81:26:b0:e6:b9:a1:41:e4:26:01:ce:76:ab:b6:50:2d:53:
53:99:47:9c:02:65:d7:da:de:ff:08:0d:48:d7:fa:7c:a3:19:
91:7f:99:82:36:b8:d4:5d:99:a5:22:9d:36:1b:71:5a:59:db:
16:39:0f:b9:43:05:2a:96:bf:98:25:a2:49:71:05:14:d7:f5:
53:2b:47:a7:bc:1a:79:54:09:2e:82:28:f9:a1:0f:30:5e:90:
d3:b2:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:45 2026 by rpki-client