
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier: /0Pnm1zQRRAvhbHhokoDXgNTo68cCvWi0pPnx28BwZU=
Subject key identifier: B2:63:14:3A:D5:27:B3:66:2E:33:CA:B1:B1:8E:DF:0D:8B:9F:68:07
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number: 018E
Signing time: Sun 01 Mar 2026 05:23:01 +0000
Manifest this update: Sun 01 Mar 2026 05:23:00 +0000
Manifest next update: Sun 08 Mar 2026 05:23:00 +0000
Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: tHorCAXOcz3Zh5HdyFSs8pfI8tDqIVWTqIURpnMWEYk=)
2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: dbemmz7+vRJzVcvUqESCltZVHwIJJBG6Z1uPWbudaXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Validity
Not Before: Mar 1 05:23:00 2026 GMT
Not After : Mar 8 05:23:00 2026 GMT
Subject: CN=69a3cd35-a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:94:d0:02:dd:5f:70:2a:61:4b:0d:65:f7:
b2:95:60:13:d8:83:0e:26:55:eb:2a:38:73:a6:75:
19:dc:6a:d4:88:86:e1:b0:f3:16:48:36:9c:42:ce:
36:fa:94:80:fb:f3:6d:26:ed:4b:32:4c:80:28:62:
e5:51:eb:b1:fa:16:af:64:bd:3a:2b:4e:e3:f9:a6:
4a:2b:b8:76:58:e8:b9:b4:89:ee:ab:29:6b:b2:d2:
1c:83:38:2c:4b:30:f1:74:31:61:58:a6:3d:28:e5:
cf:7e:d3:af:44:77:cb:05:71:c8:3f:b3:e6:6e:de:
d5:b3:8b:38:9f:ab:61:3a:d2:bd:bd:e2:57:37:32:
9e:cc:4e:1f:ad:d9:7d:fe:18:74:78:a0:0d:2e:d4:
d3:f2:88:01:d6:ac:20:1a:c6:81:db:6c:4e:d1:52:
e8:29:b0:7c:69:5c:1c:49:60:2c:92:ee:c9:af:77:
8e:7a:91:c1:b9:6b:35:6a:9e:2c:28:0b:a0:3b:a8:
71:a7:e6:ee:83:7c:b4:6a:37:6d:8a:de:ef:3b:6f:
35:59:b5:fa:93:81:48:ec:bb:89:c1:93:90:d6:9b:
64:9e:eb:0f:97:25:0d:e7:16:db:02:23:63:5b:67:
c3:8b:fe:1f:64:73:c7:30:62:66:0b:ee:96:5a:53:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:14:3A:D5:27:B3:66:2E:33:CA:B1:B1:8E:DF:0D:8B:9F:68:07
X509v3 Authority Key Identifier:
keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:d1:8c:79:71:24:52:82:91:17:84:a1:1f:b1:6a:20:df:
1a:d8:5d:91:6f:ed:91:a6:d4:5f:77:74:92:90:28:e6:ec:0f:
56:1b:2d:e6:8a:4e:9b:d9:0f:03:1a:fc:a7:43:6f:cf:e2:b8:
b3:93:8e:eb:6f:3b:5a:6c:b1:d0:5a:a6:d5:19:aa:4b:34:96:
2e:c5:2a:40:1c:2a:20:9e:48:e8:a3:3b:38:a0:48:fb:18:aa:
01:53:41:88:b5:83:6c:c1:e2:8a:40:88:97:5b:c6:aa:32:25:
5e:9b:d6:6b:a2:b7:ec:fd:21:60:1c:e1:47:18:d8:f0:ae:15:
04:6e:42:fa:42:36:cf:fe:b5:9b:7e:f4:74:13:d5:5e:b5:0a:
4b:47:a9:bf:80:cf:f6:d0:15:65:2c:1e:4f:1d:cc:f9:03:6a:
dc:65:0d:9e:21:a3:b0:16:03:c6:a1:c3:eb:fe:60:d9:eb:87:
22:83:b5:78:0f:81:ed:a3:3b:10:04:09:22:9a:70:5b:9f:a6:
3e:33:be:23:09:95:45:40:6b:c4:68:1d:d0:06:b9:d6:fa:71:
2d:dd:a6:51:ad:dc:e0:a4:e9:22:60:e7:b2:6e:ef:32:2a:8a:
8e:52:d2:68:9a:33:85:40:51:08:5d:90:54:70:1d:6e:53:76:
40:04:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:41 2026 by rpki-client