
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier: DDRwMS48einVPZKkHzMnrDuAUrBNq7GbyXF4tlE8KjM=
Subject key identifier: FE:B5:9A:6F:09:54:2D:0F:DC:E2:B2:4D:C6:6D:37:94:28:80:3D:FB
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number: 01FA
Signing time: Mon 21 Sep 2026 03:19:02 +0000
Manifest this update: Mon 21 Sep 2026 03:19:02 +0000
Manifest next update: Mon 28 Sep 2026 03:19:02 +0000
Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: Cd3B2J0caTrfnOAMqE6z3IxOwr9EVOZOsS+1eWpYwlI=)
2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: 4BM5LIM23GXw5AfkXFzMdqX+Y7TcpkGGG81Gw9eoyBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Validity
Not Before: Sep 21 03:19:02 2026 GMT
Not After : Sep 28 03:19:02 2026 GMT
Subject: CN=6ab0a226-55b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:3c:99:0e:0e:4b:34:d6:87:a0:c2:60:ab:
96:26:a4:40:ad:17:03:0d:4c:fa:e2:25:d2:05:9a:
89:ac:d3:26:e2:4f:1d:59:d0:5e:e1:fc:7c:13:57:
da:46:fc:f9:39:44:64:5d:0a:69:fc:f4:54:a5:9d:
ba:4a:dd:d2:ab:3b:6f:a0:11:2e:d4:6b:4e:53:e5:
e4:f1:48:22:46:1a:b0:0f:be:b1:5a:38:46:98:74:
85:f3:03:82:de:ce:26:b5:b7:90:63:46:74:9a:e9:
23:e0:8d:97:22:bf:b1:dd:7c:0e:a9:b2:93:f1:b5:
61:b8:97:3c:40:38:39:f9:84:ca:49:60:b6:54:6a:
48:80:79:b8:b3:98:21:de:ab:fe:ba:f6:35:98:64:
8b:59:14:3c:53:cc:f9:55:db:96:2d:d5:77:3f:c5:
4d:7d:0c:26:7d:fd:8d:f2:b3:22:86:75:f0:00:7d:
23:1c:85:df:51:75:f6:71:ed:1c:6c:46:de:4a:ee:
68:dc:ef:e6:f9:33:2d:35:2d:02:76:e5:f4:52:6f:
a7:7d:fb:75:38:78:91:30:d7:24:b1:07:32:bc:21:
7c:c9:47:2a:c5:0f:43:a0:b6:c9:1a:a2:f7:d5:14:
2c:d7:c5:55:93:f3:85:37:ef:5e:16:91:89:a1:51:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:9A:6F:09:54:2D:0F:DC:E2:B2:4D:C6:6D:37:94:28:80:3D:FB
X509v3 Authority Key Identifier:
keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e3:d5:13:63:91:0f:95:15:f9:8e:09:9e:86:eb:37:d7:13:
e3:f8:79:66:09:18:a3:a8:70:bd:0f:6c:ef:0c:f3:2f:2e:78:
33:d0:1d:5a:f1:ec:d1:cc:34:5c:ed:f2:a9:2d:6b:74:cd:4f:
2b:cd:4f:c6:5c:90:24:de:46:70:fd:76:20:a4:85:6e:5e:7c:
55:f3:ce:bd:61:98:b1:58:61:45:e6:d6:b8:ea:39:80:4a:aa:
57:2c:55:f7:51:16:0b:ff:a0:5c:5b:c4:d4:cb:4d:25:54:b6:
3f:d3:26:0f:0d:16:3a:3a:4f:60:d5:95:2a:b5:2c:bf:1e:75:
38:8e:08:60:39:c2:59:b4:ad:d0:f0:3c:42:a1:5e:7a:9a:31:
b2:a2:05:76:4c:eb:e9:d3:fb:ee:e7:1d:4a:57:de:3a:fe:ac:
3a:27:09:73:8f:4b:97:b3:2d:5c:00:b4:40:30:16:a7:86:84:
51:0a:6c:45:4e:49:b8:8a:9b:e7:3f:5d:dc:f1:82:4a:9c:3e:
a6:41:af:8b:03:a7:5a:31:9a:7d:ab:3a:32:4b:e9:4a:d9:aa:
3b:e9:10:ba:f7:f7:ae:c5:a2:69:2c:23:9f:c8:15:8f:29:80:
e4:5f:9c:e6:23:7e:0f:7f:70:cf:c9:fe:49:e4:6f:c2:20:85:
54:df:d2:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB
RDU4RDRFNTAwHhcNMjYwOTIxMDMxOTAyWhcNMjYwOTI4MDMxOTAyWjAYMRYwFAYD
VQQDEw02YWIwYTIyNi01NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Dg8mQ4OSzTWh6DCYKuWJqRArRcDDUz64iXSBZqJrNMm4k8dWdBe4fx8E1fa
Rvz5OURkXQpp/PRUpZ26St3SqztvoBEu1GtOU+Xk8UgiRhqwD76xWjhGmHSF8wOC
3s4mtbeQY0Z0mukj4I2XIr+x3XwOqbKT8bVhuJc8QDg5+YTKSWC2VGpIgHm4s5gh
3qv+uvY1mGSLWRQ8U8z5VduWLdV3P8VNfQwmff2N8rMihnXwAH0jHIXfUXX2ce0c
bEbeSu5o3O/m+TMtNS0CduX0Um+nfft1OHiRMNcksQcyvCF8yUcqxQ9DoLbJGqL3
1RQs18VVk/OFN+9eFpGJoVF8WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP61mm8J
VC0P3OKyTcZtN5QogD37MB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5
QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U
bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D
XzRXNXVFZjBFaml0V05UbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATOPVE2ORD5UV+Y4JnobrN9cT4/h5ZgkYo6hwvQ9s7wzzLy54M9AdWvHs0cw0
XO3yqS1rdM1PK81PxlyQJN5GcP12IKSFbl58VfPOvWGYsVhhRebWuOo5gEqqVyxV
91EWC/+gXFvE1MtNJVS2P9MmDw0WOjpPYNWVKrUsvx51OI4IYDnCWbSt0PA8QqFe
epoxsqIFdkzr6dP77ucdSlfeOv6sOicJc49Ll7MtXAC0QDAWp4aEUQpsRU5JuIqb
5z9d3PGCSpw+pkGviwOnWjGafas6MkvpStmqO+kQuvf3rsWiaSwjn8gVjymA5F+c
5iN+D39wz8n+SeRvwiCFVN/SwQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:59:34 2026 by rpki-client