
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
File: vq_Hury3142eGQgg9ussfyi7XYg.mft (raw, json)
Hash identifier: AXy+6vfzDoPm44gxsctuNQaZlXtpA7Xe+JWc0RKWkw8=
Subject key identifier: 01:5A:FA:6A:09:34:7C:90:8A:5F:DA:D2:2D:CA:E2:86:F8:FD:7F:76
Authority key identifier: BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88
Certificate issuer: /CN=A91D3A26/serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
Manifest number: 06C7
Signing time: Mon 02 Mar 2026 00:12:54 +0000
Manifest this update: Mon 02 Mar 2026 00:12:51 +0000
Manifest next update: Mon 09 Mar 2026 00:12:51 +0000
Files and hashes: 1: vq_Hury3142eGQgg9ussfyi7XYg.crl (hash: 05jrwtVNxIk4aTcd2HlgOohMQhnLDwKLjeYFqF2lEOY=)
2: 63D1B4C0929E11EBABC48F60C4F9AE02.roa (hash: a+SAxUax00Aux4Ru2ZD3x1LZ7jjXqCc4p7lgWPYqsms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl
rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3A26, serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88
Validity
Not Before: Mar 2 00:12:51 2026 GMT
Not After : Mar 9 00:12:51 2026 GMT
Subject: CN=69a4d605-01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:ba:03:2a:1b:e1:57:4e:e6:6e:2f:86:30:
f0:a3:58:04:ad:3d:c1:1a:51:1b:51:ad:5e:12:e8:
53:fa:3f:d4:8a:3c:5d:4b:be:06:3b:ee:6d:00:89:
7b:5e:a8:db:bb:5c:e6:ab:a4:5a:de:96:00:85:b1:
dc:56:75:67:01:16:f7:a0:64:21:a8:f5:26:75:c1:
38:b2:04:2b:4a:f1:28:7e:35:8c:7e:cf:07:a7:ce:
6d:e3:5f:af:be:38:a1:b6:94:66:14:45:63:57:8f:
a3:50:23:b8:20:37:5c:22:cb:ab:d3:59:82:30:98:
cf:c7:6b:34:20:aa:3c:d5:db:cd:5d:3e:18:ee:52:
8f:db:9c:22:bf:77:d0:e9:b9:9d:72:f9:ae:69:8b:
59:34:bf:b2:04:d0:0f:b9:2c:4c:b4:55:d1:f5:89:
44:a5:cd:35:16:41:fc:fd:ee:52:64:de:e0:1b:50:
72:72:8a:98:a2:b1:c7:50:15:f7:5d:8c:27:c5:df:
49:c0:6a:f0:c2:92:13:3c:ec:3c:f1:8a:87:46:40:
fb:e4:86:4f:76:ee:2b:82:ce:b9:0e:a6:9f:5d:5d:
4e:d3:dd:b0:1d:f2:79:0a:17:dd:bf:41:8e:2b:c1:
51:30:79:f3:18:b5:28:69:f0:4b:86:c4:31:88:18:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:FA:6A:09:34:7C:90:8A:5F:DA:D2:2D:CA:E2:86:F8:FD:7F:76
X509v3 Authority Key Identifier:
keyid:BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:da:35:78:a3:ff:c2:84:f0:6c:83:91:d3:e7:d5:8a:18:71:
95:2d:cf:cf:ed:26:fd:8e:c4:b4:38:59:bb:e5:cb:1e:97:ca:
94:dd:1a:38:c7:e0:b1:16:c7:24:fc:fd:70:ac:27:05:a6:df:
dc:76:f8:4d:9f:7f:69:87:74:76:90:50:c5:00:a3:d1:39:f2:
cc:bd:de:ae:a3:3c:4e:0f:15:b4:ef:b9:c8:cc:e5:f4:11:f0:
5b:ed:53:f2:25:2f:4c:4d:9d:60:2d:47:c1:d9:10:bf:a0:ad:
cc:02:6c:ed:47:41:f2:f2:ca:d1:2a:11:84:fc:a7:c4:d3:36:
a9:35:c5:53:d1:d7:dc:4d:f3:d8:f6:8c:47:e1:11:af:de:66:
52:25:45:c0:56:70:1a:97:64:73:bd:21:e0:75:aa:1e:94:7d:
96:42:b3:94:aa:9f:81:6e:88:38:6e:44:17:1e:e2:cc:66:af:
34:ee:1f:e1:e4:25:76:b5:19:08:91:93:5f:a2:d7:d6:d4:c4:
6f:9c:ca:f8:3c:eb:37:0a:ea:f3:35:90:d0:9c:4c:d1:01:3c:
69:76:8b:a0:1a:a4:36:82:6b:d5:14:49:f0:48:23:4a:64:21:
50:72:be:40:21:fc:fd:6c:76:cd:3e:52:b3:56:45:db:dc:a1:
ed:4d:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:36 2026 by rpki-client