
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json)
Hash identifier: Ow8zRUZhyRpf8mUKWQ7GKO833nd2GY+zun6ggMpsitM=
Subject key identifier: 39:C6:6F:01:92:D7:EB:72:4C:1F:F5:12:97:5F:6C:17:68:57:1E:C6
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
Manifest number: 78
Signing time: Sun 01 Mar 2026 09:07:45 +0000
Manifest this update: Sun 01 Mar 2026 09:07:44 +0000
Manifest next update: Sun 08 Mar 2026 09:07:44 +0000
Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: vygAxYNl1QF4NnZXgq4L451COJ4R4cHTtngaocKaHIk=)
2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: mrKimEpRui8ah5BAXI71K2U6jAN339zQMmSaKZaFtrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Validity
Not Before: Mar 1 09:07:44 2026 GMT
Not After : Mar 8 09:07:44 2026 GMT
Subject: CN=69a401e1-f8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:a0:5a:ae:86:f5:fd:03:36:c0:29:80:3c:
9c:94:f1:69:c9:8c:ca:fc:51:71:90:1d:29:90:a1:
3a:2e:9e:ad:3e:a8:7a:0b:48:50:56:c9:12:05:7a:
06:ee:c7:c2:db:f0:bf:7f:ca:c9:dd:c3:82:31:86:
7a:07:c6:99:cf:40:f8:11:0b:e7:76:df:45:f0:fa:
b4:40:76:6f:08:34:27:26:eb:cf:ac:ec:2e:2e:93:
2d:ec:3e:f7:0e:63:db:5e:c2:fd:a3:91:79:5b:df:
6e:57:17:1b:32:a7:30:b9:43:8e:a6:ae:2d:fd:7d:
50:07:b4:34:d7:6c:b4:ef:ac:9e:fe:4a:73:5c:02:
b4:90:8d:4d:fd:cf:b1:de:ac:e7:09:ae:15:b4:0e:
07:61:01:11:7f:c5:65:8c:cd:a1:72:9e:fb:b2:56:
c4:1b:58:48:d4:be:d1:02:f2:3f:08:fb:c1:96:a1:
1f:48:1a:11:89:3d:32:2a:7e:17:d5:53:17:1a:3c:
c5:90:dc:56:48:66:5e:68:ad:9e:7f:6a:c1:82:03:
e9:64:1f:0f:b5:2d:2a:67:15:19:d9:fe:55:a4:df:
de:4d:48:83:5b:e7:ec:dc:50:ff:95:96:f7:64:a5:
e5:e6:b7:4e:b5:65:23:9a:44:39:0b:18:37:da:c5:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:6F:01:92:D7:EB:72:4C:1F:F5:12:97:5F:6C:17:68:57:1E:C6
X509v3 Authority Key Identifier:
keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:cd:3a:85:54:c7:b8:84:95:b7:51:9a:b0:70:d9:83:d9:71:
de:3a:7a:dc:c0:f0:cc:c7:68:ce:96:33:86:3b:b4:cf:12:f9:
cd:9a:72:ee:cc:40:c1:70:30:76:e0:67:6b:08:94:f0:f7:a4:
11:26:bb:31:75:3b:10:8c:16:9d:55:b2:8d:00:b1:f1:07:d0:
84:0d:15:75:8d:5f:79:5e:fd:cb:f6:82:0f:35:36:92:ca:68:
33:f3:ce:1b:7b:f5:cb:0e:d5:78:06:03:9f:ff:b2:bf:9e:a5:
bb:d9:29:05:3c:24:35:8d:22:4a:c7:0a:4a:7b:08:21:12:0b:
2f:b8:f5:91:27:a1:fb:75:b1:b2:a7:e5:2f:74:f4:94:5e:0c:
27:c7:5c:03:0b:28:1e:6d:6b:7b:4f:b9:4c:94:16:59:86:99:
9c:4d:f4:f8:e4:b4:03:f9:b2:9a:01:40:48:c7:c6:d8:aa:ce:
91:60:4d:d8:d9:1c:cd:cd:58:32:e9:df:9a:38:03:57:e3:7b:
3d:bb:59:4c:17:1c:23:b4:d1:ec:8d:86:b9:d5:7e:9d:b3:c6:
68:39:99:09:48:df:31:e6:21:4b:5e:32:18:9e:45:32:19:39:
54:ea:8f:cc:fe:c2:c4:2f:60:65:e1:7e:01:20:92:91:3c:8d:
a0:b7:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:33:49 2026 by rpki-client