
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json)
Hash identifier: sMIJ5P4YBWoeRekVME/Nnh8gVYJH+BaY4CzmZWDLYuc=
Subject key identifier: 65:16:BD:3B:53:A9:3B:5B:C8:4C:D6:43:E0:CA:FA:58:2F:9E:A2:4D
Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
Manifest number: 0800
Signing time: Thu 16 Apr 2026 21:15:20 +0000
Manifest this update: Thu 16 Apr 2026 21:15:19 +0000
Manifest next update: Thu 23 Apr 2026 21:15:19 +0000
Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: RkZaZjiUrQU01/iW9UWvQMvZVxBOa9oP3lHNlFZ7aPU=)
2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: zwaIVuRApbY9s1XyqtW/uqvzs4vi0AfgJgFNST/nhro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Validity
Not Before: Apr 16 21:15:19 2026 GMT
Not After : Apr 23 21:15:19 2026 GMT
Subject: CN=69e15168-23de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:16:3b:9a:9a:53:fd:1b:86:a4:ec:d0:8a:
64:ff:91:69:f2:f8:df:ca:ab:c6:b1:1b:97:0c:aa:
40:61:38:24:a0:2f:1c:0e:8c:37:e2:7e:25:95:27:
9d:86:04:53:c4:c7:c0:cc:19:92:7f:7a:9e:6c:99:
93:4a:06:01:13:c5:32:ff:ac:bf:bb:62:2a:bd:5b:
76:43:55:28:7f:70:ac:32:57:33:83:14:86:50:82:
be:91:fb:f5:94:f4:87:e5:47:b6:bb:d5:5b:30:4d:
63:c4:54:64:25:59:8c:93:d9:97:03:fe:bb:23:52:
4c:4c:a1:32:eb:64:e8:7d:0b:c8:59:a0:c6:c7:ff:
16:7e:6d:65:03:72:1c:a2:f8:e2:ff:1e:fb:7a:98:
da:0c:a5:4d:ee:3a:b2:a5:f6:c1:cc:38:3d:78:0c:
b7:cb:fc:b1:f4:23:06:c9:d4:34:29:fd:db:2d:55:
e2:ad:f9:bd:43:d1:ee:0c:89:da:86:44:6f:fd:58:
de:d3:da:4a:77:d2:76:97:a9:79:26:33:fc:30:aa:
6d:0e:1c:c4:5f:6f:d8:37:81:3a:76:a1:66:6e:92:
94:82:f8:27:e1:6a:19:33:00:c2:b9:85:ac:02:a2:
3d:6e:fb:60:bc:16:35:5d:0f:f6:26:13:8e:ce:56:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:BD:3B:53:A9:3B:5B:C8:4C:D6:43:E0:CA:FA:58:2F:9E:A2:4D
X509v3 Authority Key Identifier:
keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f5:2b:f6:cb:da:c4:4d:b5:3a:e5:45:7e:a4:cb:86:8a:1c:
6c:c1:3f:91:cb:38:d0:03:b2:bc:a4:4a:43:f6:a8:1e:7d:d5:
f9:ed:c3:0c:34:e1:43:fb:6f:35:c5:41:10:04:fb:c4:8a:39:
50:96:01:9f:69:9e:a6:e3:1f:1d:f6:66:fa:43:91:e4:c9:8f:
62:cb:64:d9:90:d7:16:be:60:5b:51:7e:9c:11:94:86:5c:26:
ce:d0:6b:6b:9a:12:1f:d2:e8:a3:5f:2e:6c:62:b8:40:ca:20:
e1:c3:e3:55:64:a4:8b:3d:42:cb:19:17:e0:ea:7e:6e:b2:f9:
bf:53:94:38:3c:2c:56:12:c0:c7:76:d2:10:20:48:ac:a3:48:
81:e4:28:d6:e7:71:70:07:61:46:2f:f2:30:96:14:96:ec:6a:
99:f6:2a:f8:ad:94:c8:3f:12:6b:1f:73:a5:e8:06:1a:13:c2:
99:5a:86:bb:92:45:ef:9d:0b:23:02:ca:9c:ef:66:7a:f4:12:
9a:88:f5:cd:39:5f:7e:2c:84:2d:a9:15:f1:5b:be:8a:7b:c9:
a6:99:83:c9:3d:ad:ac:64:0b:ec:f8:9a:29:24:34:bb:ff:c0:
61:af:10:da:a7:16:5d:ea:2d:77:1e:d0:e9:bc:c1:db:f7:ce:
66:e1:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:40 2026 by rpki-client