
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json)
Hash identifier: +MaQOso35vJlm4ewqf141aoQ2FfQGeNtF/sdTHLxOzI=
Subject key identifier: 27:68:8E:04:05:60:D9:83:54:67:68:5F:40:0E:C0:E6:29:A4:94:B1
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
Manifest number: 027C
Signing time: Thu 26 Mar 2026 19:33:18 +0000
Manifest this update: Thu 26 Mar 2026 19:33:17 +0000
Manifest next update: Thu 02 Apr 2026 19:33:17 +0000
Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: JI8DhZxA2UEvhN/NBEIEAiTIK/Ot2ywI00d1AW4FtcU=)
2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: WdYTpOxwaQ+j+4KBzA/L+jmy1fW724k61VLOBUYqe/g=)
3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: or57mv8ZhngJVzct5ohW9eT9dxQJSb4OczHWwGVKrtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Validity
Not Before: Mar 26 19:33:17 2026 GMT
Not After : Apr 2 19:33:17 2026 GMT
Subject: CN=69c589fd-b352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:f8:2d:71:be:85:15:72:84:20:ae:fe:16:
c6:52:46:6d:54:62:d5:58:5d:77:34:f9:69:e2:65:
e6:18:f9:29:d4:68:f5:70:8a:4e:82:8e:ce:37:08:
8e:34:03:50:b6:ba:88:3a:be:3d:1b:17:27:e4:c0:
ed:3e:b0:7f:f5:fb:d0:d5:03:d3:49:f1:7d:b9:85:
e6:3f:db:62:30:f1:49:f8:f8:a4:c3:49:65:21:f5:
40:c1:82:91:01:26:26:92:ec:b7:e1:4f:1f:f2:a4:
0c:8b:e0:a2:40:0b:41:0a:fc:d4:56:a0:04:68:48:
70:ac:ed:32:33:04:b4:36:e8:44:9a:70:59:7a:52:
cf:bf:aa:96:5d:a1:35:41:66:27:9c:4a:8e:ff:b8:
0e:e6:1f:86:47:df:e1:94:70:aa:13:0e:5b:4f:2a:
12:d6:11:ff:65:ef:66:4b:aa:95:38:6f:59:79:7c:
cd:b3:e1:6e:eb:77:65:22:c5:cf:70:84:f6:73:46:
ee:63:48:bf:a4:69:36:b7:1c:70:12:a9:dd:6b:e2:
57:98:95:48:bc:d6:22:5f:83:b5:7b:b8:9e:fd:77:
69:3d:87:a8:8f:b5:fc:0c:dd:6e:87:ee:4f:f9:44:
b1:4c:21:f9:97:ee:79:1b:b9:cb:73:a1:f6:22:59:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:8E:04:05:60:D9:83:54:67:68:5F:40:0E:C0:E6:29:A4:94:B1
X509v3 Authority Key Identifier:
keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:40:63:d3:2d:4d:f2:26:0f:a7:52:cb:7a:34:7a:e5:3b:b7:
66:55:77:dd:00:d3:a7:cd:d4:d1:87:31:7b:9a:5e:a3:6d:04:
e5:2c:d2:ff:97:19:1f:8e:4e:61:a9:25:9a:60:11:8d:61:80:
f2:a3:1f:db:d6:4f:3e:c4:46:df:e7:d3:99:ff:c3:fe:86:39:
1c:9f:e7:e9:3b:a5:5d:84:2f:fe:ed:df:a8:d4:b6:e8:82:47:
2e:55:94:7b:47:8f:b5:b1:d7:50:8d:32:0f:12:cd:5f:cb:78:
08:76:07:74:37:49:a8:66:84:da:6e:df:f6:c3:23:75:d0:0b:
51:f1:b0:86:bf:2e:eb:5b:1e:1d:c2:e9:1b:91:99:e2:6e:c3:
76:b3:c0:06:7b:0e:d2:00:cd:0e:37:d1:02:b3:db:aa:fa:cb:
42:59:f7:61:10:e6:00:24:40:60:9d:1d:9f:e6:0e:58:27:5e:
f0:05:54:6c:5f:4a:18:10:2b:49:2b:81:d8:fd:18:eb:13:4e:
d5:48:cc:8b:97:75:d5:4a:88:fb:c9:1d:94:f6:95:ca:4f:29:
13:b3:ed:a0:01:39:06:23:35:fb:60:2f:42:b2:0f:36:9b:5a:
75:74:db:0f:16:c7:71:28:48:9c:67:1d:21:c1:f5:16:a6:21:
40:f6:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:49 2026 by rpki-client