
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier: xkUdxNXaFmdOBoj0dnfDOAW6nK39Q+w1C3fNmqnBb9k=
Subject key identifier: 53:E6:AB:82:85:CC:D7:D4:CA:1C:E9:E4:F3:68:0B:C2:01:F0:20:A5
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 361D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number: 35E2
Signing time: Sat 14 Nov 2026 14:56:22 +0000
Manifest this update: Sat 14 Nov 2026 14:56:22 +0000
Manifest next update: Sat 21 Nov 2026 14:56:22 +0000
Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: QHAB7cRgkcBa0O6W74wIpdhFTdyfoq1e4LVaMGV0Q/U=)
2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
3: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
4: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
5: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: id2mRaIy2h7nVg/sc/ikSWNLePF2FrfpCr04A5Jbft8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13853 (0x361d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Nov 14 14:56:22 2026 GMT
Not After : Nov 21 14:56:22 2026 GMT
Subject: CN=6af87696-81f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:12:6b:f2:0d:21:87:8a:39:06:f5:48:d8:
4d:a0:8f:7b:e1:fa:2c:1b:74:61:f0:cb:f8:6e:98:
5d:f2:49:3f:8f:91:2f:80:01:39:f0:64:65:0c:f7:
e1:64:94:a3:92:af:ba:88:a3:00:f7:4a:46:ae:12:
c3:b9:71:fa:66:62:33:4d:2e:6d:9c:e5:fd:0f:09:
1c:d0:d3:b0:19:f1:61:f7:d3:f9:93:61:25:3f:95:
49:c0:c5:9a:d0:f9:1c:a7:7a:3a:93:33:f2:4f:98:
31:4e:3c:d3:18:ef:fe:c0:a7:5f:6a:c0:4c:ce:03:
d2:e1:78:d6:7f:ce:51:9e:73:d8:87:ff:9f:fa:17:
d5:e2:15:17:eb:05:a4:26:fe:2d:aa:28:e5:30:63:
1e:26:5d:b4:b7:f3:50:84:fe:9c:ea:d8:30:58:1d:
c1:ea:34:a1:1d:cb:bc:a7:d6:89:9b:3b:12:ff:c2:
fc:d9:6d:fe:50:3c:61:96:29:b7:2a:b6:2a:bd:77:
96:49:87:15:7b:28:f6:4b:b5:fd:22:02:29:fb:15:
d9:7e:67:f7:4e:69:7b:61:45:7a:f3:c0:b0:d4:b3:
74:58:49:8d:09:22:40:8b:f0:f6:25:da:b4:bd:28:
e1:e5:0d:8b:10:27:d7:3f:9f:43:17:3a:b0:a3:8f:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:AB:82:85:CC:D7:D4:CA:1C:E9:E4:F3:68:0B:C2:01:F0:20:A5
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:70:40:62:38:e0:89:d8:86:4f:ce:2c:86:a6:e5:0c:1e:78:
08:fb:91:55:19:21:93:ce:36:f0:a9:dc:1f:1f:da:57:6c:e6:
07:30:c2:35:1b:a3:cb:ab:da:c9:54:2b:c7:ba:c2:78:60:83:
2b:c8:77:b0:73:2b:4d:94:29:cc:53:ab:73:6b:bc:56:73:a1:
3e:18:59:d2:70:c0:30:fb:ad:13:02:4d:4f:a4:c3:f5:00:2e:
24:95:de:19:a5:d8:6d:ad:6d:da:e8:ee:6b:0c:a4:02:34:c2:
df:47:35:c0:63:73:93:93:a9:7b:38:03:0c:f5:ca:43:fc:0c:
5e:7b:bb:fa:fc:21:fd:eb:cc:05:b9:a4:37:e4:d0:24:27:df:
b4:d8:d9:8d:34:4a:c4:72:a7:10:66:b8:a5:cd:5f:be:e8:72:
af:29:1b:57:45:f2:07:6b:b9:cf:cd:b6:7d:01:1f:8f:2c:26:
7f:f5:b0:6e:a8:3f:18:84:96:86:fa:58:07:7e:68:6d:eb:f3:
2b:65:f1:b1:54:1f:91:30:86:da:d4:06:ac:69:f9:57:b0:54:
59:6e:1b:c1:71:36:bb:e5:b7:b2:a2:1c:a8:81:19:9c:96:26:
63:07:79:01:64:e7:23:3b:12:d2:7e:f6:fe:b7:e3:8f:be:7d:
ae:85:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:58 2026 by rpki-client