
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier: 95BWWdYoZdMIhCSame7F7mrtXmPAYbvjXC3e87NDjKY=
Subject key identifier: CA:6D:82:37:1F:B6:CE:16:EB:05:D8:DD:C0:57:44:FC:50:E8:4E:C1
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial: 2287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number: 2274
Signing time: Tue 22 Sep 2026 15:48:18 +0000
Manifest this update: Tue 22 Sep 2026 15:48:18 +0000
Manifest next update: Tue 29 Sep 2026 15:48:18 +0000
Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: Y6Cf0H1RamgMiBJzA/gEB7tUQu20Dnfhe3UOtcjaqzw=)
2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: HwypahBFkKbW/pB8Pd+gaE4/P/VRHrxmO2AZ+Ty59Ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8839 (0x2287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Validity
Not Before: Sep 22 15:48:18 2026 GMT
Not After : Sep 29 15:48:18 2026 GMT
Subject: CN=6ab2a342-2a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:fb:54:22:44:04:5c:52:4e:ac:67:67:7d:
e8:c8:39:86:a2:df:ce:e7:f4:8b:2f:14:19:16:a6:
5e:d1:a8:4d:55:ab:e6:8d:20:ee:8c:cf:a3:71:a5:
bc:79:67:42:cd:4e:58:b1:25:b2:03:bc:6d:9a:70:
2d:8a:09:dc:c5:18:1a:26:bd:f9:bb:33:56:6e:9a:
ff:5d:8a:eb:a8:be:d6:e2:72:4b:1d:52:15:79:18:
d3:dd:90:8c:ce:f0:2b:05:9d:67:f1:a4:93:cf:51:
87:12:3c:59:86:6a:4b:95:71:65:ee:f0:5a:20:9c:
0d:35:c8:25:97:23:f1:e3:c8:46:e0:81:ca:62:ec:
87:b9:1d:12:2a:32:06:7a:27:50:07:94:3c:51:65:
4f:5b:f4:98:b9:be:61:df:1f:ce:38:f9:5f:c9:f2:
d6:12:59:a4:53:a6:2d:50:f6:40:fc:05:11:d3:7a:
e7:7d:bb:25:a5:34:5f:e5:c9:ea:d6:84:93:38:9b:
1c:03:11:f8:72:39:36:92:17:34:ea:c4:e8:a5:4b:
a1:4d:7c:30:6c:9e:e5:99:f0:2b:ad:31:eb:03:48:
18:ee:9c:97:e6:f7:ce:ec:72:0c:8b:da:df:ba:d4:
77:1e:cc:41:9a:d0:50:4e:77:3a:87:19:3e:a8:ff:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:82:37:1F:B6:CE:16:EB:05:D8:DD:C0:57:44:FC:50:E8:4E:C1
X509v3 Authority Key Identifier:
keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:f2:37:98:38:8d:e9:d5:9f:cb:8f:5f:71:e5:4d:01:99:f9:
1a:63:7a:d8:80:aa:7d:f0:ff:35:61:ed:b1:0b:90:f5:5f:bc:
c4:b1:f2:52:c9:99:1b:5b:d8:ac:7c:de:9c:51:e2:3f:30:b2:
86:14:a9:12:b1:d8:d1:bf:d4:5c:65:32:ae:86:64:08:3a:a1:
e0:39:28:a9:02:86:27:c4:60:6e:45:f8:c9:1f:ca:7e:f6:b6:
9d:7a:d1:1d:fe:5b:ed:3e:7a:26:d0:b0:9d:74:32:31:71:bd:
ff:0b:bd:55:e2:f7:a6:5a:fe:7e:c9:58:8d:1b:58:a1:af:9d:
41:8f:7a:46:f1:e0:00:c1:ef:87:36:aa:54:57:a7:21:eb:1c:
6b:dc:23:f8:d5:ed:df:83:36:0c:e5:ce:e9:7e:8b:f0:ea:93:
2e:bb:11:ff:1e:4b:07:ef:3b:ef:0e:8b:1f:78:c4:22:43:8b:
0b:39:9a:8c:b7:0a:5c:ee:ca:93:26:7a:80:ce:2c:2e:ff:c6:
cf:26:87:da:df:7b:c9:8f:4c:2d:4d:aa:fd:40:79:22:d4:b1:
eb:32:d8:b1:0e:d7:9c:c2:6d:4d:22:e9:3b:70:04:c4:e8:e8:
fa:9b:8e:67:42:7b:59:aa:f0:05:79:b2:59:fc:01:36:cd:9d:
42:fb:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:02:40 2026 by rpki-client