
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier: 1E8QkN556vvRWCCROOVQVX4wLJQ7ubCKowq0MMcouMU=
Subject key identifier: 4A:64:9A:06:91:91:3F:CA:9D:F6:8D:2F:2B:26:F1:21:CD:E4:FB:0C
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number: 0234
Signing time: Fri 25 Sep 2026 02:54:06 +0000
Manifest this update: Fri 25 Sep 2026 02:54:05 +0000
Manifest next update: Fri 02 Oct 2026 02:54:05 +0000
Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: MiK/+KmkfFAcG7JVuHHDR485XP0II3wlsN5kHUlYR2c=)
2: EE44E774314411EF956C0046C4F9AE02.roa (hash: jhzn7pm2Oogh8gj6C2Cv0eiikNgVIXN0z6pwnFp/58g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Sep 25 02:54:05 2026 GMT
Not After : Oct 2 02:54:05 2026 GMT
Subject: CN=6ab5e24e-5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:f9:0e:61:af:75:2f:c3:7a:19:1a:ec:75:
87:7d:e9:2b:56:46:27:7c:46:a1:8f:62:bb:40:4c:
51:22:bf:e5:52:0c:e0:38:8b:ab:c2:6a:6b:87:31:
b6:d5:be:fb:cb:7a:96:5b:42:2a:2f:4c:e7:1e:61:
f8:00:99:49:55:f3:2a:c4:81:62:b4:06:54:4d:7c:
b0:90:9c:cb:1e:56:96:18:a2:f5:50:8d:2d:0c:1d:
f3:3a:ad:9e:9a:b5:1d:b1:39:20:7a:11:99:b7:28:
ba:aa:19:52:35:98:ee:0d:a2:0f:fe:16:82:56:fa:
71:2b:5d:df:e5:85:5f:7c:ed:b2:58:ac:c1:23:69:
8e:5c:2f:cc:e3:fa:62:00:6d:ca:f9:29:82:81:73:
85:a6:42:a8:ac:a1:9c:1c:0e:69:03:f3:d6:c6:bc:
83:8c:bd:13:9e:df:a1:88:6a:4c:93:ac:96:a9:39:
f5:23:1b:a4:ee:bc:3d:e6:0d:ad:34:b9:bd:4a:bb:
4f:33:15:97:cf:db:bc:11:32:9e:4b:ac:ef:cd:ee:
50:98:26:d8:c5:c3:2f:6f:c7:ef:e9:5d:69:45:c4:
df:6a:d4:e4:5b:60:9e:a7:e8:db:86:fd:51:b4:9c:
81:42:f1:82:83:a0:3b:11:9d:a3:4e:42:c3:6a:3e:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:9A:06:91:91:3F:CA:9D:F6:8D:2F:2B:26:F1:21:CD:E4:FB:0C
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:72:85:80:58:81:5c:e3:dd:45:be:a3:b8:69:b4:3b:e2:98:
b6:dc:e9:09:30:28:b3:cf:8a:38:d0:79:7d:06:3c:44:7b:11:
f8:8e:8a:a0:9c:1c:80:e2:0d:5c:32:e0:0a:63:b3:df:bc:85:
29:80:ed:c4:e3:15:f2:d6:48:8a:e3:cb:8e:d8:04:e3:f8:3f:
44:6d:34:72:44:b3:5b:a2:53:e8:98:d3:cd:12:29:61:2e:f8:
72:97:89:b7:69:8c:5f:b9:bb:cf:71:d0:16:bb:85:a5:e3:f1:
fe:54:f9:5e:1b:d4:4e:3a:b4:2d:49:b1:1f:b4:8c:2c:8d:f3:
8a:3d:56:ec:c8:c3:56:08:ef:ee:15:b8:56:93:e8:00:b8:6b:
b5:0f:4a:9a:42:51:bc:4f:55:ad:72:1a:fb:ac:b2:f5:c5:48:
44:64:9c:30:1c:f3:15:33:b4:0c:4c:dd:fe:09:93:2e:2a:84:
a5:9b:7c:2c:58:54:f1:bc:80:d0:c7:cb:f8:c6:e2:3c:e1:a9:
fa:e0:dd:1f:f3:18:c2:1b:e0:04:e2:ba:77:16:30:c6:4b:3f:
7e:49:d5:48:8b:af:ee:c2:06:4d:69:2a:70:a8:e8:7f:28:c8:
1c:80:39:9c:4e:af:ec:3d:4e:f5:e7:d6:10:11:f1:a6:ee:01:
47:18:4a:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI5QTUxMTAvBgNVBAUTKDU2RjkyOEM3MkE1NzI4QzE3QTk4MjUxMDlCQkJCNzIx
MDMxM0JCQ0EwHhcNMjYwOTI1MDI1NDA1WhcNMjYxMDAyMDI1NDA1WjAYMRYwFAYD
VQQDEw02YWI1ZTI0ZS01ZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbv5DmGvdS/Dehka7HWHfekrVkYnfEahj2K7QExRIr/lUgzgOIurwmprhzG2
1b77y3qWW0IqL0znHmH4AJlJVfMqxIFitAZUTXywkJzLHlaWGKL1UI0tDB3zOq2e
mrUdsTkgehGZtyi6qhlSNZjuDaIP/haCVvpxK13f5YVffO2yWKzBI2mOXC/M4/pi
AG3K+SmCgXOFpkKorKGcHA5pA/PWxryDjL0Tnt+hiGpMk6yWqTn1Ixuk7rw95g2t
NLm9SrtPMxWXz9u8ETKeS6zvze5QmCbYxcMvb8fv6V1pRcTfatTkW2Cep+jbhv1R
tJyBQvGCg6A7EZ2jTkLDaj7qgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpkmgaR
kT/KnfaNLysm8SHN5PsMMB8GA1UdIwQYMBaAFFb5KMcqVyjBepglEJu7tyEDE7vK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjlBNS9FMjlFNzM2MDdB
MTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtNRjZtQ1VRbTd1M0lRTVR1
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjlBNS9FMjlFNzM2MDdBMTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtN
RjZtQ1VRbTd1M0lRTVR1OG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYHKFgFiBXOPdRb6juGm0O+KYttzpCTAos8+KONB5fQY8RHsR+I6KoJwcgOIN
XDLgCmOz37yFKYDtxOMV8tZIiuPLjtgE4/g/RG00ckSzW6JT6JjTzRIpYS74cpeJ
t2mMX7m7z3HQFruFpePx/lT5XhvUTjq0LUmxH7SMLI3zij1W7MjDVgjv7hW4VpPo
ALhrtQ9KmkJRvE9VrXIa+6yy9cVIRGScMBzzFTO0DEzd/gmTLiqEpZt8LFhU8byA
0MfL+MbiPOGp+uDdH/MYwhvgBOK6dxYwxks/fknVSIuv7sIGTWkqcKjofyjIHIA5
nE6v7D1O9efWEBHxpu4BRxhKZA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:04:38 2026 by rpki-client