
$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier: 6X0Fc1o/eDiodyTsW2OIeOmWOOK5ljiJZUejdd+Cmb8=
Subject key identifier: 38:ED:8C:44:38:E1:06:73:10:61:09:C3:0F:70:1C:C3:2D:7B:ED:0E
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 05D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number: 05CA
Signing time: Wed 22 Jul 2026 23:49:16 +0000
Manifest this update: Wed 22 Jul 2026 23:49:15 +0000
Manifest next update: Wed 29 Jul 2026 23:49:15 +0000
Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: iNHSpG/trJ3nDBE1wygmuL+mqZrnq7muSGGAglJ3oNI=)
2: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: C9httljUzii7v4u7kHINBjQrOE0KE6l+urPuufPCT3I=)
3: D575368892D011F0B767031EC4F9AE02.roa (hash: +49R+niUVHEGa6s++c9bW33UyinzUzW6Yjq4fPcKfcU=)
4: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: NB4pzvyV9P+LNJLml35IfgjAiIeJce8vTwXZQXDxhRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1495 (0x5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: Jul 22 23:49:15 2026 GMT
Not After : Jul 29 23:49:15 2026 GMT
Subject: CN=6a6156fc-fb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:3a:5f:c1:d4:a5:3e:68:5c:34:79:58:fd:
bf:e5:1d:22:29:d1:fa:ea:a9:e8:3f:51:a8:92:32:
05:f3:53:02:36:ef:ed:31:b6:7f:fe:a9:7d:46:b0:
09:19:1b:6d:1d:ea:90:6a:33:ff:fc:ca:86:ae:01:
09:37:67:48:56:3d:da:07:e8:22:d1:30:06:c6:34:
97:c5:52:61:b6:3e:71:ad:9a:b1:f4:25:d9:9e:7f:
cc:5f:54:6a:c5:43:d7:cc:e6:c4:3d:a2:65:02:65:
a3:48:4d:9c:4e:65:6f:03:5d:33:2f:c9:c0:02:5a:
1f:c5:3d:14:13:1a:cd:5e:39:6d:3e:b2:0d:4c:bd:
ba:9f:1b:2a:49:2a:b9:b5:42:78:78:9f:d2:65:87:
c1:32:90:2e:bb:b1:e7:c9:df:92:b6:a5:e0:e9:e5:
c4:3c:98:a1:64:6e:e7:46:aa:61:a3:fc:aa:ff:e0:
8b:7b:0b:07:6d:2c:7c:70:73:5c:c7:3f:1a:78:0e:
eb:d0:7c:31:2b:22:49:25:a0:02:3e:66:07:22:57:
e6:4f:e7:35:52:01:b7:74:70:fe:d5:1e:16:57:c7:
8d:9b:41:ad:36:52:c1:a9:b3:c1:31:cd:59:37:77:
96:06:d0:2d:a3:d8:91:05:61:8d:68:77:66:bd:f2:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:ED:8C:44:38:E1:06:73:10:61:09:C3:0F:70:1C:C3:2D:7B:ED:0E
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9b:e1:d3:df:6c:c7:18:e8:59:61:08:e2:b8:8a:93:d4:f8:
ec:83:37:7d:31:6c:b6:ab:4e:0f:a2:2c:2f:2e:ff:8f:ec:dd:
e1:92:e9:27:75:86:b8:08:4b:7b:ca:bb:51:56:dd:f0:e4:e0:
69:84:f4:e4:41:35:eb:71:14:ee:7a:df:fb:0f:f1:eb:80:06:
28:3b:33:0e:53:67:9c:93:8e:fc:b2:78:e9:51:31:68:15:9b:
bd:fa:3b:6f:91:13:8f:05:88:1b:47:96:fc:7c:95:10:81:c0:
a3:87:0e:20:57:30:0a:64:52:3e:41:7b:45:2b:78:87:df:00:
3f:7d:3c:1c:71:02:89:57:f4:71:26:04:71:bc:cb:78:6b:0f:
79:58:aa:c5:79:37:94:ab:1c:4d:71:d1:5e:17:7d:71:fe:fa:
94:d0:41:5d:5e:e0:c2:9b:be:a2:cb:eb:95:7b:7e:39:d9:d5:
61:f3:61:57:c0:98:45:8f:1e:60:cd:90:56:fb:5f:43:4f:1a:
10:64:ac:d8:29:24:65:f8:9c:a8:e1:08:4c:b1:c9:18:23:a8:
9d:25:7c:7d:83:88:5f:93:24:31:ea:5b:29:73:6f:d3:1e:55:
26:e3:f7:e5:c3:80:7a:dd:6d:a3:43:aa:1e:c6:65:8f:5e:38:
66:1a:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:15 2026 by rpki-client