
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier: pkkG36szkMSTsvfDIp01ckMAMxbMEvAAFdcSdEgWShA=
Subject key identifier: F7:D2:6F:E1:91:B5:C4:4C:E0:5F:F8:B9:21:C3:FF:84:D9:12:C1:34
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 0601
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number: 05EE
Signing time: Tue 22 Sep 2026 22:39:21 +0000
Manifest this update: Tue 22 Sep 2026 22:39:21 +0000
Manifest next update: Tue 29 Sep 2026 22:39:21 +0000
Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: ksMDCstNL2uqdPjLgSzPoYdbhKm+GuiKNaryxGZViFA=)
2: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: +gAjMETIZVTwgsDFO2qKEqW2MhjTXO1u1mjqlUHpdbc=)
3: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: Vvhf+boCEpLuGGFJDAIh2MyKhZZB5ySRIuVYjKw5QFk=)
4: D575368892D011F0B767031EC4F9AE02.roa (hash: 24rhC/kI9813Kpf55FB3HQ+L1kbPoJIalWHTXjPeaO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: Sep 22 22:39:21 2026 GMT
Not After : Sep 29 22:39:21 2026 GMT
Subject: CN=6ab30399-72f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:ca:de:11:bd:45:40:b8:5c:53:b5:60:79:
da:8a:e3:05:e2:48:7c:ae:63:fb:3f:9f:1a:6d:cd:
71:d1:f2:86:28:c5:cc:df:b3:aa:44:46:f9:8d:5b:
bd:b4:54:98:81:e3:3d:74:da:d2:c3:4e:42:2c:38:
3c:a3:26:30:c5:6f:13:04:28:e3:b1:0f:57:a4:98:
62:02:0f:da:51:b8:4b:8a:fe:89:2f:32:11:e7:17:
69:71:79:aa:22:6b:af:e9:36:08:2d:60:71:3a:2a:
19:f4:a6:50:0a:77:c9:6f:89:44:3b:98:d4:79:54:
f7:5a:2f:d2:ef:36:e1:e3:41:a4:44:4d:6f:95:dd:
bb:04:14:01:42:71:6c:3d:84:e0:98:9a:f8:e4:fb:
09:c7:2f:5f:01:b6:9e:c9:0e:a6:c5:7f:10:b7:0a:
ea:4a:58:36:c0:bf:2c:56:44:59:bc:a5:6e:7d:4a:
95:7a:cc:36:50:a9:c5:b9:48:ce:f9:6a:af:55:e0:
25:b1:92:18:10:a9:c9:88:11:72:d3:d5:4b:0d:05:
56:89:46:32:67:a3:85:67:4f:7d:e7:14:58:f6:62:
8e:d2:42:d2:18:bd:34:9d:54:d6:18:42:57:f1:60:
55:c3:d2:48:bf:c6:7b:d0:53:6f:d9:c3:6c:ad:d8:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:6F:E1:91:B5:C4:4C:E0:5F:F8:B9:21:C3:FF:84:D9:12:C1:34
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a6:ad:b5:34:0e:6b:e8:53:39:77:77:86:57:1c:7c:b9:c4:
3e:10:15:24:a5:f7:74:3b:c5:e9:5c:de:87:42:38:31:4c:e3:
4e:83:74:a3:31:54:d5:ef:95:9a:00:31:5c:6a:7d:0c:2f:40:
3f:8d:d0:4a:3d:e3:d0:c1:89:54:d6:aa:5e:91:de:88:3e:ff:
70:f5:27:cf:91:a6:a4:b5:d4:c5:14:bf:8d:fd:11:7b:42:25:
a9:03:b3:9a:8d:c6:6a:1b:11:2f:5b:b2:db:f3:03:65:4d:20:
63:69:89:48:cb:f2:30:e2:52:af:0e:2e:af:82:af:75:b4:7d:
80:41:24:a9:77:29:1b:c2:74:96:96:12:e5:09:26:fb:38:c9:
7a:41:61:b4:1e:c6:fb:2d:27:47:6e:90:2d:64:9f:de:b7:be:
3e:58:1b:93:b0:17:a9:43:13:56:62:67:e1:aa:c3:bc:a1:5a:
8f:50:70:7b:87:c6:4a:f2:61:0b:40:8d:90:d6:54:17:44:18:
0e:49:1e:66:dc:bd:89:c3:35:58:16:aa:9c:7d:c9:e7:4f:d2:
d5:f2:28:1c:be:99:f1:d3:5e:e2:ab:14:0a:27:73:dc:c5:48:
7a:35:be:99:77:bf:5f:2c:d1:62:18:f1:ba:6f:e5:a0:b6:91:
33:c2:a4:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy
MzA2QTI4RTcwHhcNMjYwOTIyMjIzOTIxWhcNMjYwOTI5MjIzOTIxWjAYMRYwFAYD
VQQDEw02YWIzMDM5OS03MmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjE/K3hG9RUC4XFO1YHnaiuMF4kh8rmP7P58abc1x0fKGKMXM37OqREb5jVu9
tFSYgeM9dNrSw05CLDg8oyYwxW8TBCjjsQ9XpJhiAg/aUbhLiv6JLzIR5xdpcXmq
Imuv6TYILWBxOioZ9KZQCnfJb4lEO5jUeVT3Wi/S7zbh40GkRE1vld27BBQBQnFs
PYTgmJr45PsJxy9fAbaeyQ6mxX8QtwrqSlg2wL8sVkRZvKVufUqVesw2UKnFuUjO
+WqvVeAlsZIYEKnJiBFy09VLDQVWiUYyZ6OFZ0995xRY9mKO0kLSGL00nVTWGEJX
8WBVw9JIv8Z70FNv2cNsrdgr8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfSb+GR
tcRM4F/4uSHD/4TZEsE0MB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0
RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK
c1Y4QzFST2JvR3NqQnFLT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaqattTQOa+hTOXd3hlccfLnEPhAVJKX3dDvF6Vzeh0I4MUzjToN0ozFU1e+V
mgAxXGp9DC9AP43QSj3j0MGJVNaqXpHeiD7/cPUnz5GmpLXUxRS/jf0Re0IlqQOz
mo3GahsRL1uy2/MDZU0gY2mJSMvyMOJSrw4ur4KvdbR9gEEkqXcpG8J0lpYS5Qkm
+zjJekFhtB7G+y0nR26QLWSf3re+Plgbk7AXqUMTVmJn4arDvKFaj1Bwe4fGSvJh
C0CNkNZUF0QYDkkeZty9icM1WBaqnH3J50/S1fIoHL6Z8dNe4qsUCidz3MVIejW+
mXe/XyzRYhjxum/loLaRM8Kkwg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:50:51 2026 by rpki-client