
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json)
Hash identifier: Y0mhHpBR4fXdnLlmpK9iGs4yuNp5jPkVQAYM8ADII5U=
Subject key identifier: 0E:7D:B2:03:C9:3B:11:0E:BF:37:88:5C:5B:8D:FA:83:5B:FE:8A:7E
Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Certificate serial: 0CAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
Manifest number: 0CA0
Signing time: Tue 12 May 2026 18:35:27 +0000
Manifest this update: Tue 12 May 2026 18:35:26 +0000
Manifest next update: Tue 19 May 2026 18:35:26 +0000
Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: frG/nHanNuXiLVIKGbJN1AsImVBmxoRhvGaDmigwblQ=)
2: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=)
3: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Validity
Not Before: May 12 18:35:26 2026 GMT
Not After : May 19 18:35:26 2026 GMT
Subject: CN=6a0372ef-5fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:64:ff:2f:35:59:a7:94:26:f0:50:b4:6a:
a6:e3:45:52:b2:7c:c5:ba:f4:08:31:78:1b:c1:bf:
ab:b7:6b:6b:13:56:5b:5d:04:e7:f5:df:bf:da:f7:
5f:99:f1:85:52:de:af:24:c4:30:c3:2d:89:c5:75:
f1:83:07:03:fe:de:5c:45:95:71:f9:bf:b5:c0:8a:
83:5d:15:3f:3f:cb:5e:09:dc:78:9a:91:91:80:cf:
27:e3:32:42:52:ba:51:f0:64:53:21:42:19:d2:1c:
6f:66:c9:2e:c2:c9:b7:29:98:47:91:6d:38:1c:7b:
20:71:6f:ee:3b:68:01:ea:ef:e6:c2:83:f9:ee:75:
ff:8d:58:ae:22:06:31:d3:6c:93:dc:68:f0:ce:81:
5c:9d:03:ee:0c:f9:c0:01:b0:af:53:01:ae:a9:95:
95:ca:75:6b:87:f1:82:d2:0f:24:bb:66:fb:4e:8c:
9e:cd:9a:8f:7f:1a:35:8e:8a:64:a5:10:46:a4:c9:
a8:9e:01:60:c3:2e:81:4c:b7:34:d6:57:ef:9b:56:
03:e9:eb:bb:1c:79:78:fa:1b:35:e2:ab:8c:0a:8f:
a4:3d:44:85:89:13:b8:86:33:33:6c:9f:c7:a1:39:
14:f3:7b:f6:8e:53:e2:1f:b6:39:b2:11:6f:20:74:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:B2:03:C9:3B:11:0E:BF:37:88:5C:5B:8D:FA:83:5B:FE:8A:7E
X509v3 Authority Key Identifier:
keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:cd:59:df:f1:6c:d2:99:4b:3e:95:99:38:dc:e5:a9:47:bb:
49:f1:58:fd:9d:9d:78:eb:6d:93:8f:69:21:07:0d:f4:1b:8b:
c3:14:74:22:75:3e:74:c8:7c:42:61:e0:91:61:65:39:87:62:
ff:c6:88:74:4e:b2:32:b9:24:a9:ec:0f:3a:2a:d4:72:af:9e:
16:49:b9:c4:77:82:7a:d5:7a:4e:3b:07:fa:c1:01:6f:c1:6a:
fc:27:b6:1e:ee:0d:90:74:07:79:18:51:3f:ce:42:24:0a:10:
30:99:29:96:bc:4e:17:21:cc:88:97:1c:b0:01:74:22:c7:dc:
64:15:39:8c:02:0e:74:b2:66:83:7d:6d:8c:8d:ed:95:db:08:
91:1f:08:a8:58:7a:78:10:f8:90:7c:ea:16:0c:c0:d2:03:a9:
88:61:53:0c:64:29:08:1f:3c:30:61:45:ce:51:9c:0e:e2:4d:
f5:f0:9b:94:99:2c:86:0b:fa:b9:87:99:15:82:37:c8:35:37:
42:6d:89:b0:22:1c:83:63:fb:15:5f:9d:7b:e6:5f:eb:64:f4:
2b:e0:c6:82:4b:4d:c2:f4:19:ac:63:3a:4f:8c:24:12:1f:c2:
e3:79:bb:ee:66:47:67:38:a1:5e:29:f3:c4:e0:0c:43:44:0f:
5f:3f:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:40:54 2026 by rpki-client