
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier: LHsMioNxxuzHBVUgkvK6U4Hbysw/lU5D7EvQTbkJ/EI=
Subject key identifier: 50:46:04:C9:89:E2:64:E8:BA:C7:08:43:80:A7:6E:28:DD:D5:F5:28
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial: 08B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number: 08AE
Signing time: Sat 14 Nov 2026 20:30:35 +0000
Manifest this update: Sat 14 Nov 2026 20:30:35 +0000
Manifest next update: Sat 21 Nov 2026 20:30:35 +0000
Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: eTc89/DyW+SwlVH7IehVtZcKFQJj6UxIVW74mMDvtVM=)
2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: c52POv1l+IxL+X32oaXtqiMTTJbwhKIWuZtTDidGWio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 20:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Validity
Not Before: Nov 14 20:30:35 2026 GMT
Not After : Nov 21 20:30:35 2026 GMT
Subject: CN=6af8c4eb-3a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:b4:53:d0:50:54:2a:94:b2:62:4d:90:15:
4c:bb:6a:33:7b:f9:db:a2:18:2d:94:dc:96:bc:7d:
8e:35:03:29:bc:e6:91:0a:42:92:7b:62:14:ef:1a:
ab:fe:f2:4b:19:c1:b4:7c:60:99:af:58:4e:05:7d:
49:94:28:e5:97:f0:54:51:2c:9d:41:df:28:6c:51:
0b:3a:76:e1:b3:b9:cd:81:9d:ef:7c:d8:5a:9b:0f:
80:23:05:85:dd:3b:f2:8e:46:62:c3:75:3c:9e:0e:
71:d8:64:64:60:65:d5:fc:a2:b0:7c:71:38:5b:4d:
17:b4:ff:60:6f:4c:ab:61:a8:f7:dd:08:8e:fd:4a:
10:98:97:4c:01:97:37:77:63:99:8a:76:45:07:70:
81:c3:dc:48:db:96:fc:50:e8:d3:a2:23:ce:8f:7f:
ae:02:4c:6e:20:08:99:8d:9f:51:9f:ad:15:af:27:
27:29:8c:4b:4b:12:c8:a4:02:82:58:2c:90:cf:1a:
58:51:3b:f9:da:44:fa:71:b3:06:a7:83:68:bb:8d:
66:cb:4e:0a:d5:7e:1e:f8:0f:0f:15:49:d3:eb:8c:
d9:cf:94:6e:a8:80:8b:4a:b0:f9:4e:aa:7e:c1:bf:
02:3d:8a:4a:1c:d4:bb:24:38:e4:5c:4d:96:92:69:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:04:C9:89:E2:64:E8:BA:C7:08:43:80:A7:6E:28:DD:D5:F5:28
X509v3 Authority Key Identifier:
keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:e4:d6:e8:f4:c0:cd:d0:9f:33:e8:96:16:2f:86:00:44:
20:57:95:a3:56:82:dc:12:59:ec:7a:e4:10:6b:38:76:d6:67:
9c:74:28:06:75:59:7c:cd:6d:fb:9e:70:94:7d:1d:f2:1a:a9:
f1:6c:e7:81:e8:df:d1:8e:c7:e9:fe:44:d9:eb:97:21:f6:e3:
dd:61:11:24:1b:06:2b:cc:2d:fb:df:75:26:5c:e1:2d:37:75:
a7:0a:c3:6c:c3:fc:a5:fe:bc:f6:41:af:b4:9c:af:b5:64:dc:
f9:99:9d:f0:72:ad:09:65:c5:a6:cd:53:41:1c:29:53:b6:d5:
52:d3:d1:b0:27:ea:a0:b4:f8:b9:e4:b8:60:47:48:26:a8:5d:
62:c2:4f:83:06:9c:56:a0:a7:05:dd:fb:9d:ce:43:8b:4c:78:
a1:8c:12:04:dc:f7:aa:f8:64:94:76:93:f9:28:23:3a:83:a9:
91:56:6a:f9:1c:a1:f3:0c:d6:3f:0b:2f:c3:ed:7e:3f:50:2d:
f5:bc:2a:06:0d:1e:77:ed:ee:eb:ad:46:44:f2:d3:38:0a:0c:
f5:05:19:06:47:4a:bd:58:ad:a1:ac:3c:c6:bb:e7:c6:05:1d:
77:ec:d5:0b:9c:69:2b:22:a9:1f:bf:b3:15:44:27:62:c9:38:
86:14:e8:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy
ODk1RThDODAwHhcNMjYxMTE0MjAzMDM1WhcNMjYxMTIxMjAzMDM1WjAYMRYwFAYD
VQQDEw02YWY4YzRlYi0zYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoXG0U9BQVCqUsmJNkBVMu2oze/nbohgtlNyWvH2ONQMpvOaRCkKSe2IU7xqr
/vJLGcG0fGCZr1hOBX1JlCjll/BUUSydQd8obFELOnbhs7nNgZ3vfNhamw+AIwWF
3TvyjkZiw3U8ng5x2GRkYGXV/KKwfHE4W00XtP9gb0yrYaj33QiO/UoQmJdMAZc3
d2OZinZFB3CBw9xI25b8UOjToiPOj3+uAkxuIAiZjZ9Rn60VrycnKYxLSxLIpAKC
WCyQzxpYUTv52kT6cbMGp4Nou41my04K1X4e+A8PFUnT64zZz5RuqICLSrD5Tqp+
wb8CPYpKHNS7JDjkXE2WkmnM/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBGBMmJ
4mTouscIQ4Cnbijd1fUoMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3
OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE
WXREOW41SzhBR29vbGVqSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABmfk1uj0wM3QnzPolhYvhgBEIFeVo1aC3BJZ7HrkEGs4dtZnnHQoBnVZfM1t
+55wlH0d8hqp8Wzngejf0Y7H6f5E2euXIfbj3WERJBsGK8wt+991JlzhLTd1pwrD
bMP8pf689kGvtJyvtWTc+Zmd8HKtCWXFps1TQRwpU7bVUtPRsCfqoLT4ueS4YEdI
JqhdYsJPgwacVqCnBd37nc5Di0x4oYwSBNz3qvhklHaT+SgjOoOpkVZq+Ryh8wzW
Pwsvw+1+P1At9bwqBg0ed+3u661GRPLTOAoM9QUZBkdKvVitoaw8xrvnxgUdd+zV
C5xpKyKpH7+zFUQnYsk4hhToIQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:33:55 2026 by rpki-client