
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
File: vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json)
Hash identifier: okhiFYUFOemXIv+nW+F4V3MDEmR+ba8a+2I0nNupfP0=
Subject key identifier: 3C:2C:83:C5:6A:25:58:5E:F7:7F:7D:D2:AB:D0:8A:DF:6F:26:3D:AC
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
Manifest number: 024E
Signing time: Sun 15 Nov 2026 03:06:59 +0000
Manifest this update: Sun 15 Nov 2026 03:06:59 +0000
Manifest next update: Sun 22 Nov 2026 03:06:59 +0000
Files and hashes: 1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: lZem/d6hZHsug28LaCiREWruYRDj2t+H1c48gpMgpi4=)
2: 3D33A78E5F1111F1AFE5B6756E47A888.roa (hash: yf2K2s3Am/Toqd2apF6RAEPXmyRmB0yJNRpcRG9CJ58=)
3: 762EB6264F9B11F194A82CDA98833773.roa (hash: 1Q8TzOrd7bxZcPvwHXJfzCmS+CXjieMNk+f602WDxX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Validity
Not Before: Nov 15 03:06:59 2026 GMT
Not After : Nov 22 03:06:59 2026 GMT
Subject: CN=6af921d3-2945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:14:0c:13:49:d0:97:99:bd:7f:ac:db:f2:
8d:3f:f1:eb:fa:1f:ff:f2:8f:da:bd:e2:fd:07:41:
41:6c:53:ae:f1:a9:cf:cb:23:5b:bb:04:8b:4c:b9:
82:64:75:81:46:a1:c7:87:e9:5c:b8:67:0b:da:eb:
74:d2:5d:e8:37:ec:a2:7e:70:36:d5:c0:da:aa:e2:
b2:b6:e5:a6:e0:f4:02:4a:64:c6:28:9e:41:69:f3:
3e:1d:8b:e8:3e:bb:2f:76:c5:e0:d6:f3:64:6c:aa:
0e:67:b0:18:30:07:22:24:d1:bb:bc:bc:b6:1a:dc:
69:be:de:fd:e1:2b:db:2a:b0:a3:3f:73:3d:19:60:
75:6c:06:c5:dc:1b:fe:c5:e9:8e:11:2f:34:76:ff:
91:3b:c1:f1:a3:52:71:21:5f:91:bd:28:51:79:9f:
d7:d6:21:13:9d:96:5a:c7:04:8a:56:25:59:6e:22:
b5:ee:3a:48:3c:fa:6b:86:4e:f3:3a:64:86:a8:10:
e8:ec:06:84:82:70:8a:34:32:4f:43:ba:ab:2d:87:
46:71:ea:df:6e:60:14:25:d4:4e:b0:76:8e:19:7a:
12:fc:df:da:54:c1:f5:97:44:84:e4:34:9f:bb:ca:
9b:e7:ed:65:6d:fc:22:06:39:ca:dd:a3:bc:f3:36:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:83:C5:6A:25:58:5E:F7:7F:7D:D2:AB:D0:8A:DF:6F:26:3D:AC
X509v3 Authority Key Identifier:
keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:a2:49:6a:00:b4:df:0a:ff:33:73:f0:e0:6e:a6:c8:6f:4e:
1c:f5:e0:22:4c:5a:f0:d6:d5:9f:c8:10:44:ee:55:da:dd:b4:
92:ec:0c:09:6d:b8:ca:78:bd:39:58:0b:43:d9:ed:d0:67:d8:
4e:9b:65:a5:0b:41:3d:97:f4:4f:7f:34:fd:bd:52:0b:6b:11:
47:87:75:19:7a:6f:0e:1a:70:b1:25:87:17:05:67:ef:ac:40:
dc:47:44:1d:31:20:bf:93:ed:0c:27:cf:fb:0c:ec:fd:f0:67:
8b:21:d7:32:9b:65:cb:c5:40:ed:a6:76:5a:8e:50:19:67:23:
89:c2:04:59:ae:98:c2:e0:e8:76:38:7d:23:9f:6a:82:b6:1b:
4f:11:f1:83:9c:4d:a4:f0:59:c2:fd:6b:28:c8:9b:a0:a4:3e:
1d:30:f4:df:77:77:4e:1c:30:bc:27:41:df:0b:75:81:02:3b:
d2:06:d6:3d:d0:50:51:d4:c1:a8:fc:93:b4:3e:38:91:3b:99:
25:1b:4f:04:72:6a:1c:10:f5:f8:0a:12:95:3e:d3:c7:7a:2d:
85:68:e0:b5:40:4a:e4:49:96:56:b6:09:9c:56:03:1e:bb:9c:
28:48:f9:b7:72:24:6c:c3:02:47:f9:f9:96:0f:3d:48:ec:8c:
df:bd:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:51 2026 by rpki-client