
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
File: VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json)
Hash identifier: xKgxX5GQ+5XCBvT70MIvAdBQwxiUd1DpDq9pFyERGms=
Subject key identifier: 15:8D:62:67:75:8E:8C:81:69:47:BB:43:BE:F0:34:19:57:BA:13:98
Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE
Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
Manifest number: E3
Signing time: Mon 11 May 2026 06:40:19 +0000
Manifest this update: Mon 11 May 2026 06:40:19 +0000
Manifest next update: Mon 18 May 2026 06:40:19 +0000
Files and hashes: 1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: 5a9LXW3SMqziSGGZW++5eoEuxgCAldHMdaiVi94IcOo=)
2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: QwSj57WxC7TB25I/8HX7ku8jZUCgQ6cEZ8ddjhtIf0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl
rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE
Validity
Not Before: May 11 06:40:19 2026 GMT
Not After : May 18 06:40:19 2026 GMT
Subject: CN=6a0179d3-7e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:98:62:c2:bc:8b:e2:86:a2:67:df:54:30:
dd:65:9f:8e:4e:8c:45:f0:8c:85:87:b9:4d:31:70:
13:b4:7f:1b:65:b9:db:73:fc:91:be:6a:aa:50:a7:
c6:ef:3c:be:25:60:59:e0:64:1e:a5:2b:da:b5:72:
14:fc:bf:62:85:dd:23:2d:8b:15:d9:1e:07:5f:c3:
a4:c1:0f:ba:98:ea:f4:1b:70:0e:05:00:2d:e0:e1:
c7:eb:d1:1c:f7:21:60:d7:a0:bf:82:7a:a8:c5:d2:
12:ac:ec:20:1f:c9:de:67:63:e0:88:5c:3a:5f:10:
5d:ef:32:00:e4:7e:64:96:27:a2:35:02:43:dc:fe:
6b:ec:7e:2b:67:1c:05:f7:20:d0:a0:d2:18:d3:41:
30:b9:a7:6f:79:88:fc:7a:50:91:b0:9c:06:be:a2:
4d:e1:1b:65:db:09:d0:20:e3:9d:14:d4:6f:ea:ae:
a6:85:4d:19:10:16:ae:b8:a9:6e:79:f5:1f:3f:16:
08:e5:37:37:51:48:fa:b1:b1:0f:46:63:93:5a:44:
34:9a:8a:6c:fb:76:f2:c5:80:03:75:93:9f:be:74:
61:32:f0:45:cc:0a:30:46:9a:69:d3:0e:93:b6:d4:
c3:bd:a7:46:df:e7:64:36:24:91:d3:1c:68:6c:10:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:62:67:75:8E:8C:81:69:47:BB:43:BE:F0:34:19:57:BA:13:98
X509v3 Authority Key Identifier:
keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:db:0d:60:7e:a4:c5:43:2f:04:3d:8c:6f:f9:a7:4e:64:49:
fe:a0:27:62:7a:cd:1f:c5:bd:9c:6c:31:bd:21:b2:2a:aa:1a:
25:bc:24:45:2b:1f:a5:1e:06:78:f0:62:76:55:99:5a:84:b1:
8f:44:9c:da:18:d8:60:f7:af:14:b7:3e:dd:76:cf:3f:9f:0a:
d8:cd:85:ff:f0:ce:ed:a5:33:ac:30:77:c7:e1:80:df:d0:69:
f8:d4:9e:e3:29:ae:b6:0d:36:35:5d:04:2a:c8:88:eb:55:ea:
18:78:3b:74:a7:26:ab:98:70:4d:d7:0d:c2:c6:06:df:9d:be:
4d:a7:7b:03:6b:85:a6:92:6b:87:2d:32:3f:a2:48:5b:0d:34:
ce:87:9d:97:80:8c:4f:de:fb:f5:35:f5:5e:3d:97:63:8b:20:
89:84:37:4b:40:f6:12:83:92:b9:24:65:67:c6:7b:0e:4e:4c:
40:19:39:73:54:20:de:9e:52:bb:21:da:7f:32:b6:a4:3e:af:
8f:3a:13:55:87:3d:73:1d:49:23:fc:8c:ec:53:77:15:79:58:
39:3d:ef:1b:14:54:01:c6:2e:7a:6e:6a:0b:fd:24:47:13:ce:
fd:4b:fe:d9:92:eb:44:2e:f7:fb:0a:60:9c:5c:af:ac:74:7f:
1d:05:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:09 2026 by rpki-client