
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier: 2K/29oKo8P+/M/epfqvBAcAwGCFsuKrTrpWlPF3Ewjw=
Subject key identifier: D0:F2:15:BD:B8:7A:2E:09:A4:24:03:C3:88:39:59:5A:03:A6:27:DB
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number: A1
Signing time: Mon 11 May 2026 07:28:40 +0000
Manifest this update: Mon 11 May 2026 07:28:40 +0000
Manifest next update: Mon 18 May 2026 07:28:40 +0000
Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: z58B9fBXkOspetGEC+cKnZtvvAv3NLC+zB/ypFtHUDY=)
2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Validity
Not Before: May 11 07:28:40 2026 GMT
Not After : May 18 07:28:40 2026 GMT
Subject: CN=6a018528-c367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:b6:c8:5f:f3:57:85:98:a4:52:26:9a:a5:
a9:31:05:f4:c4:84:1e:77:18:2d:2c:23:de:0c:8d:
de:75:e5:82:28:35:b1:e1:28:03:d8:3f:a0:8e:fd:
18:1e:54:3b:25:31:d8:2b:12:dd:9f:3b:3e:9b:7d:
b6:2d:10:18:fd:e2:48:3e:79:4d:77:e1:c4:04:b3:
eb:01:40:1e:bd:ec:b9:ba:ef:4f:d0:db:f9:0e:c3:
7d:92:9c:cf:9e:6d:15:e6:3f:06:31:43:bb:b3:0b:
71:03:c5:85:d4:6e:9b:28:d7:2b:15:e9:e4:12:ea:
1a:27:3d:8b:a3:23:a2:40:a5:b5:49:2d:20:d8:ea:
14:20:1f:5d:7d:92:b9:fb:72:48:00:0e:7f:b5:54:
56:ce:3f:c7:91:87:08:5e:42:5b:b3:da:c7:2a:e7:
a0:c7:82:57:63:55:06:c5:90:88:42:5b:10:60:71:
25:8e:1d:4c:31:2c:b9:8b:82:c6:61:fc:cb:1f:87:
00:32:23:b4:19:3d:35:a9:c1:d8:64:55:40:c9:6a:
70:a2:e4:40:75:d3:99:f4:d6:b9:51:4f:6b:80:a1:
68:bb:e8:3f:38:f8:0d:61:c7:f1:7a:5a:30:0b:08:
7f:ec:b4:03:b6:ff:68:2c:e2:1f:83:8c:7b:15:27:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F2:15:BD:B8:7A:2E:09:A4:24:03:C3:88:39:59:5A:03:A6:27:DB
X509v3 Authority Key Identifier:
keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:38:86:9d:c3:e0:73:7c:14:db:a4:9a:2e:c4:83:f1:f5:90:
db:a0:78:50:50:43:a5:98:f0:7b:20:e5:a3:f5:0e:70:0e:dd:
67:30:2d:af:15:78:fd:f2:07:ce:83:21:ed:87:45:5d:51:b9:
04:7e:9b:df:c9:1b:0d:23:db:49:7a:ab:85:0c:30:42:ff:c6:
7c:0c:dc:66:fd:c0:4e:b2:86:22:4e:6e:2e:6e:03:1f:cc:30:
ce:1e:a8:ab:56:b5:4f:53:30:df:78:69:57:ae:b1:6b:a4:e4:
16:7b:c8:bb:ad:26:6b:27:fc:73:9c:dc:9f:6a:82:66:d6:0e:
ea:89:a0:46:a8:b1:45:9d:50:97:23:6c:59:3b:88:cc:66:4f:
07:0a:73:46:06:b1:a1:76:df:64:0c:64:64:ee:d3:47:d1:a6:
23:b2:df:1b:15:7a:e3:3c:4d:0a:b6:ee:46:9f:eb:8a:06:de:
15:5f:df:78:8e:bc:f0:0a:84:90:57:b3:d8:d7:46:6d:b5:f0:
08:74:e5:93:93:69:cc:05:81:93:d7:12:88:4b:f6:90:39:fc:
58:56:7a:1e:27:86:fd:8f:f2:50:75:ed:6e:d7:c3:95:7a:86:
81:b9:6e:23:8f:5c:f6:f7:6b:86:ec:4e:d9:8d:21:2e:6d:e3:
04:f8:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:33 2026 by rpki-client