
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier: xfo7yeZkFNXGlIUmdDZ9YD/sAceKridJebJ+g1M2HF0=
Subject key identifier: A1:73:BC:A9:FA:4B:9B:E4:FE:B0:CC:FF:87:BD:98:B7:A1:B0:8A:B8
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number: 89
Signing time: Wed 25 Mar 2026 06:49:48 +0000
Manifest this update: Wed 25 Mar 2026 06:49:48 +0000
Manifest next update: Wed 01 Apr 2026 06:49:48 +0000
Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: dw1IprXQePf7z1BGaG7TTXkEQDDzyzVPPNMJntI/h0Q=)
2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Validity
Not Before: Mar 25 06:49:48 2026 GMT
Not After : Apr 1 06:49:48 2026 GMT
Subject: CN=69c3858c-ca38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:63:4a:a9:26:80:55:ac:13:49:d7:0b:ac:
c1:42:8c:f2:b6:eb:e6:df:52:b3:8c:90:d3:a3:e0:
92:b9:78:79:07:38:02:ea:5a:d2:39:d7:c7:c2:71:
00:5c:69:16:bd:14:f9:f1:33:d2:4e:a2:fc:81:d8:
99:0a:04:17:0b:47:42:ef:29:27:d5:51:6a:e0:78:
ba:48:eb:2b:c4:38:6f:26:95:0d:57:76:f2:28:9b:
4d:c0:4a:48:37:9c:95:84:30:74:98:f9:98:a5:29:
6a:10:07:2d:b5:35:94:74:46:3d:bb:1c:18:c2:86:
d6:76:62:b8:26:8a:a3:44:cb:32:24:83:9c:54:ae:
12:be:25:4c:55:62:30:09:89:5d:36:11:af:2c:9f:
17:6e:fa:10:a4:79:df:2b:d7:ce:a1:3f:a3:58:54:
ed:6b:fc:a0:d7:cb:8d:05:28:69:c3:f1:26:e6:22:
86:30:b9:0e:56:03:6b:9b:82:30:67:7d:50:db:95:
02:0a:cb:40:d7:1d:95:d7:dc:f1:7d:26:37:da:81:
c5:c8:49:45:8a:1f:24:94:d4:7f:54:18:4a:d0:87:
0a:3c:77:a7:23:72:35:c1:f7:ae:9d:d6:87:91:e5:
8b:8a:52:0e:3a:78:95:4d:08:52:e4:a0:03:e7:d5:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:BC:A9:FA:4B:9B:E4:FE:B0:CC:FF:87:BD:98:B7:A1:B0:8A:B8
X509v3 Authority Key Identifier:
keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:52:43:93:56:1d:9b:93:a1:67:0e:cb:f5:98:f5:0f:95:e3:
ef:ea:77:53:95:44:cd:7b:a4:48:7f:ea:d1:c1:05:16:7f:71:
59:0b:92:51:bc:2a:ea:36:a5:74:c4:4f:35:b8:b8:83:b4:c2:
67:8d:22:bb:67:b1:1a:fc:d6:83:ae:7d:c7:05:5e:62:91:7e:
aa:1a:a2:e7:7e:ec:43:62:66:b0:e9:03:86:8f:86:ff:5d:83:
10:c5:a2:43:48:64:82:4a:57:48:0a:17:dd:3c:1c:f9:84:7f:
4e:86:99:d8:d6:58:1b:9c:55:89:6c:9f:a6:ad:61:13:f7:79:
07:da:79:17:e4:5d:0a:2b:e8:be:b7:05:3a:92:e0:7c:30:7b:
f1:8f:23:20:ea:b4:99:c8:01:04:91:e7:72:14:67:96:d8:55:
8f:05:5c:81:a1:0c:95:7b:88:1b:27:f8:48:48:d3:d8:60:99:
28:9f:4a:39:8d:71:69:e0:ef:44:c7:8a:a2:d7:78:30:4b:94:
c8:14:69:a7:2d:05:c5:85:7d:3b:e6:7a:02:a4:49:fb:ef:5f:
ad:a5:32:cf:35:59:9c:2f:0a:db:7b:d3:62:52:69:d1:ea:62:
40:93:a2:6e:f2:bb:e7:2c:5b:28:47:c6:82:ec:49:62:c1:76:
83:17:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:18 2026 by rpki-client