
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier: Q62kjCIOznx0eGQL+QG490/lmVUiPpfxzg5BXmW1+4k=
Subject key identifier: E4:73:57:0B:30:6A:33:64:86:53:CC:A0:5C:15:73:C1:4B:51:A6:07
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 3602
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number: 35C6
Signing time: Mon 12 Oct 2026 14:38:35 +0000
Manifest this update: Mon 12 Oct 2026 14:38:34 +0000
Manifest next update: Mon 19 Oct 2026 14:38:34 +0000
Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: wnfI0mPysjnKal6aBT/qaI0yZqBOc2kL+5JG/likR/0=)
2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: vtwMWBWJtSed875G1+wbpC+RKkrgpx2zfwNszIXKaRQ=)
3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: f1IGNhieFlad+lglHYXuxHBK/1cZW7IPzK8JCgEL25o=)
4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: PuiDctOuJlf4lt6A2dYZ1tgkERX2Xujv7L8tOvTc9eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 14:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13826 (0x3602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Oct 12 14:38:34 2026 GMT
Not After : Oct 19 14:38:34 2026 GMT
Subject: CN=6accf0eb-83a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:0c:a9:41:2d:f8:ff:7b:46:44:17:81:d3:
cc:31:a9:16:e4:cc:ad:61:e0:f0:10:a7:8f:06:56:
70:9c:85:02:05:2c:d1:23:0b:87:e3:cc:23:32:1e:
87:2c:cb:25:b7:4a:7f:7d:ec:66:3f:6b:3a:0b:5f:
ad:da:f0:1a:af:8e:0a:f6:4f:f6:15:1c:d1:64:32:
6e:8d:66:46:be:51:14:30:05:a3:f7:c6:a3:d4:50:
51:f5:b3:04:b8:04:37:78:4d:07:5b:3c:2e:2c:db:
b6:9c:af:57:6f:5f:c3:db:7a:cf:49:4b:76:05:b9:
3e:4a:7e:6c:5a:f5:5e:fd:50:d0:cc:f5:e2:a4:d9:
1a:de:30:74:20:b2:7a:88:69:38:04:89:55:dd:79:
6b:40:20:0a:d1:b2:7b:d6:53:36:66:49:06:e7:13:
5c:45:49:71:a2:e5:66:92:47:f6:d0:b2:33:6d:8d:
88:90:00:14:2f:1b:10:69:e0:7e:13:a4:bf:41:e4:
14:da:fc:53:75:38:a9:d3:e9:8f:91:d3:e9:d8:09:
65:78:11:31:66:7b:e8:0b:85:75:28:ed:5a:22:e1:
e8:c9:de:72:32:d5:20:7e:19:85:46:2a:50:65:11:
e0:e1:3e:7a:87:0c:14:70:a6:b4:c3:d6:b8:a0:05:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:57:0B:30:6A:33:64:86:53:CC:A0:5C:15:73:C1:4B:51:A6:07
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:d5:19:b1:9a:46:9e:f1:35:d2:1b:e4:ed:ad:4e:94:89:2f:
4a:09:df:49:a2:f7:79:39:3c:74:eb:cb:57:26:ae:cb:43:40:
de:79:94:b4:36:fe:fe:4a:c4:e9:10:33:08:45:de:dc:96:4a:
5c:5b:12:c1:a5:44:ad:a3:68:60:ed:19:32:65:a1:a8:7f:14:
6d:c0:49:e5:e3:1c:38:f8:1b:ff:e9:1e:05:8a:10:9a:0e:07:
a5:31:6e:5b:9e:a6:10:e2:70:a1:dd:31:45:31:f4:84:84:6b:
cf:21:b6:a6:05:01:6d:12:5f:02:cd:54:f1:c7:38:d5:4c:cc:
f9:62:5b:40:28:c0:e0:8d:90:79:be:a0:ee:36:42:b6:9d:f5:
10:3b:2e:63:03:b8:e3:33:45:29:97:61:57:75:df:84:3f:7e:
bd:dc:8c:a4:41:ad:9b:e0:37:79:47:7b:63:4c:57:e0:7b:c2:
91:43:60:0d:00:b0:97:e3:87:d8:81:98:0a:9c:41:46:a6:40:
87:db:fe:4c:fc:e3:a5:2e:2e:1a:17:a4:aa:fa:b8:20:f3:e3:
36:29:7b:11:e4:f9:18:68:49:23:a2:fe:32:d2:fb:48:dc:ca:
d6:c7:29:20:aa:9c:06:fb:b3:5a:be:5c:43:e2:c2:20:13:0a:
b1:93:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:16:28 2026 by rpki-client