
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json)
Hash identifier: tebBN4oFY5Zo1A2rEcJ+//lSP2qzl5Ymn18sPzLgthQ=
Subject key identifier: 3E:83:4C:74:A1:9F:68:78:D4:6C:D5:8D:67:D8:B7:42:82:C4:37:1B
Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
Manifest number: 01AF
Signing time: Mon 11 May 2026 04:07:08 +0000
Manifest this update: Mon 11 May 2026 04:07:07 +0000
Manifest next update: Mon 18 May 2026 04:07:07 +0000
Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: x6jiPK3iMK9+m4nzICTyqgYMDN1ar/yDIICF3b4yGqE=)
2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: s2McCJvzrvLO2L5m921n+BYOsXPsp44AliQovvr+vWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl
rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Validity
Not Before: May 11 04:07:07 2026 GMT
Not After : May 18 04:07:07 2026 GMT
Subject: CN=6a0155ec-38e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:4c:33:b5:8d:38:04:26:a1:2e:f7:17:14:
f7:35:0d:da:3c:60:75:85:52:ee:a4:56:61:6e:2b:
e9:19:fc:b6:ea:e1:7c:a2:69:15:75:96:07:a4:b3:
16:3f:c1:8f:64:6d:44:b9:f5:e7:b8:cc:77:c5:8d:
94:8b:90:30:e9:06:4c:92:5e:57:38:85:4d:56:53:
44:4f:4e:c5:e7:09:ca:6f:b3:32:4d:63:be:7d:3a:
44:2f:9c:ad:44:f4:71:fb:75:02:79:30:f0:dc:29:
d4:73:c7:5e:09:a4:87:75:06:1e:16:56:1a:fc:bc:
15:f6:b1:0c:7c:c4:75:3c:2b:e3:17:8d:21:8a:8e:
7e:df:78:d6:ba:66:8f:22:fc:ad:32:d6:9b:f1:ad:
11:17:bc:e1:93:03:5e:17:56:b4:29:ff:e1:e6:8f:
8f:da:7a:90:a4:42:52:73:83:6e:6e:b2:7a:75:35:
73:5c:fd:9e:b9:bc:e1:97:85:a8:aa:da:85:46:d9:
5f:71:2e:0e:96:5d:f7:86:42:20:f2:cb:87:3b:78:
03:cd:f5:ed:84:cf:94:9f:50:64:6f:47:79:12:31:
6c:b6:5e:02:dd:b9:8b:67:85:08:51:b0:96:4b:37:
02:e5:ee:01:5a:cc:52:a0:e0:ae:d2:b5:5a:ee:05:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:4C:74:A1:9F:68:78:D4:6C:D5:8D:67:D8:B7:42:82:C4:37:1B
X509v3 Authority Key Identifier:
keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:f7:14:aa:8c:23:e1:79:62:a7:79:38:db:36:dc:93:11:
21:c2:5b:d0:bb:b6:88:91:3c:2e:bf:b1:85:0f:c3:cf:6e:af:
e0:86:08:2e:10:8c:9e:d3:77:51:87:73:e0:75:8f:f0:27:5f:
28:fb:f1:13:6a:0a:c7:28:db:34:ad:8d:fe:e8:22:4b:81:5e:
84:a4:d2:7d:87:da:06:a5:54:76:d7:3f:e9:e6:6c:88:c2:88:
a6:aa:20:90:3b:09:10:de:83:20:fe:7c:ad:cc:9b:47:ef:ae:
f3:c8:18:d3:33:5d:f9:fe:41:a7:d6:45:d8:82:db:68:67:34:
76:4f:d7:b3:7f:51:84:95:d9:0c:28:1c:6d:26:f2:5a:01:77:
9d:be:22:04:14:51:92:d9:0f:89:ff:6c:8a:cf:be:48:f0:1f:
52:40:03:28:32:22:dc:e9:4a:7d:2e:68:cd:66:6c:78:69:08:
69:a6:a6:d0:b7:ed:7f:35:7b:27:be:3d:a0:92:dc:8a:d9:75:
71:d1:60:ab:2f:e9:7c:2e:a3:9a:dc:d3:57:44:38:a7:d9:c9:
b5:51:a3:ce:ad:42:91:ce:e0:dd:35:72:af:23:45:d2:35:db:
2d:2a:ee:17:99:46:44:e1:4f:07:3a:48:0a:62:53:75:0e:d2:
cf:a5:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:12 2026 by rpki-client