
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json)
Hash identifier: IKrr5K81oYl8G8PbPdDataxtDK0UZdDS/JGkyEuB+wE=
Subject key identifier: FF:5C:27:47:E8:59:C0:FD:AF:BA:E3:68:3F:01:B0:B5:06:38:65:43
Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
Manifest number: 0197
Signing time: Wed 25 Mar 2026 03:38:01 +0000
Manifest this update: Wed 25 Mar 2026 03:38:01 +0000
Manifest next update: Wed 01 Apr 2026 03:38:01 +0000
Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: K0/Hkn3LW+L3sNfc3HZasup2MNYph4gGHs/9YKc5WsM=)
2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: s2McCJvzrvLO2L5m921n+BYOsXPsp44AliQovvr+vWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl
rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Validity
Not Before: Mar 25 03:38:01 2026 GMT
Not After : Apr 1 03:38:01 2026 GMT
Subject: CN=69c35899-013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:9a:a7:f8:ba:91:d4:3b:2d:e6:da:e8:53:
88:de:9c:20:e0:83:3e:59:39:ed:a7:6b:d1:ce:c7:
10:56:cb:eb:55:00:88:3a:85:01:4e:50:98:a9:51:
db:d7:40:65:a4:af:6b:8a:02:ab:ce:41:13:d3:85:
bd:7c:de:8a:e4:69:e0:b2:c7:88:f9:92:ce:7b:da:
81:f7:a2:1c:9d:0c:35:ec:09:f6:29:02:c4:35:00:
9c:cb:80:37:90:4e:65:7b:6e:72:53:9e:8b:0e:34:
08:9c:a9:51:50:3e:c7:02:a1:51:c6:c6:61:c6:54:
1b:3b:d7:f5:2e:92:a9:f6:4b:c0:bf:7f:d7:3e:bf:
91:cb:31:f4:a9:56:8c:12:57:36:a2:d1:08:b8:78:
12:d8:44:48:20:68:2e:a0:8c:03:90:33:0a:d7:80:
3e:14:0c:b7:9f:57:6b:b2:88:d4:23:80:06:3d:69:
68:aa:e7:b1:b9:74:bf:0c:da:b2:58:f5:47:2a:9b:
19:9c:f7:4f:e1:45:50:f5:e6:92:ce:2f:ff:6f:e3:
9f:c3:d9:18:f6:21:c2:32:12:db:93:20:e5:85:72:
59:4d:fa:44:47:2a:22:8a:20:0b:63:18:ea:c2:c3:
a3:2f:3f:da:df:13:c4:8a:a5:b4:ff:95:42:63:e6:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:27:47:E8:59:C0:FD:AF:BA:E3:68:3F:01:B0:B5:06:38:65:43
X509v3 Authority Key Identifier:
keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:73:19:ea:81:5b:44:3c:73:a9:a6:e0:be:17:f0:98:1a:d2:
bf:b0:bd:3b:ed:51:4b:d1:36:10:38:ff:29:97:3f:33:78:c4:
71:ee:d9:cc:53:9d:c3:68:d0:a9:8d:e7:28:52:a6:11:5b:0e:
d6:e3:d1:71:45:f7:7e:2e:a0:e1:d5:67:ad:6b:7e:f5:47:78:
38:bc:8f:df:53:c1:02:85:be:12:6a:45:81:b9:8a:c6:54:f9:
e6:ec:d8:f9:d6:70:35:25:51:2b:8c:06:2d:0c:c6:c0:a9:d0:
c2:2c:06:01:ad:92:f5:5d:95:a1:29:73:fc:5a:45:fc:69:22:
f7:47:93:91:87:c5:44:b1:ce:68:f0:1f:8f:23:c2:25:53:5c:
11:78:35:5a:aa:f5:aa:9f:ed:82:6a:3e:b1:1d:6a:73:08:d8:
41:da:17:50:c0:88:f0:f2:dc:21:b8:95:10:19:c9:a3:97:16:
c7:bf:6b:ba:17:9e:a9:71:32:7b:1c:11:aa:f8:0f:94:ab:70:
48:47:f3:5f:93:95:36:0f:01:0c:7f:41:72:b0:65:66:8f:f9:
56:80:68:55:4a:b6:8e:f8:fb:15:7a:42:ec:cf:e9:f2:fe:84:
a6:7d:4b:6e:38:ef:23:39:32:7a:54:a4:49:03:ae:bc:95:da:
75:c3:69:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:16 2026 by rpki-client