
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier: C/GgVoftc/KioqHBXY9v5lLWBQGkYTW6zD8C3IlKRDA=
Subject key identifier: EB:FE:A7:1E:FB:F0:66:F0:A9:AF:FB:9B:95:11:6A:C4:6C:44:E7:8A
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number: 01B7
Signing time: Thu 23 Jul 2026 05:34:34 +0000
Manifest this update: Thu 23 Jul 2026 05:34:34 +0000
Manifest next update: Thu 30 Jul 2026 05:34:34 +0000
Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: vll01MDj7we//P0TcxFzy0lOKORQq5Os0ygsLRowerY=)
2: 222F2952038511EFAF036327C4F9AE02.roa (hash: HZRnbyUwQnET2jpBCqochXqkW7Om1vxMBHDxZVfLQkE=)
3: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: 2HF8hzKomEoBRaeHEpMuKIt1BoUXvbnhjONs7ASQa/o=)
4: E08658208D2D11F09327643FC4F9AE02.roa (hash: Zswp5eu2rF+6Fd4nXskCbsKQjQ2SU+1TTxWHA8wR0Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Validity
Not Before: Jul 23 05:34:34 2026 GMT
Not After : Jul 30 05:34:34 2026 GMT
Subject: CN=6a61a7ea-f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:5c:6c:c0:2d:30:48:53:1f:4b:89:3e:1c:
43:d4:b9:29:4b:29:6b:5d:b0:e7:bb:a4:5e:66:65:
b1:25:93:02:19:8f:ba:1b:dd:58:4e:77:59:57:70:
27:92:9d:ca:70:d6:be:7f:cd:6e:46:44:5a:f4:79:
ff:d1:df:c2:94:4d:23:d7:05:24:ef:68:5d:08:2f:
06:48:81:1a:9c:80:4e:1b:06:af:25:5c:d6:7b:5a:
c8:3e:df:f7:fc:bc:e3:c1:80:f4:b7:73:b3:e1:49:
2e:5d:af:69:5c:20:59:02:76:d4:97:e1:1e:97:4e:
ee:47:76:d2:eb:eb:a3:03:99:96:49:b3:11:93:43:
e2:a4:f5:8f:46:af:19:ec:40:e4:1c:2b:ac:e2:5b:
c1:74:4c:aa:49:fb:93:34:29:5f:d2:61:5b:4e:19:
1e:c6:bd:19:b9:5f:ec:b6:13:1b:59:e4:b7:d4:f4:
68:54:49:cc:44:aa:5b:fc:3b:f8:59:4e:ac:f4:8f:
af:ae:f3:54:3d:8d:1a:9a:12:64:5c:8e:1e:0e:2f:
31:35:20:57:36:9d:f9:00:27:4f:7c:4d:a6:06:72:
66:70:af:39:98:f4:95:68:23:47:5f:79:a7:6e:37:
2c:55:5f:18:26:b6:84:16:96:25:75:69:b5:28:6f:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:A7:1E:FB:F0:66:F0:A9:AF:FB:9B:95:11:6A:C4:6C:44:E7:8A
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7f:8f:26:12:cc:86:12:6f:b1:85:ce:01:eb:e0:cf:08:1f:
ca:f9:4b:c3:3a:3f:dd:89:d9:71:e1:82:c2:2f:12:56:a9:40:
39:d9:79:e6:18:d5:b8:c5:cb:7f:39:4a:37:6e:b6:07:8c:9c:
26:a3:04:97:0e:1a:24:e8:cb:de:4e:6d:b1:f5:67:32:52:96:
22:ff:98:d8:f6:cb:d6:cb:21:38:83:e9:e3:d1:c9:84:5e:b3:
c2:dc:25:1d:a6:17:96:96:87:cf:01:bc:db:48:b5:6c:4c:41:
9c:17:46:65:f4:7b:fa:c7:a7:58:c1:11:45:a3:df:8f:11:88:
0e:c2:c6:a4:a7:e3:40:b3:fd:82:95:6c:8b:89:9a:a3:d0:b0:
1a:8c:f2:e8:eb:80:f4:92:c3:d4:c2:2c:c6:42:97:e0:9d:70:
a3:e5:9d:b4:bb:fa:96:61:0e:fa:06:d7:4a:67:f5:e4:16:f1:
bf:72:02:21:15:e1:f6:b4:8c:29:0f:e8:00:01:32:a3:69:c1:
b6:f6:23:20:ff:78:9f:33:c6:c8:46:59:0a:15:de:68:e7:ab:
9c:0f:21:3a:df:26:c5:cc:78:d5:67:c6:39:51:a6:93:73:fa:
28:70:ff:a6:35:6b:b7:b9:a0:6b:c6:6e:89:0c:6e:8a:cc:cc:
91:5a:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:17 2026 by rpki-client