
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier: aP7i+7J2gKMdhUSG19uh/pte35BMwS+MiISDzuNu8jQ=
Subject key identifier: B1:1E:DB:DD:84:E8:2F:14:59:CE:AC:BC:10:5F:00:43:B3:AF:B4:BE
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number: 0193
Signing time: Mon 11 May 2026 04:37:30 +0000
Manifest this update: Mon 11 May 2026 04:37:30 +0000
Manifest next update: Mon 18 May 2026 04:37:30 +0000
Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: bd5qBtGm/trLG7VAPDRmD1ZFbUQcdnRNBKgLYGWgdMM=)
2: E08658208D2D11F09327643FC4F9AE02.roa (hash: Zswp5eu2rF+6Fd4nXskCbsKQjQ2SU+1TTxWHA8wR0Rg=)
3: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: 2HF8hzKomEoBRaeHEpMuKIt1BoUXvbnhjONs7ASQa/o=)
4: 222F2952038511EFAF036327C4F9AE02.roa (hash: HZRnbyUwQnET2jpBCqochXqkW7Om1vxMBHDxZVfLQkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Validity
Not Before: May 11 04:37:30 2026 GMT
Not After : May 18 04:37:30 2026 GMT
Subject: CN=6a015d0a-5a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:81:90:3c:93:b2:d8:18:81:30:4a:ed:cd:
91:06:24:b4:fc:35:fc:3e:1f:a1:e2:de:fd:c9:6b:
ab:1e:37:89:b7:9b:36:5f:6d:5b:97:f7:49:14:a9:
74:ec:15:78:b3:0f:2f:12:47:ab:6c:b2:13:2a:9c:
16:93:d5:e3:8f:15:51:3e:5e:65:da:44:2f:f0:6b:
04:82:88:2e:5a:8c:dd:2c:85:12:77:34:7b:2e:34:
52:8b:b5:78:14:c8:62:de:ee:51:d7:8d:1b:7e:0f:
be:c6:31:29:f2:e7:67:1c:1c:3e:43:8a:92:ac:de:
57:21:25:60:74:19:4c:d1:be:52:f7:5f:f7:f3:91:
c4:68:5f:a3:e2:7a:07:a1:b1:67:1b:28:08:d2:6a:
d2:33:97:2f:9a:4b:ad:5f:4f:e6:36:04:c9:b5:a2:
b6:f7:2d:d0:29:19:e6:62:e0:57:b2:ee:2b:8b:c0:
17:08:92:2d:84:76:94:f6:dd:7a:18:27:a6:78:0d:
07:93:ea:ae:c9:32:bb:56:08:2c:9c:57:50:d9:ad:
34:5e:ef:a9:4e:b2:61:00:6a:3f:56:91:6c:3d:d9:
f1:5d:7b:a6:cb:ca:f4:76:26:a8:a9:ec:03:1d:76:
41:eb:88:13:d8:95:4a:35:70:74:e5:01:fc:54:2b:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1E:DB:DD:84:E8:2F:14:59:CE:AC:BC:10:5F:00:43:B3:AF:B4:BE
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4c:1c:5e:14:79:70:bd:8e:95:10:b5:74:a2:43:ff:42:2c:
7b:38:c3:4c:b8:e6:f0:e7:ff:d9:d0:a7:df:07:16:6b:66:91:
79:f6:0a:58:de:fb:39:42:96:98:0b:a2:8e:d1:96:c9:8a:cd:
c5:cb:a8:85:8a:91:ea:20:4a:f1:8a:ed:d0:3c:b3:c2:02:e1:
57:59:e0:39:8c:f4:54:32:45:32:7a:b1:f4:c1:86:df:04:c9:
4b:ee:b0:5b:28:bf:9e:3e:b1:a0:99:75:2b:d4:40:c2:38:87:
0c:bd:82:a5:ce:7f:8a:2d:c1:41:52:20:14:f6:7b:8e:30:5a:
79:2b:00:ed:5d:53:32:72:9b:a9:ae:4e:f3:d5:b6:9c:d6:24:
e9:0c:c0:cc:95:05:93:04:b8:0e:4d:78:3e:f4:72:9b:fe:99:
54:66:10:3c:f8:93:63:38:09:4e:93:cd:eb:d6:bd:7b:2f:84:
6c:76:5a:b4:1c:59:3f:94:af:3f:1d:6f:9d:c1:63:da:36:bc:
5e:15:6e:83:f2:79:c0:d0:d0:9f:cc:20:4c:1f:73:a3:c5:f3:
aa:27:95:64:1d:99:a4:98:df:86:f8:f1:f4:8f:cf:30:28:97:
f2:2e:4e:77:f3:23:9f:15:ff:29:f7:98:e9:73:40:8d:ba:12:
b1:9e:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:04 2026 by rpki-client