
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier: q9VTVROZOI1KlYAWgE1jlyZCnABwJuFxKNq4Kp/SP4o=
Subject key identifier: 93:52:97:6A:C9:C2:E2:26:9F:2D:95:39:D3:DC:73:B5:7F:8D:F6:86
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial: 2347
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number: 2303
Signing time: Tue 12 May 2026 15:50:52 +0000
Manifest this update: Tue 12 May 2026 15:50:51 +0000
Manifest next update: Tue 19 May 2026 15:50:51 +0000
Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: 5+6cx98wOHUEwbgp6McComCAcY+5OYvouCeM8l44TEI=)
2: 815465903EB511E9881B6529C4F9AE02.roa (hash: +ANu6JmCUfWc/fEshVMRk/CtwPkSloyzKlXpU5KCY3Y=)
3: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: 1Kz1vE1HOF5/kl+i8Rr4tSzcXBMpG4BgFwTZXnp4/e4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9031 (0x2347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Validity
Not Before: May 12 15:50:51 2026 GMT
Not After : May 19 15:50:51 2026 GMT
Subject: CN=6a034c5c-6242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:2a:d1:13:a6:74:11:77:5f:51:e0:25:55:
09:75:b5:90:02:b6:25:7d:8c:ff:69:ac:ea:dc:43:
4f:66:a5:c7:9d:72:d0:62:46:7f:19:f7:e3:46:10:
4f:92:0d:fc:15:e5:9b:c4:3e:e4:75:f3:a8:ee:f6:
5c:3d:1e:f2:a4:72:18:4b:53:9a:e5:9e:13:3a:0d:
c4:29:ea:7e:f1:2f:32:38:ab:eb:16:86:bf:e2:2e:
1b:06:f5:7a:02:1e:b8:79:fd:88:d8:e8:6d:63:69:
d7:8f:e8:7a:bb:c0:b3:38:d5:38:58:ed:10:ab:24:
14:a9:9c:35:66:b7:fe:82:e5:12:8f:1b:07:a2:04:
d3:ae:ea:50:25:e9:32:55:7a:0a:05:6e:d4:27:35:
2c:33:71:87:bb:2e:d8:99:e0:81:f6:42:3f:2b:77:
7d:a2:25:9a:84:c7:3c:b5:85:9a:62:84:71:8c:1d:
2a:35:b9:5f:05:c8:4c:e4:79:6d:af:eb:d0:56:50:
04:b3:4a:3b:79:b5:a2:22:b7:de:85:56:29:6c:3f:
0c:f1:d7:dd:4a:2b:81:53:74:9c:d8:37:8e:53:09:
b5:00:b5:9d:9f:6d:e6:46:92:52:17:d6:22:db:18:
fe:b9:95:16:d3:b5:13:6d:df:23:5f:da:b6:43:38:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:97:6A:C9:C2:E2:26:9F:2D:95:39:D3:DC:73:B5:7F:8D:F6:86
X509v3 Authority Key Identifier:
keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:23:01:23:2f:dd:4d:03:59:77:1f:45:ad:6a:fc:4f:e2:f9:
4b:88:2a:19:2c:6c:4d:50:df:06:5d:c6:68:dd:4c:0c:09:31:
09:6d:dd:dc:c5:f6:ec:d6:0b:31:45:24:b9:a5:57:4b:41:48:
6d:75:a3:a8:11:c4:bd:09:24:8c:21:93:3c:d4:d1:af:15:cb:
74:88:80:db:39:be:80:cd:79:7b:ad:ec:e4:7e:d8:89:ee:42:
31:22:4d:d6:eb:d4:3a:ff:2b:46:5b:da:28:8b:6e:8c:72:e0:
e8:9b:32:1f:13:d3:e7:1c:cb:47:da:8b:56:d1:d2:22:23:c7:
c7:e0:5d:d9:91:9d:d5:6a:d4:d6:6c:79:2d:a1:38:cc:c3:1f:
78:39:6f:42:49:0a:ae:f4:29:bb:0f:ba:34:88:84:a5:74:2b:
f5:e7:01:e4:3f:eb:d1:86:19:a2:1a:64:80:72:28:2f:0e:b4:
7d:ad:b5:93:69:53:ce:b7:cc:e5:52:23:53:88:a8:8b:df:f7:
21:58:0c:55:26:8d:2c:92:20:7c:df:a6:c5:f8:ce:91:09:ef:
d0:76:46:07:d1:48:ac:c8:f9:3d:2c:d4:be:e6:65:36:8e:a6:
25:73:5c:5c:50:ef:1b:d3:3b:21:db:29:1b:a4:80:e7:90:aa:
d8:d7:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:47:35 2026 by rpki-client