
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier: t4f0b5SZClR600mu45W5p4mUIiGk3SdIgQCR25GtCcg=
Subject key identifier: DD:48:78:C7:C1:9D:12:8F:DC:13:6A:27:77:ED:D9:2D:A0:37:37:93
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial: 238B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number: 2347
Signing time: Tue 22 Sep 2026 15:46:47 +0000
Manifest this update: Tue 22 Sep 2026 15:46:46 +0000
Manifest next update: Tue 29 Sep 2026 15:46:46 +0000
Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: aA+rDgry/3nLR1W3ZzEea+oOhase9LQ/j2OI7hCjgvg=)
2: 815465903EB511E9881B6529C4F9AE02.roa (hash: +ANu6JmCUfWc/fEshVMRk/CtwPkSloyzKlXpU5KCY3Y=)
3: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: 1Kz1vE1HOF5/kl+i8Rr4tSzcXBMpG4BgFwTZXnp4/e4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9099 (0x238b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Validity
Not Before: Sep 22 15:46:46 2026 GMT
Not After : Sep 29 15:46:46 2026 GMT
Subject: CN=6ab2a2e7-c430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:ce:a9:75:71:ca:90:4b:a6:08:48:42:c0:
16:8a:0f:7b:da:0c:60:ae:25:3c:5b:e4:7c:f2:97:
27:16:8c:cc:74:db:f8:8a:3c:43:8c:c9:5a:83:be:
15:19:6e:83:1e:32:5c:79:d7:e8:8b:ad:de:90:3e:
f8:9a:81:44:a6:a8:9d:77:6a:79:44:c4:3b:e7:32:
f1:ff:16:4f:a2:5d:85:04:ae:04:4a:09:ac:60:e2:
aa:90:c1:13:be:5b:90:5a:f6:2f:ff:2d:0c:ff:36:
d8:af:a9:c1:57:fb:2b:d7:7e:3e:32:ec:01:63:08:
89:57:9d:99:9a:22:46:c4:bf:29:b5:14:81:68:39:
f1:6f:b9:4a:58:d5:45:fc:c0:6b:f6:bc:0d:74:a0:
76:65:8a:65:66:91:94:d1:54:46:b8:1d:17:31:9c:
d9:77:96:b1:a2:4e:a3:b1:94:d1:87:99:76:64:88:
41:da:b9:d3:c8:65:1f:ef:e3:5f:0b:54:77:a2:c9:
78:81:be:ff:6f:1a:2f:e5:f3:bf:8f:8f:60:59:7a:
8d:51:a8:8b:92:82:9e:bc:87:72:c4:68:2a:93:e7:
e6:03:34:c2:ad:81:6f:dd:86:5c:bd:08:0f:37:8d:
cb:79:b2:56:c9:61:f9:e3:e1:9e:b5:49:aa:89:ac:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:78:C7:C1:9D:12:8F:DC:13:6A:27:77:ED:D9:2D:A0:37:37:93
X509v3 Authority Key Identifier:
keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:8d:f4:a0:24:46:87:4b:ba:6b:84:f8:31:6e:ba:7a:5e:1a:
ce:c6:3d:25:ef:65:89:d8:3f:18:8c:fe:a0:f3:31:ae:da:f6:
47:e5:4c:20:7a:76:ef:40:62:7b:69:60:09:7c:81:21:b2:1e:
dd:b9:b1:34:bc:69:fd:b8:86:5e:ac:a4:69:14:f6:e9:d8:29:
70:9b:48:76:a7:0b:b8:c0:0f:b7:cb:8b:fb:59:6c:65:ad:22:
5f:53:f2:76:1b:43:7f:ed:7b:38:db:a8:75:c2:9b:61:de:5c:
38:1c:7c:a2:60:e4:35:74:b8:64:7d:14:eb:f0:15:ba:3b:2a:
52:72:d1:d3:82:8a:5d:70:83:c5:22:e8:4b:64:af:5e:92:9e:
77:b3:61:8d:d4:8c:4e:cf:3d:8e:9d:4e:22:e0:86:3a:bd:8f:
9a:91:e1:4e:29:68:eb:09:28:4a:f3:b4:2f:b1:22:18:3d:d5:
f6:c4:f2:b0:a9:a3:5f:f4:54:10:ce:b9:bf:45:14:c1:d4:b0:
c4:42:37:69:9c:d3:ea:1c:9a:12:8c:92:7a:3c:81:e8:75:05:
ec:7d:d3:0f:33:6a:79:6b:19:79:e2:df:79:fb:61:ca:4d:eb:
df:0f:9f:b8:54:c6:28:47:48:c0:05:64:2f:30:bb:74:18:42:
42:e3:de:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex
QThERTgxMkEwHhcNMjYwOTIyMTU0NjQ2WhcNMjYwOTI5MTU0NjQ2WjAYMRYwFAYD
VQQDEw02YWIyYTJlNy1jNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZDOqXVxypBLpghIQsAWig972gxgriU8W+R88pcnFozMdNv4ijxDjMlag74V
GW6DHjJcedfoi63ekD74moFEpqidd2p5RMQ75zLx/xZPol2FBK4ESgmsYOKqkMET
vluQWvYv/y0M/zbYr6nBV/sr134+MuwBYwiJV52ZmiJGxL8ptRSBaDnxb7lKWNVF
/MBr9rwNdKB2ZYplZpGU0VRGuB0XMZzZd5axok6jsZTRh5l2ZIhB2rnTyGUf7+Nf
C1R3osl4gb7/bxov5fO/j49gWXqNUaiLkoKevIdyxGgqk+fmAzTCrYFv3YZcvQgP
N43LebJWyWH54+GetUmqiayP/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1IeMfB
nRKP3BNqJ3ft2S2gNzeTMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx
MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu
T21WdV9ieGZwbm9hamVnU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAco30oCRGh0u6a4T4MW66el4azsY9Je9lidg/GIz+oPMxrtr2R+VMIHp270Bi
e2lgCXyBIbIe3bmxNLxp/biGXqykaRT26dgpcJtIdqcLuMAPt8uL+1lsZa0iX1Py
dhtDf+17ONuodcKbYd5cOBx8omDkNXS4ZH0U6/AVujsqUnLR04KKXXCDxSLoS2Sv
XpKed7NhjdSMTs89jp1OIuCGOr2PmpHhTilo6wkoSvO0L7EiGD3V9sTysKmjX/RU
EM65v0UUwdSwxEI3aZzT6hyaEoySejyB6HUF7H3TDzNqeWsZeeLfefthyk3r3w+f
uFTGKEdIwAVkLzC7dBhCQuPeug==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:44:48 2026 by rpki-client