
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: TqythY+XWMtnrOX0PAJzLOpjRXBhAWvOOCMx39W4mMg=
Subject key identifier: FD:EA:65:DE:95:6A:30:4D:9D:80:A0:BE:92:47:AA:0B:76:45:60:D6
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: 0122
Signing time: Wed 23 Sep 2026 05:34:11 +0000
Manifest this update: Wed 23 Sep 2026 05:34:11 +0000
Manifest next update: Wed 30 Sep 2026 05:34:11 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: 9m8i4q5evX6tB5SITPAIGAsYBp5d8ZZkP7jdSIEazrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Validity
Not Before: Sep 23 05:34:11 2026 GMT
Not After : Sep 30 05:34:11 2026 GMT
Subject: CN=6ab364d3-adcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:fd:3e:af:5c:cb:0d:64:15:cf:fd:83:f9:
2a:dd:f5:8a:19:d2:9f:ad:e0:a2:64:6d:e5:7d:71:
bc:c8:25:37:13:2b:06:91:e9:4e:5e:3c:bb:fc:43:
e1:52:d4:0b:15:14:49:44:f3:de:66:0e:14:54:52:
f0:25:48:de:9e:7e:fd:04:87:1b:82:b4:56:e5:c4:
9e:9c:68:21:7c:92:b0:a5:ab:d3:0a:59:c1:68:c9:
28:d0:3a:3d:04:9f:e4:04:f3:78:30:cc:cc:f6:db:
61:42:47:10:62:0c:f9:fb:4b:a9:75:5a:c2:1c:72:
76:4b:28:2e:5c:c3:6a:c9:41:a3:85:73:51:3b:1b:
b5:a1:c1:a8:ac:2d:ad:b6:a1:5c:9c:8e:24:69:db:
9e:2f:a9:af:e5:5e:b2:e6:8c:d8:18:62:08:b4:05:
0d:98:a4:27:80:6e:f4:27:d0:3b:6b:7f:b7:ec:2c:
fc:24:1e:2f:e4:3c:cc:7b:93:cb:ed:59:20:ad:81:
e2:ca:e2:cc:ee:e7:d3:22:78:1f:b0:24:94:6e:10:
25:67:57:cb:31:15:7b:85:a6:4d:31:7f:26:ad:ae:
38:00:b0:17:3e:8a:ef:37:11:89:58:c1:c9:41:a9:
cd:bb:b1:f0:c1:1f:a0:9d:c8:2e:12:46:3e:46:ea:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:65:DE:95:6A:30:4D:9D:80:A0:BE:92:47:AA:0B:76:45:60:D6
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:12:6c:15:b3:28:07:2e:29:7d:49:32:62:a1:9e:f9:54:
a7:26:2c:5e:a1:92:1e:23:b5:de:09:48:93:be:26:9b:b5:d2:
aa:b4:3e:6a:47:0a:c5:df:51:19:99:0c:5c:69:4f:02:99:f1:
61:5a:bc:24:56:40:4c:63:1a:18:de:0d:7d:12:26:84:4c:47:
19:a6:90:20:e0:f7:dc:4c:15:59:26:a1:fe:fe:3f:ac:5e:05:
20:af:d5:d6:99:ba:1c:3d:56:44:24:2e:ee:c3:72:ea:a1:93:
af:eb:5a:1f:8e:31:34:68:ba:62:7b:9f:31:cc:7b:ff:25:b3:
2a:23:63:24:b4:64:b9:d1:32:5c:f5:33:38:85:5c:fc:9b:1e:
9d:94:85:2d:d1:c9:14:9e:0d:fe:6c:6a:f4:bd:ba:6f:e0:a5:
dc:fb:cb:7b:8e:8c:71:e8:7f:c0:9a:12:c5:b8:f9:a3:4e:43:
04:33:b8:0c:ac:16:34:95:aa:7e:50:e3:67:ee:4b:0f:ba:b4:
6c:34:9e:ff:9a:55:bc:b9:89:28:ce:34:4f:15:ee:12:24:d3:
f1:d9:b4:6d:d6:1e:4b:bb:e4:29:f3:39:f0:37:66:39:9b:ca:
90:bf:67:89:b5:92:1d:29:a7:c8:fd:5d:13:58:fa:f6:3f:b6:
67:70:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:09:01 2026 by rpki-client