
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: 3Y0Y1jXYVCxTL2FVJ9uHGc2DfaS39MjonuLY/zbTuUo=
Subject key identifier: 12:C9:77:27:B8:58:88:29:66:70:A8:22:09:0F:F5:F2:3F:4F:88:F2
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: C6
Signing time: Wed 25 Mar 2026 06:03:27 +0000
Manifest this update: Wed 25 Mar 2026 06:03:26 +0000
Manifest next update: Wed 01 Apr 2026 06:03:26 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: EzxtcxQW+IvgJrRAc6p4W9bA2KB+qU8sSeoeWv4FOaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Validity
Not Before: Mar 25 06:03:26 2026 GMT
Not After : Apr 1 06:03:26 2026 GMT
Subject: CN=69c37aaf-6a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:63:2b:58:74:fd:09:71:c3:4d:b7:08:9f:
ca:5f:02:cf:a6:9f:50:aa:39:2b:f4:d3:23:23:c1:
a0:86:25:20:14:04:2e:27:22:43:65:2e:d8:39:63:
85:6d:97:5c:df:ab:58:30:e9:a6:d0:c0:56:47:17:
a3:5d:25:26:62:73:9a:1b:15:5a:2e:52:a4:71:94:
8f:eb:6a:6c:c6:6d:4f:b4:8a:16:1a:d9:ac:43:fc:
2f:46:a9:ef:b7:e4:8f:1e:ad:ef:87:2f:e3:05:0a:
03:59:5c:2d:fe:80:57:ad:3c:3f:67:56:bb:c7:85:
61:99:5b:2c:d4:3e:92:db:b3:1d:82:aa:a8:f8:1b:
58:3d:b8:97:6e:c2:59:48:e0:36:e1:d5:b0:d1:db:
9b:d6:28:98:16:1a:8c:2d:e8:de:e1:ba:bf:be:ef:
82:85:05:05:b7:3f:6a:5d:3f:3b:e0:b3:3f:f4:6c:
87:3d:9b:bb:c4:1b:b1:c1:35:33:d6:9a:46:eb:eb:
bf:15:d9:30:e0:32:1d:eb:f3:0f:44:0c:28:bb:ff:
f5:fd:eb:01:57:45:d1:70:43:c3:81:d8:b4:08:8a:
82:26:5d:6d:43:53:0f:2c:4c:5f:71:2e:ec:a7:63:
e9:93:ef:8d:b2:8f:60:fb:22:c3:ca:f9:4d:28:8c:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:77:27:B8:58:88:29:66:70:A8:22:09:0F:F5:F2:3F:4F:88:F2
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:63:fc:42:26:75:c8:48:de:9e:82:41:69:45:d6:d8:69:
b4:60:72:48:47:bf:3e:a1:12:26:7e:7c:89:bb:8a:46:9b:97:
d5:62:cd:ad:ce:00:b1:0f:af:e2:11:50:85:17:42:07:66:18:
90:57:1b:e9:ec:aa:77:fa:86:1c:bd:91:3d:dc:48:67:1f:61:
9e:d5:9d:3c:c5:44:ec:8e:0f:1a:82:9e:46:b8:21:7e:6d:91:
cc:8f:16:fb:48:db:30:93:45:1d:ae:a6:ec:1c:5d:40:ed:c5:
80:59:ad:3f:64:96:63:ea:8b:b8:17:db:88:02:0d:22:d7:6a:
eb:47:8a:51:27:c7:f9:a9:d6:11:7c:84:9f:83:a6:b2:02:1e:
27:a1:b4:8a:b0:7a:dc:97:b4:fd:31:5b:3e:b3:65:ea:35:13:
1b:15:d7:be:91:82:0e:ee:f0:2a:bc:5f:c4:af:5b:12:1d:95:
36:7c:73:6c:86:86:99:ad:f1:df:89:6f:0b:8f:bf:ab:84:69:
78:0e:7b:b8:80:7b:fe:9a:15:bf:41:fc:d8:74:dd:24:c8:fe:
c6:26:6e:14:83:98:de:ff:02:24:12:00:7a:30:e1:e3:23:11:
53:d0:7d:9a:57:c5:5e:a3:13:d0:7b:fa:51:56:ec:32:03:f3:
72:52:28:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:44 2026 by rpki-client