
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json)
Hash identifier: QdaqLvhi84auUehMa2XVb5wJMdyjElmeHYjgUpus+bk=
Subject key identifier: 80:34:9C:C9:86:66:8C:87:77:2A:78:4E:1E:69:30:29:81:49:F9:0D
Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3
Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
Certificate serial: 13FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
Manifest number: 13F1
Signing time: Tue 12 May 2026 16:56:30 +0000
Manifest this update: Tue 12 May 2026 16:56:30 +0000
Manifest next update: Tue 19 May 2026 16:56:30 +0000
Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: 0An31O2o/xfksatSJJ/P0JMcTZQm4q6+GN9HpBP0qWc=)
2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: +8AddGBFIIMgwGJltYVSUMtKxs5lAyAGDBkgXORqOLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl
rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5115 (0x13fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
Validity
Not Before: May 12 16:56:30 2026 GMT
Not After : May 19 16:56:30 2026 GMT
Subject: CN=6a035bbe-294a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:43:09:1f:d9:f0:6c:92:8b:5b:02:d0:0c:
d0:04:33:67:da:53:21:75:34:03:ff:d6:25:24:8e:
44:ef:14:27:3b:a3:0e:6b:37:8b:72:49:42:1d:fd:
f4:94:4b:58:02:6d:e9:21:5a:79:80:b4:45:19:24:
8e:c0:cc:63:0f:9a:58:f5:3e:a8:e5:ef:c1:2e:09:
78:a8:5d:70:36:ce:77:0f:d0:97:b7:61:8f:01:6a:
39:f2:44:08:1b:d5:4c:f9:80:cc:11:6b:02:1c:08:
0d:36:a1:3d:2b:41:2d:2e:75:1f:07:16:8a:e7:6f:
d2:88:14:6f:76:fd:58:d3:63:54:b1:7a:b4:6a:4f:
4d:31:50:d6:e6:fd:17:ef:46:68:bc:44:41:90:8b:
92:8d:ab:68:d8:fd:98:65:53:15:9f:34:48:f4:08:
89:79:a1:1f:c6:9d:f9:61:f5:da:fe:14:02:a1:e1:
1c:99:c9:2f:1e:ec:39:32:e9:8a:02:ad:9a:05:2f:
db:d3:0f:07:04:d5:85:8d:3e:93:e4:39:34:2f:a9:
0a:c7:6f:77:b0:7a:4e:28:5c:ab:76:c3:f3:83:e1:
75:37:96:0b:c0:f9:83:83:0c:45:fb:85:a4:d9:43:
cb:f4:99:9e:db:86:9e:1c:e4:a8:b1:64:db:bd:cb:
4d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:9C:C9:86:66:8C:87:77:2A:78:4E:1E:69:30:29:81:49:F9:0D
X509v3 Authority Key Identifier:
keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:87:7f:28:f5:6b:46:40:e2:da:b3:af:80:15:e0:ed:cf:
5f:04:a1:90:ae:24:d6:ed:74:0c:41:84:19:11:ec:aa:3a:12:
cb:6b:0b:91:f8:e0:b9:db:9a:f6:39:ac:ba:40:96:54:1a:60:
4e:a0:09:50:93:9c:a8:49:7e:1e:6d:e0:c3:ed:15:a4:97:bc:
72:5d:87:23:50:5b:c8:16:bf:fc:f6:e3:e7:d7:65:7d:83:86:
15:65:52:a1:09:6c:54:b0:e0:3b:bc:04:d9:77:b8:fc:b4:46:
3c:03:48:54:b8:9c:66:1b:fd:98:5b:39:72:c0:47:2b:4a:38:
3f:0a:15:76:a1:64:08:c4:a0:ab:44:19:1e:db:b2:90:1d:e0:
2d:fe:fb:41:17:cc:af:af:c6:03:03:08:36:fa:0b:a0:30:63:
d7:33:ea:5f:50:83:a0:da:22:73:33:25:50:b4:2f:d5:b6:3e:
49:fc:34:e1:8d:f2:a5:15:74:39:93:b4:c5:56:2e:c8:1f:48:
d8:6c:af:12:c1:35:b3:54:6b:84:75:49:7a:11:d8:97:b8:a7:
54:e0:fa:0c:bf:63:27:34:27:dc:05:68:0c:8d:9d:37:88:fa:
26:3c:3e:ad:8a:47:8e:71:01:8e:48:9a:1b:5b:ca:e4:f8:69:
77:e6:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:06 2026 by rpki-client