
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier: 3cgS/g4oDtxFU+kagKEgprHAlRoynPNCyc/095Rl4Pc=
Subject key identifier: AE:08:2A:4B:A3:D6:C5:B2:44:C7:41:B6:76:43:BD:B6:7E:D9:36:61
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer: /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number: 5C
Signing time: Thu 23 Jul 2026 10:09:55 +0000
Manifest this update: Thu 23 Jul 2026 10:09:54 +0000
Manifest next update: Thu 30 Jul 2026 10:09:54 +0000
Files and hashes: 1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: 6kwp39Zbzu/123wbs5cwbl4fONXyjnyySi8VcnyLFnU=)
2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: yY65u/jqJQmHqnGhqt0gIcasuvIles8dQWtNSaAAQqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Validity
Not Before: Jul 23 10:09:54 2026 GMT
Not After : Jul 30 10:09:54 2026 GMT
Subject: CN=6a61e873-8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:a1:27:4f:df:e4:51:be:2f:3e:aa:50:2e:
47:c6:dd:b6:01:ce:24:fa:ba:51:e8:1e:74:44:06:
b5:d8:86:fc:12:74:d7:28:b5:0f:66:33:03:9f:06:
fe:56:de:3a:67:77:45:37:b0:6c:78:d2:28:57:57:
38:f5:af:13:48:57:e8:9c:2d:e0:24:44:2b:12:87:
51:9c:56:98:bf:3b:83:24:4a:3f:2a:af:af:29:c9:
52:98:96:f1:3e:24:41:8f:54:6b:8a:cb:8c:f7:c1:
54:2e:8c:d3:ba:a3:fe:cc:7b:8e:ce:0d:1b:65:01:
e2:8b:7d:6c:c6:be:3c:df:66:fb:7e:94:c6:74:61:
74:6a:59:9f:41:bf:32:8f:d2:e9:e9:7f:5d:44:be:
21:00:5c:bc:a9:ee:ec:6e:1f:0a:89:64:41:e0:bf:
85:a4:a7:c7:fc:e5:e6:b8:99:97:dd:1a:df:29:ab:
c3:f7:f1:04:fc:1c:27:7f:0b:3f:d1:aa:3c:4b:55:
d7:61:62:52:c7:f6:cd:79:e4:ac:08:39:eb:36:73:
3c:be:43:67:08:43:57:58:30:94:91:cf:f6:90:0e:
7e:fb:3e:5d:22:47:fd:ba:86:a1:28:4f:f2:71:9b:
e0:28:95:7c:3f:53:d6:67:d9:15:82:ed:fc:3d:b9:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:08:2A:4B:A3:D6:C5:B2:44:C7:41:B6:76:43:BD:B6:7E:D9:36:61
X509v3 Authority Key Identifier:
keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:3a:12:00:ec:e8:b7:3c:71:ab:a5:73:9e:21:62:50:bc:a1:
e9:55:d1:9c:a6:0c:d6:68:13:ed:bf:d5:a8:29:9e:8e:a8:6b:
38:be:0e:34:59:09:e3:f1:ae:81:a3:9d:f5:0c:96:3b:7b:06:
4b:6a:88:49:ee:a9:68:80:4f:8d:f6:d4:3d:02:b5:c3:ad:db:
be:24:c9:b2:db:01:73:b3:29:b2:b4:50:04:ec:ac:df:9c:8f:
0f:60:e4:77:48:1c:fd:f9:ba:c9:b8:c0:18:49:f5:a2:02:30:
bb:27:43:b1:93:01:24:d5:2d:64:26:13:24:8d:72:ed:74:4d:
01:99:de:d9:ef:17:de:f5:8d:39:b6:3c:e9:42:d5:4e:ed:56:
0e:2a:81:a9:ea:f6:c2:26:c4:9c:1e:91:cf:f9:51:63:97:92:
d8:ee:83:9e:16:93:3d:f1:b5:58:6b:d6:7b:8b:87:24:1d:86:
1b:48:20:80:8a:67:7a:18:3c:99:e9:5c:19:b9:fc:48:4f:bf:
a2:ec:65:50:ce:83:5c:d9:f3:60:22:b5:7e:4c:4a:68:0d:71:
43:a6:47:1a:75:17:f4:6b:32:da:4e:28:e4:82:ed:38:38:e6:
ba:f0:1b:9c:b9:7c:85:57:f8:9a:ed:e8:28:91:72:17:fb:0c:
b4:c0:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:48 2026 by rpki-client