
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier: xxVmduhL/+DiOo2HTvBkymJ+Zk5gvU6kg9MBhj4OBgU=
Subject key identifier: 5F:8D:E0:4E:7A:03:A4:91:48:64:F4:A7:3E:6A:37:6D:F3:34:15:7E
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number: EA
Signing time: Wed 25 Mar 2026 05:38:49 +0000
Manifest this update: Wed 25 Mar 2026 05:38:48 +0000
Manifest next update: Wed 01 Apr 2026 05:38:48 +0000
Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: UEvsVVJGh2bdIInBYaRDQTqy3K3CndibnD12ZJT02NM=)
2: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
3: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Validity
Not Before: Mar 25 05:38:48 2026 GMT
Not After : Apr 1 05:38:48 2026 GMT
Subject: CN=69c374e9-4f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:df:55:29:13:0b:1b:72:73:66:4d:23:71:
95:2b:41:ea:a3:c0:b9:f8:2b:9e:33:8c:9e:00:8c:
8a:97:85:1f:66:b1:cc:bf:1c:ac:3e:cb:41:dd:ec:
e9:68:a5:85:7c:65:87:04:5e:60:62:0d:57:98:62:
06:ba:94:16:c5:5d:dd:88:c7:56:6a:b8:1d:e7:0e:
b2:1f:c4:0b:5b:b0:2a:b2:e6:3f:72:cf:22:5e:3e:
fb:2a:5d:ed:8c:fb:02:f4:5e:72:b2:8d:9e:21:da:
6f:a9:e7:15:7e:44:b6:9b:db:ba:63:5d:28:9d:ef:
04:8d:15:58:86:a7:d9:54:e7:ed:ae:80:aa:3b:bb:
26:2a:0f:59:b7:5a:87:ad:26:4b:cf:6e:10:8d:68:
c2:20:4a:6c:01:39:31:28:af:23:45:85:2c:13:f5:
83:be:31:63:dc:25:60:88:e4:25:b7:a7:92:43:f1:
a3:ac:2d:9d:47:d7:14:4f:ba:e4:fd:86:2f:e0:aa:
a5:4e:b3:4f:2c:d2:1e:3b:80:b8:0b:f5:78:21:50:
8c:dd:bb:68:ce:99:f9:b3:1c:cf:01:dd:e8:44:63:
b6:f0:84:4b:80:08:96:09:b7:e7:b7:79:6e:4e:31:
2f:82:29:4f:ca:4b:f7:00:fb:20:14:4f:44:c2:30:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8D:E0:4E:7A:03:A4:91:48:64:F4:A7:3E:6A:37:6D:F3:34:15:7E
X509v3 Authority Key Identifier:
keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:bf:df:1b:7c:6b:55:6f:8f:98:ab:b4:f6:3d:bc:43:2d:e1:
4f:7a:e7:fa:08:c5:36:d9:6d:e6:b8:fb:69:fe:9c:e3:96:35:
a8:f1:06:12:40:f9:21:71:c1:dd:46:89:03:20:fe:9b:6f:66:
47:2c:c6:e6:25:70:01:4e:58:d5:c4:2a:b8:b0:98:42:10:eb:
fd:96:21:31:96:4e:ce:3f:79:c5:61:23:90:7d:74:3b:3d:ea:
99:5f:75:96:d0:07:71:fa:28:93:6b:90:2f:dc:bc:ef:9f:d7:
bb:0e:92:41:69:bc:94:53:2b:eb:52:73:8a:54:cf:4e:94:98:
fe:1e:aa:46:89:35:2f:39:33:fa:89:18:36:54:36:33:40:6b:
d5:7d:e2:8e:86:34:fe:3f:cb:23:03:f2:0e:6c:a3:50:e3:4b:
bb:b9:c6:ac:2c:45:e6:b5:31:f3:20:38:89:69:17:80:2a:04:
1e:74:78:80:e4:98:fc:fd:f0:1d:4c:6d:47:97:d1:d6:bb:e0:
b3:fe:0b:de:19:10:ce:15:6d:fe:c4:00:ce:26:b2:b5:97:d2:
8d:3a:4c:86:b0:64:e8:49:e7:59:ee:0c:c2:b9:d6:61:c0:91:
50:02:dc:41:6f:f8:4a:8b:d8:e4:10:28:cb:a0:22:48:f3:03:
ea:4b:4e:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjIzRDkxMTAvBgNVBAUTKEJFOEI0NzMzQjFBRThBNDczNkI3RTkxMzI3MzNENjU0
MDkxRTNEMkIwHhcNMjYwMzI1MDUzODQ4WhcNMjYwNDAxMDUzODQ4WjAYMRYwFAYD
VQQDEw02OWMzNzRlOS00ZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+TfVSkTCxtyc2ZNI3GVK0Hqo8C5+CueM4yeAIyKl4UfZrHMvxysPstB3ezp
aKWFfGWHBF5gYg1XmGIGupQWxV3diMdWargd5w6yH8QLW7AqsuY/cs8iXj77Kl3t
jPsC9F5yso2eIdpvqecVfkS2m9u6Y10one8EjRVYhqfZVOftroCqO7smKg9Zt1qH
rSZLz24QjWjCIEpsATkxKK8jRYUsE/WDvjFj3CVgiOQlt6eSQ/GjrC2dR9cUT7rk
/YYv4KqlTrNPLNIeO4C4C/V4IVCM3btozpn5sxzPAd3oRGO28IRLgAiWCbfnt3lu
TjEvgilPykv3APsgFE9EwjD75wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+N4E56
A6SRSGT0pz5qN23zNBV+MB8GA1UdIwQYMBaAFL6LRzOxropHNrfpEycz1lQJHj0r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNEOS83QjhCRDZDQ0M5
RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlrYzJ0LWtUSnpQV1ZBa2VQ
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjNEOS83QjhCRDZDQ0M5RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlr
YzJ0LWtUSnpQV1ZBa2VQU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASL/fG3xrVW+PmKu09j28Qy3hT3rn+gjFNtlt5rj7af6c45Y1qPEGEkD5IXHB
3UaJAyD+m29mRyzG5iVwAU5Y1cQquLCYQhDr/ZYhMZZOzj95xWEjkH10Oz3qmV91
ltAHcfook2uQL9y875/Xuw6SQWm8lFMr61JzilTPTpSY/h6qRok1Lzkz+okYNlQ2
M0Br1X3ijoY0/j/LIwPyDmyjUONLu7nGrCxF5rUx8yA4iWkXgCoEHnR4gOSY/P3w
HUxtR5fR1rvgs/4L3hkQzhVt/sQAziaytZfSjTpMhrBk6EnnWe4MwrnWYcCRUALc
QW/4SovY5BAoy6AiSPMD6ktOlw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:16 2026 by rpki-client