
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json)
Hash identifier: xBO89S4HJPDwxMN4ShXzOnG2e8cAw9r36cFB0UVOHGY=
Subject key identifier: C2:C1:5E:85:91:30:28:1B:38:C3:44:F4:6E:D0:A5:D3:C1:DB:96:18
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial: 0846
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
Manifest number: 082B
Signing time: Tue 12 May 2026 21:08:55 +0000
Manifest this update: Tue 12 May 2026 21:08:55 +0000
Manifest next update: Tue 19 May 2026 21:08:55 +0000
Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: NSUWrCP58GLRiXePSRo9CQCJokd4jsUMk0HTsq6Oy3A=)
2: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: P/YzwZrXirAfHcAYuoDInMv7oeZdvQaJfgoo3K4BZhU=)
3: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: yuMEpYdr92StEUkrCtc4em7H5dYpwH9n4xJ+CtwrLj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118 (0x846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Validity
Not Before: May 12 21:08:55 2026 GMT
Not After : May 19 21:08:55 2026 GMT
Subject: CN=6a0396e7-72f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:9a:13:08:90:b7:52:97:82:23:2b:3a:62:
4c:d9:e7:04:15:8f:1b:51:a8:08:dc:2a:ae:8e:65:
ed:55:48:9b:1d:e1:f3:a9:f2:98:0a:90:e8:41:12:
95:fc:8b:1e:e8:f8:53:9f:f6:46:fb:cc:52:2c:4f:
67:11:22:30:b4:0e:28:6d:1a:93:da:ca:12:73:f3:
11:3e:17:7b:60:28:45:72:d4:c5:09:00:01:5b:cf:
f2:d4:6c:e8:9c:fc:9c:fc:e3:9b:62:ef:ba:7a:a9:
2d:96:e0:d5:a4:63:49:5a:df:3f:f5:f1:d3:00:73:
e7:b2:bd:f6:f8:b2:4b:94:8f:d7:1d:18:8b:24:cc:
93:5d:85:04:be:25:37:f7:63:be:ef:b4:52:f3:fe:
b1:25:c2:71:cd:23:29:fb:4a:8b:5a:42:a0:67:a3:
80:bd:9d:7b:ff:57:66:c2:b5:c8:7d:8a:b1:0d:ca:
fb:58:a6:e6:b6:3d:49:f5:e2:cd:a8:7d:aa:ad:2f:
40:8a:0b:94:93:6f:6e:75:b6:1a:ee:fb:88:d8:f1:
f9:99:48:6b:8d:a3:f1:65:00:d1:b9:e4:32:06:73:
da:cc:4e:cc:d6:ee:fd:e8:95:61:46:fd:35:27:85:
43:ed:74:5c:f6:2d:88:8d:ce:1d:5d:e3:80:be:e8:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C1:5E:85:91:30:28:1B:38:C3:44:F4:6E:D0:A5:D3:C1:DB:96:18
X509v3 Authority Key Identifier:
keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c7:c9:66:0d:1c:d5:2c:5b:15:20:69:e5:ac:55:c6:3d:95:
c1:13:77:01:af:f9:e0:bf:c1:ae:8c:67:4b:2a:bd:48:be:a5:
57:db:fe:cc:ba:a6:0c:6c:a8:15:2d:e4:0e:78:c1:a9:0e:97:
b6:4f:2b:0a:07:78:6f:66:72:13:bd:34:90:46:15:f7:9f:d9:
1d:b2:94:ca:2f:ce:ad:46:54:b0:d7:2d:a3:f5:7f:c6:e3:f7:
2e:f4:77:ab:39:b6:f4:36:0d:a8:7d:04:8f:7c:76:e9:67:e4:
39:40:3c:b7:74:a4:50:4e:9b:d3:4e:d0:d4:c8:54:88:8e:15:
8b:81:7f:d3:78:47:e9:4d:74:a9:6d:af:3e:72:ea:6f:02:ae:
91:a4:6f:8e:a0:7a:4e:49:c9:9b:bd:ad:d1:36:e3:f5:76:2d:
51:60:8b:2e:7c:e3:b0:55:5d:1d:85:b1:51:aa:ee:7a:a2:06:
b2:27:59:59:9b:bd:f6:45:a2:39:0d:fa:e0:8a:ba:fe:90:01:
4b:c3:c7:e2:2a:0a:a1:32:a6:fb:b0:b3:2f:32:87:51:c7:6e:
08:94:4d:0f:59:e8:a1:d0:65:f5:6c:08:81:3f:8c:ba:9a:1d:
88:3b:76:cd:bc:c1:70:2b:1d:ae:10:1f:c7:ce:fd:b5:c9:b8:
d7:ca:21:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx
NUYyN0MyQTgwHhcNMjYwNTEyMjEwODU1WhcNMjYwNTE5MjEwODU1WjAYMRYwFAYD
VQQDEw02YTAzOTZlNy03MmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvN+aEwiQt1KXgiMrOmJM2ecEFY8bUagI3CqujmXtVUibHeHzqfKYCpDoQRKV
/Ise6PhTn/ZG+8xSLE9nESIwtA4obRqT2soSc/MRPhd7YChFctTFCQABW8/y1Gzo
nPyc/OObYu+6eqktluDVpGNJWt8/9fHTAHPnsr32+LJLlI/XHRiLJMyTXYUEviU3
92O+77RS8/6xJcJxzSMp+0qLWkKgZ6OAvZ17/1dmwrXIfYqxDcr7WKbmtj1J9eLN
qH2qrS9AiguUk29udbYa7vuI2PH5mUhrjaPxZQDRueQyBnPazE7M1u796JVhRv01
J4VD7XRc9i2Ijc4dXeOAvuj6ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLBXoWR
MCgbOMNE9G7QpdPB25YYMB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5
RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzZEQy9CMDQzNjQ3QTE5RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJG
UDhtNEY3dDR5NmtWOG53cWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACsfJZg0c1SxbFSBp5axVxj2VwRN3Aa/54L/BroxnSyq9SL6lV9v+zLqmDGyo
FS3kDnjBqQ6Xtk8rCgd4b2ZyE700kEYV95/ZHbKUyi/OrUZUsNcto/V/xuP3LvR3
qzm29DYNqH0Ej3x26WfkOUA8t3SkUE6b007Q1MhUiI4Vi4F/03hH6U10qW2vPnLq
bwKukaRvjqB6TknJm72t0Tbj9XYtUWCLLnzjsFVdHYWxUarueqIGsidZWZu99kWi
OQ364Iq6/pABS8PH4ioKoTKm+7CzLzKHUcduCJRND1noodBl9WwIgT+MupodiDt2
zbzBcCsdrhAfx879tcm418ohDw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:36 2026 by rpki-client