
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier: wkj1z390S+ECqnkWewm753tFNvqeIZJJeGb5hZOi4RE=
Subject key identifier: 9B:EA:60:C2:77:71:EC:F6:85:71:20:5F:E7:FB:5B:70:1D:FE:93:63
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 0A27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number: 09AC
Signing time: Tue 12 May 2026 20:15:38 +0000
Manifest this update: Tue 12 May 2026 20:15:37 +0000
Manifest next update: Tue 19 May 2026 20:15:37 +0000
Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: WgAdIRjy1+9eIfK7s+5EhTNJqaJEbZUIcdWWyIqsq7k=)
2: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=)
3: 781C64FAF58611ED89273159C4F9AE02.roa (hash: OvH3fzPSveQwg1LNsqvZ4qweGuIQ/2uXhGIvOjFVfYA=)
4: 9672E862793811EE92C54834C4F9AE02.roa (hash: OrBLnxyiNzVNe59mG2m2meLOUn+J0nEWcAm3/0ePWkk=)
5: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=)
6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: R42xxi5mdGNkiu+sa7XDeJwjkUsIZrW52b4ix+87OCY=)
7: 501941C093F211EEA029A113C4F9AE02.roa (hash: v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=)
8: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: BA6BStVHLf0gWqOgSoCGPU3bB5SibBkTMzQMt8U7qXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: May 12 20:15:37 2026 GMT
Not After : May 19 20:15:37 2026 GMT
Subject: CN=6a038a6a-b19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:f9:a9:ec:0a:ae:6c:9c:e3:e9:1c:31:56:
fb:ad:4d:a0:71:84:51:d8:19:37:2d:ec:de:b9:02:
90:08:3a:34:9d:45:84:73:dd:6a:10:e7:a7:74:5e:
62:57:a4:d3:b8:d1:1a:4d:84:fd:6a:4d:71:2d:67:
cc:09:56:e5:d0:0e:44:9c:4d:87:f1:cf:ff:9d:5e:
f6:80:26:87:7e:bc:58:b0:d6:11:5a:b3:85:cf:19:
5e:b7:d2:04:df:0a:c4:61:91:9f:be:59:76:81:c5:
6c:96:0e:40:6a:d0:33:fe:3f:dd:a7:60:cf:ac:01:
79:8f:8e:99:5b:63:04:14:28:b2:44:9b:3e:57:7b:
1c:5b:78:43:43:6d:a7:40:9f:69:a0:b2:64:97:62:
b7:67:97:e9:39:18:bc:8b:d6:98:ba:bd:5b:11:00:
4e:cd:9b:29:c4:84:76:22:47:e8:cc:b5:94:2f:2a:
40:1a:40:79:6f:2e:7c:78:7c:bb:67:86:ef:d8:d4:
e9:dd:e3:6c:c9:7e:10:3d:28:1d:a8:9e:f3:6e:b4:
7a:4e:26:3b:34:75:c0:ef:77:48:20:0a:d2:c6:8e:
ad:b4:b2:ca:50:55:ea:12:4e:9a:4b:de:e6:9f:fb:
47:a4:de:23:37:f1:bb:0a:ef:c3:42:d1:a1:db:4b:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:60:C2:77:71:EC:F6:85:71:20:5F:E7:FB:5B:70:1D:FE:93:63
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9d:20:09:4f:dc:36:90:3f:53:15:b5:ee:a7:e4:a5:6e:c4:
81:67:8b:4a:37:85:63:49:01:f8:8c:65:26:35:ec:94:8c:fd:
f1:48:68:ba:d1:ad:40:5e:29:45:92:37:73:cd:79:e3:fe:4d:
45:5b:f1:8c:b7:d2:e4:e6:8b:23:a6:8a:52:89:8e:5f:b5:d3:
a6:5f:4a:74:91:86:0e:01:80:73:5d:e8:e3:32:6b:6a:91:32:
1a:0a:58:a1:c0:fd:13:0c:c9:21:e0:af:91:1d:a1:e0:9e:27:
44:95:b8:1c:09:59:26:74:c0:4a:48:69:de:3b:65:6e:9a:d2:
7e:94:7d:e6:dd:d3:0e:f0:ad:cc:da:de:a9:a5:5d:0b:82:2f:
15:b7:d8:e7:19:25:9f:bc:28:e9:eb:d0:f1:8f:00:ea:6c:33:
ca:45:db:10:d1:f9:e4:12:18:87:ae:c2:54:11:52:a1:86:57:
d2:f9:a5:e8:0d:3a:e0:d4:09:45:e4:08:17:a5:10:45:fa:c0:
b2:e7:41:62:60:74:4d:f8:d0:13:e1:91:e3:c1:af:01:d0:e8:
71:c2:a6:49:4b:f6:5f:30:dd:e3:3f:f1:1b:2c:59:48:82:d8:
8c:79:d5:bf:e2:a9:74:69:89:30:37:9f:09:1e:fa:e5:b0:cc:
70:0a:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:33:59 2026 by rpki-client