
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json)
Hash identifier: 5skBvtcVRBiZzZeNCp5YF/CrV5pp2nvnThminK5uL3I=
Subject key identifier: 06:7B:54:8A:32:6C:1E:A4:0F:6F:FE:8C:34:92:C7:C0:9A:97:97:E5
Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
Manifest number: 9B
Signing time: Wed 25 Mar 2026 06:35:42 +0000
Manifest this update: Wed 25 Mar 2026 06:35:41 +0000
Manifest next update: Wed 01 Apr 2026 06:35:41 +0000
Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: CV3DTqV3tZY6LsdkbmjGEBb56auwCGIMcBzukz9a1oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl
rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Validity
Not Before: Mar 25 06:35:41 2026 GMT
Not After : Apr 1 06:35:41 2026 GMT
Subject: CN=69c3823e-991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:a3:eb:e5:3a:44:4a:70:90:b3:22:21:1f:
6d:45:32:67:81:d7:87:1d:1a:41:10:de:e1:de:11:
98:40:f6:0e:34:9f:0b:32:13:54:72:1f:50:d8:51:
10:0b:98:40:cc:df:26:db:eb:34:f3:cb:ad:54:d1:
92:eb:f6:f8:12:1d:b7:f9:43:7d:f0:0e:1b:f1:29:
18:8f:69:e2:5a:1b:48:e5:4e:00:7a:b0:94:bc:46:
d2:e0:55:8a:8c:b5:2c:a2:fb:9a:9a:8f:20:35:73:
3d:8b:44:38:a2:99:fa:d8:a2:11:a0:4b:95:89:1f:
8f:aa:b9:4b:19:19:28:d1:02:95:31:e8:4b:8b:74:
2b:49:96:9f:6e:ed:9c:a2:9c:7f:25:3f:0c:5a:49:
dd:42:e4:25:6a:98:02:17:86:eb:b5:f1:32:d0:15:
88:5c:b9:89:90:01:ba:b7:c2:df:38:99:43:dc:3f:
1a:6c:b7:96:3a:0d:a4:e5:5b:66:8b:20:f0:22:5c:
02:f4:72:5e:29:cd:c8:34:2c:7e:26:31:23:1f:b6:
c2:02:0c:6b:96:e6:6a:a0:bd:90:9f:f0:42:c9:4c:
41:48:4d:1a:9a:d9:c6:15:c1:5c:61:61:4c:82:9b:
bd:ed:5a:4b:1f:12:7f:5e:e5:52:8a:1c:3c:fa:6b:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:54:8A:32:6C:1E:A4:0F:6F:FE:8C:34:92:C7:C0:9A:97:97:E5
X509v3 Authority Key Identifier:
keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:b5:35:75:c7:40:91:5c:1e:36:39:4f:ef:06:4f:2f:f7:b0:
aa:01:83:b6:33:a7:e8:8e:67:43:6c:e1:d1:c7:5c:f0:38:04:
25:7f:b1:df:74:0f:42:b8:59:28:7c:8c:23:86:e0:39:46:42:
6e:e6:67:46:3e:28:07:a9:7e:72:e2:74:24:65:87:30:d7:36:
ab:47:a3:fd:58:b9:70:6c:8d:31:97:b1:32:d3:ca:95:f2:26:
f3:40:c5:23:7a:f6:c9:13:00:3a:c8:63:50:cc:5d:5e:e9:39:
ab:ff:5d:f0:27:d3:4f:fe:3c:8f:00:9d:38:f6:b7:e2:2a:1b:
fc:8e:c6:dd:a5:b2:38:2a:69:02:6a:c2:c3:cc:25:fa:5d:c9:
70:93:d8:00:87:15:3b:15:f8:70:f0:6a:65:1b:c4:85:55:c6:
2f:1b:31:04:1c:c3:6f:21:4b:ba:de:6b:20:3a:9a:d7:a5:35:
d3:c2:79:7f:80:b0:39:27:c8:97:3b:eb:f3:d0:ea:64:e1:31:
3d:bb:eb:90:47:7a:cb:ac:d1:32:96:10:0e:ec:27:9f:14:eb:
37:5a:4d:a6:4f:f5:22:b2:45:82:a5:7e:29:44:ee:fc:58:24:
71:c2:36:0e:4d:8e:ac:a6:24:c9:9d:a4:bd:ca:ae:d4:4f:9a:
c6:ab:f1:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyNDYxMTAvBgNVBAUTKDU2N0UzMjFEQUY0QUY3NDQzQjBENzlFMzJBQzAzMDc5
NzUyN0YxRDkwHhcNMjYwMzI1MDYzNTQxWhcNMjYwNDAxMDYzNTQxWjAYMRYwFAYD
VQQDEw02OWMzODIzZS05OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoEaj6+U6REpwkLMiIR9tRTJngdeHHRpBEN7h3hGYQPYONJ8LMhNUch9Q2FEQ
C5hAzN8m2+s088utVNGS6/b4Eh23+UN98A4b8SkYj2niWhtI5U4AerCUvEbS4FWK
jLUsovuamo8gNXM9i0Q4opn62KIRoEuViR+PqrlLGRko0QKVMehLi3QrSZafbu2c
opx/JT8MWkndQuQlapgCF4brtfEy0BWIXLmJkAG6t8LfOJlD3D8abLeWOg2k5Vtm
iyDwIlwC9HJeKc3INCx+JjEjH7bCAgxrluZqoL2Qn/BCyUxBSE0amtnGFcFcYWFM
gpu97VpLHxJ/XuVSihw8+muUDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ7VIoy
bB6kD2/+jDSSx8Cal5flMB8GA1UdIwQYMBaAFFZ+Mh2vSvdEOw154yrAMHl1J/HZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjI0Ni9GMUM1Qzk1MjND
MEQxMUYwOTZDQ0RCNUZDNEY5QUUwMi9WbjR5SGE5SzkwUTdEWG5qS3NBd2VYVW44
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjI0Ni9GMUM1Qzk1MjNDMEQxMUYwOTZDQ0RCNUZDNEY5QUUwMi9WbjR5SGE5Szkw
UTdEWG5qS3NBd2VYVW44ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI7U1dcdAkVweNjlP7wZPL/ewqgGDtjOn6I5nQ2zh0cdc8DgEJX+x33QPQrhZ
KHyMI4bgOUZCbuZnRj4oB6l+cuJ0JGWHMNc2q0ej/Vi5cGyNMZexMtPKlfIm80DF
I3r2yRMAOshjUMxdXuk5q/9d8CfTT/48jwCdOPa34iob/I7G3aWyOCppAmrCw8wl
+l3JcJPYAIcVOxX4cPBqZRvEhVXGLxsxBBzDbyFLut5rIDqa16U108J5f4CwOSfI
lzvr89DqZOExPbvrkEd6y6zRMpYQDuwnnxTrN1pNpk/1IrJFgqV+KUTu/FgkccI2
Dk2OrKYkyZ2kvcqu1E+axqvx1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:57 2026 by rpki-client