
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier: /VquQBIeuINrzPnpMOntQHKN9+yYZ7EUE/4ZUkrZRsA=
Subject key identifier: 9A:AE:70:24:77:5D:2A:66:A1:A1:53:C6:2B:83:BA:33:D0:74:7E:7E
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number: 0A
Signing time: Mon 11 May 2026 09:22:39 +0000
Manifest this update: Mon 11 May 2026 09:22:39 +0000
Manifest next update: Mon 18 May 2026 09:22:39 +0000
Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: N9im18UI4MQfvVacAuJiSnfSdnitDnhB8l3CMgy3YUY=)
2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Validity
Not Before: May 11 09:22:39 2026 GMT
Not After : May 18 09:22:39 2026 GMT
Subject: CN=6a019fdf-aa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:c3:d7:38:e7:7e:87:4c:f2:3e:e1:c1:78:
1c:59:a2:6e:61:1d:70:09:89:77:7d:87:66:23:27:
1e:3b:62:82:d4:b4:92:e2:ec:92:f6:06:1b:d5:70:
fe:8e:a0:a0:05:58:9b:16:bf:ef:d0:89:81:bc:b9:
39:99:7c:98:a5:07:46:cf:42:77:47:e6:38:1c:88:
ff:8b:48:50:19:fc:b2:45:f5:99:91:c7:f8:47:db:
3f:9f:aa:ed:31:ff:95:72:74:0a:60:df:2f:7b:6a:
db:cb:c6:8b:08:17:f8:b6:63:6a:67:42:01:d6:83:
b9:5f:40:a7:4a:48:87:8a:bf:22:2a:d0:70:7a:5f:
7c:4e:3e:d1:92:1f:55:f8:9c:54:08:c8:ba:16:35:
af:b3:d4:00:b6:eb:2a:a1:0d:8e:b3:4f:b9:e7:6a:
d1:29:27:b3:b3:b8:45:2b:5b:a0:e4:78:9e:d4:8a:
d6:3b:3d:67:26:12:e0:90:87:94:ca:43:6f:c4:f9:
58:17:65:ad:26:5c:de:17:c0:32:5d:77:1a:52:0d:
9f:b3:be:44:a6:41:5b:57:cc:f0:d3:c6:fa:1a:2c:
7c:9a:75:40:f2:ad:fb:88:02:02:13:91:b2:6e:be:
f9:f5:4d:e7:35:f1:71:d3:c0:4f:13:4e:6c:01:ca:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:70:24:77:5D:2A:66:A1:A1:53:C6:2B:83:BA:33:D0:74:7E:7E
X509v3 Authority Key Identifier:
keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7a:69:09:e4:31:ea:40:90:d7:4f:8b:47:8b:8f:f8:30:1a:
d9:1f:69:ee:e0:d2:14:55:0e:a8:9b:0c:29:40:b5:da:58:8d:
c5:08:31:5d:ff:a2:65:fe:b5:e7:69:23:53:7e:ab:d4:11:df:
19:9e:62:05:42:fc:21:46:d4:e3:bb:43:45:94:cf:54:8c:a0:
3c:53:dd:99:f8:55:c7:26:b4:01:3f:ad:ae:4a:bb:36:e5:a6:
df:7f:9d:6c:c8:3f:e9:a4:67:ff:58:28:d2:b0:2b:23:d2:e7:
2f:b3:fe:6f:07:98:5a:7c:99:95:d2:db:c8:15:bd:ad:d8:1e:
e2:79:a1:ce:92:ee:cb:e2:51:44:34:15:d3:01:d1:f0:23:5c:
c5:2c:02:e4:4e:c2:18:64:77:5a:79:fc:54:4c:e5:9b:0d:23:
fd:3e:6f:9c:80:2e:d4:6d:60:27:e2:25:96:18:5b:cd:d5:ec:
1a:0f:7b:4d:92:00:33:40:45:53:24:1c:cf:ee:b6:23:4d:95:
c1:28:2d:4c:4a:c6:e2:9f:a6:f9:f2:f9:b0:a3:8d:3c:ea:b5:
81:89:2b:54:ba:c4:a2:f6:da:6c:7b:af:54:02:05:22:05:e7:
b6:2c:00:55:ae:29:0f:6b:67:14:f5:bb:0a:41:c5:42:dd:ee:
2b:33:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:49:04 2026 by rpki-client