
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier: sSGVd8oY4sShM+rsLQJuxwn+YEqiSjeM/0A1StGAvt8=
Subject key identifier: BD:A4:02:74:57:F6:71:C2:DF:09:FA:48:90:3B:2F:68:93:B8:F4:D3
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number: 2D
Signing time: Thu 23 Jul 2026 10:47:54 +0000
Manifest this update: Thu 23 Jul 2026 10:47:53 +0000
Manifest next update: Thu 30 Jul 2026 10:47:53 +0000
Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: dEPGklxenHGxH+vuhDhHFFfe2k5bssO1xFZrILHlNyw=)
2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Validity
Not Before: Jul 23 10:47:53 2026 GMT
Not After : Jul 30 10:47:53 2026 GMT
Subject: CN=6a61f15a-c204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:b6:a5:0c:cc:54:6a:b8:bb:e3:49:d8:5e:
17:d9:49:f4:73:47:30:f3:55:fc:6f:e8:ac:f9:67:
96:69:92:57:78:6a:9a:f2:f3:d2:cc:0b:c2:f4:28:
f2:cb:47:0d:fc:7c:0c:61:73:37:04:b7:ed:23:f9:
ed:61:2a:af:f5:27:e8:43:ac:18:81:cd:f9:37:e4:
65:0f:90:70:61:9d:55:28:c6:4a:eb:44:1b:0d:8c:
25:4f:e9:58:2f:1b:e2:66:fe:da:3a:5c:1a:0e:12:
95:ad:51:59:cf:6a:96:19:71:f4:e1:85:6a:f4:15:
a9:c6:67:a6:4a:65:e7:6e:b3:ed:c0:32:ba:e0:c2:
f9:3d:fa:eb:a4:85:c5:18:28:10:84:bd:6b:53:86:
24:b4:d6:bb:a1:25:15:20:05:f1:df:5e:da:19:59:
a3:f4:f8:2a:1a:0c:48:66:2e:f1:73:7f:95:f8:7d:
6f:a9:68:ff:fe:fe:39:9d:65:8b:1a:e4:3d:88:16:
4f:4b:9e:a0:ce:c0:0e:44:5d:05:4b:30:24:c1:27:
94:3a:5f:cc:3f:33:f9:78:87:c2:3c:8c:cb:a0:cb:
9f:60:5d:2c:e2:6b:f0:ab:4c:aa:5a:9d:e7:ba:47:
8a:9d:eb:9f:b6:b2:ff:d0:d2:b0:24:a8:51:2f:cf:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:02:74:57:F6:71:C2:DF:09:FA:48:90:3B:2F:68:93:B8:F4:D3
X509v3 Authority Key Identifier:
keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:db:e9:43:0f:f1:4b:8a:1e:08:d6:3c:66:d8:bc:e7:47:
4e:00:01:b1:88:81:ae:cc:75:65:48:4b:0c:f3:21:95:5b:5a:
47:89:55:ba:d2:ed:c3:f9:9e:81:a1:50:60:b0:67:2c:b3:b0:
ed:92:cf:96:a9:12:4f:b1:54:47:a6:c3:d0:57:10:95:6c:09:
e8:53:c7:47:a7:bd:00:b8:51:46:de:43:96:f3:1f:43:61:c4:
21:70:a8:9e:b7:15:3e:c3:9e:59:4e:f5:f7:0c:a2:bc:81:ca:
ad:7d:66:86:6b:ab:5e:02:cc:49:46:00:6c:5e:3b:ff:f8:d5:
21:14:be:1b:a0:2f:19:4b:02:d1:bf:9e:25:41:34:e9:eb:f3:
dd:d7:aa:b2:b9:28:53:48:4e:23:15:4d:f6:bc:5f:1c:ea:2d:
f8:1a:4f:6a:68:9b:bf:93:ab:3d:1e:c6:d3:e5:a0:36:32:39:
40:25:3f:1a:02:0c:5d:d3:0f:40:37:42:9d:84:d3:6e:fd:ef:
2e:ec:ce:0a:6a:e2:2f:d5:4f:e2:27:79:67:ca:de:c4:b0:6d:
23:a6:5d:26:7a:78:14:9c:af:7c:b1:b6:01:2b:90:f2:99:2d:
db:9c:b0:1d:a6:50:e3:6b:3c:c6:6d:32:55:a2:9c:99:12:be:
32:ce:66:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RjdENzExMC8GA1UEBRMoQkQwRkIyRkFEODcxMjI4MzlBNzM4QzQ5NDE5Mzc5MDdF
QTVDM0ZENDAeFw0yNjA3MjMxMDQ3NTNaFw0yNjA3MzAxMDQ3NTNaMBgxFjAUBgNV
BAMTDTZhNjFmMTVhLWMyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYDbalDMxUari740nYXhfZSfRzRzDzVfxv6Kz5Z5Zpkld4apry89LMC8L0KPLL
Rw38fAxhczcEt+0j+e1hKq/1J+hDrBiBzfk35GUPkHBhnVUoxkrrRBsNjCVP6Vgv
G+Jm/to6XBoOEpWtUVnPapYZcfThhWr0FanGZ6ZKZedus+3AMrrgwvk9+uukhcUY
KBCEvWtThiS01ruhJRUgBfHfXtoZWaP0+CoaDEhmLvFzf5X4fW+paP/+/jmdZYsa
5D2IFk9LnqDOwA5EXQVLMCTBJ5Q6X8w/M/l4h8I8jMugy59gXSzia/CrTKpanee6
R4qd65+2sv/Q0rAkqFEvz09dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvaQCdFf2
ccLfCfpIkDsvaJO49NMwHwYDVR0jBBgwFoAUvQ+y+thxIoOac4xJQZN5B+pcP9Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGN0Q3LzgyMEUyQzc0NDQ2
QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9PYWM0eEpRWk41Qi1wY1A5
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvdlEteS10aHhJb09hYzR4SlFaTjVCLXBjUDlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG
N0Q3LzgyMEUyQzc0NDQ2QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9P
YWM0eEpRWk41Qi1wY1A5US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAEhdvpQw/xS4oeCNY8Zti850dOAAGxiIGuzHVlSEsM8yGVW1pHiVW60u3D+Z6B
oVBgsGcss7Dtks+WqRJPsVRHpsPQVxCVbAnoU8dHp70AuFFG3kOW8x9DYcQhcKie
txU+w55ZTvX3DKK8gcqtfWaGa6teAsxJRgBsXjv/+NUhFL4boC8ZSwLRv54lQTTp
6/Pd16qyuShTSE4jFU32vF8c6i34Gk9qaJu/k6s9HsbT5aA2MjlAJT8aAgxd0w9A
N0KdhNNu/e8u7M4KauIv1U/iJ3lnyt7EsG0jpl0mengUnK98sbYBK5DymS3bnLAd
plDjazzGbTJVopyZEr4yzmaW
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:17 2026 by rpki-client