
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier: YZ+5+/1x+f9c+UrFJARqoIZKuOgKWntQxcSOEoKXUXQ=
Subject key identifier: 36:94:4B:2C:2D:99:F2:78:91:5F:46:0B:43:44:EE:B3:D6:E8:3B:0C
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number: 4E
Signing time: Fri 25 Sep 2026 08:27:31 +0000
Manifest this update: Fri 25 Sep 2026 08:27:30 +0000
Manifest next update: Fri 02 Oct 2026 08:27:30 +0000
Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: lScIcB+2FVDSiYg1hleJB/pYJiaW510BmqMGjlxyuCY=)
2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Validity
Not Before: Sep 25 08:27:30 2026 GMT
Not After : Oct 2 08:27:30 2026 GMT
Subject: CN=6ab63073-8fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:df:0c:65:f1:66:38:ef:7d:ac:86:b2:12:
f7:31:d8:e5:25:0f:00:43:4f:75:8d:88:5b:62:25:
26:2f:62:48:ed:0a:80:cb:d1:c9:0d:a1:4c:d4:ea:
fe:63:f1:79:9e:a5:5a:20:d5:16:42:71:9e:98:46:
b6:83:08:60:d2:2d:e5:91:09:b5:d4:ac:0e:42:94:
b0:3f:d4:c9:a5:3a:cc:b2:dc:0a:57:53:8d:d9:3a:
ca:53:26:73:72:3f:9b:5e:3c:a9:e8:bf:f4:8d:39:
cc:a8:88:9f:ee:e2:21:35:1e:e2:57:46:94:f5:4e:
54:e3:c0:da:37:5c:8a:af:c1:2f:c0:3b:f2:42:1d:
5a:4c:cb:22:9f:20:9b:fc:79:78:ac:0c:f9:95:8e:
17:4a:05:b9:9a:53:96:fc:20:a4:9b:44:b9:3e:02:
d2:ad:9c:74:70:27:38:0c:5d:ce:5e:d6:91:c0:5d:
dd:3e:0f:7b:62:1c:e3:ff:f9:37:d1:18:11:d4:0f:
fd:d9:55:67:9b:f6:eb:5c:58:db:96:d0:13:d1:36:
01:66:97:5a:03:df:7e:f5:5d:a9:ba:ec:4d:c4:f3:
c2:54:17:db:98:bd:0b:19:28:d2:73:1b:8b:af:90:
7f:61:8f:8a:dd:ed:38:29:cc:3f:dc:ce:8d:7f:1c:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:4B:2C:2D:99:F2:78:91:5F:46:0B:43:44:EE:B3:D6:E8:3B:0C
X509v3 Authority Key Identifier:
keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:05:25:14:55:0e:70:ac:34:81:6b:3b:1f:c4:97:5d:7d:06:
14:d1:63:d0:3c:78:a7:34:9d:57:46:87:f3:e9:60:dc:a1:8d:
e6:d4:36:82:f3:27:1f:95:86:d5:67:30:64:37:b1:56:23:36:
a4:46:fa:01:82:be:9a:cb:d0:bb:b3:1e:30:c3:49:c7:95:93:
8d:0a:07:2a:7e:d8:68:3e:b9:cf:ec:c2:f4:dc:a7:8b:45:3a:
18:c7:47:27:8c:46:12:eb:0b:eb:02:6c:f6:e8:db:a2:ff:6a:
3b:93:d3:a2:db:bf:b4:10:ef:b8:e6:ce:7e:72:db:c5:73:a0:
33:5e:af:fb:d9:de:81:ac:1d:5b:c4:9a:45:da:e5:be:06:05:
65:4a:6c:47:e6:34:18:36:f0:67:ec:76:c1:b2:3f:e0:e3:8e:
e6:08:0e:68:ae:fe:c6:19:5d:e5:d3:43:24:ce:75:c6:5a:06:
f1:36:e2:1c:d4:1e:5b:4a:da:ee:f1:11:b8:91:a6:9a:aa:9d:
a5:2c:62:c4:af:57:3c:89:fc:72:66:ef:6f:02:d8:77:27:4e:
23:ea:9d:03:ff:45:27:80:f0:b1:64:fe:66:3d:9c:0e:7a:ec:
94:7c:71:45:28:a2:60:93:2d:c6:fd:23:d0:7e:b0:61:8c:28:
f8:a3:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:42:11 2026 by rpki-client