
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json)
Hash identifier: 7hMFaej7tpOkS/wcoyBJ8pYCLtHSfNnjp0EYWh9uJYs=
Subject key identifier: E4:CA:2B:5B:A6:02:96:26:47:C0:2B:FD:84:5B:7D:1B:3D:0C:9A:98
Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Certificate serial: 0CFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
Manifest number: 0CF3
Signing time: Tue 12 May 2026 18:18:11 +0000
Manifest this update: Tue 12 May 2026 18:18:10 +0000
Manifest next update: Tue 19 May 2026 18:18:10 +0000
Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: VRZuCnnAtG+xoVJjdxhEYDM+7qJrlrTZtXc3eRZ6TFM=)
2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3324 (0xcfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Validity
Not Before: May 12 18:18:10 2026 GMT
Not After : May 19 18:18:10 2026 GMT
Subject: CN=6a036ee3-4fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:b7:d0:88:fe:6e:9f:da:41:fb:85:4f:81:
df:63:74:3c:eb:d7:86:f5:bf:81:94:a0:19:72:8d:
c5:48:42:86:bb:50:e3:c2:e3:53:6d:f0:54:d7:c7:
44:1f:65:c9:23:bd:62:15:e6:4c:f0:10:3b:5f:19:
f1:2a:b5:50:0c:4a:f3:89:d2:00:7f:8f:9f:c6:ac:
b4:fc:d3:97:55:30:5f:fa:5a:53:9f:05:ff:28:74:
5b:0b:51:9f:cd:39:b2:97:27:84:83:12:f8:f8:ca:
5d:6b:cd:e4:da:0a:3b:70:34:fa:c3:21:8c:2a:b9:
c8:de:cd:8a:50:ab:a5:d1:cf:56:9b:48:35:6a:de:
76:30:a2:85:9d:f2:b9:44:9e:32:49:f2:e8:86:ba:
b4:1b:84:71:df:a6:63:25:d4:b1:ec:9f:ba:5f:ec:
1d:0a:b9:10:3a:82:a0:79:a2:a6:f2:8d:14:1c:6c:
bb:f4:e6:e0:ad:9b:7c:e2:a0:6e:53:e9:51:d6:48:
d5:00:b3:d6:43:1a:75:92:ee:66:1d:98:a6:b1:3d:
29:12:ed:f2:21:d8:df:55:a4:3b:ef:47:b0:0e:fd:
06:43:73:46:a9:c3:f3:90:3e:04:99:7f:c1:e8:0e:
10:70:8c:5f:db:d4:8e:96:a2:98:0e:7a:a4:a2:01:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:2B:5B:A6:02:96:26:47:C0:2B:FD:84:5B:7D:1B:3D:0C:9A:98
X509v3 Authority Key Identifier:
keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3a:79:6b:18:17:c9:7d:24:1a:20:0a:34:1d:26:67:7d:cc:
fe:76:51:5e:b2:70:75:38:ae:9f:58:47:6e:3d:5a:50:05:24:
e5:db:dd:f1:29:fa:18:b7:51:73:56:a4:53:e3:c1:03:df:1e:
55:60:b7:50:03:c8:db:24:bc:98:0a:1b:98:64:23:11:6f:d2:
6e:3d:d4:4c:08:5b:1c:90:f4:c2:94:4f:3b:c4:48:c8:cf:65:
cd:b4:be:35:5e:f8:23:1e:64:7a:ca:d0:1e:b1:10:fd:6f:e3:
c9:cb:51:22:f5:80:ff:b8:db:d7:70:44:96:ad:64:71:fd:76:
5b:38:0a:6d:6c:93:0f:cd:35:09:7c:0b:74:d4:aa:27:c3:66:
e6:6f:05:32:d1:53:ab:34:55:82:01:1f:b4:41:6b:fd:5d:62:
af:87:a3:04:72:bd:fc:51:8f:4a:71:80:4d:5b:64:b6:8d:34:
43:57:a4:8a:e9:81:81:e5:f4:0a:c3:22:41:ce:d9:d5:06:24:
6a:68:40:e3:73:a6:29:a1:0a:d7:a1:02:54:2f:dd:59:14:f7:
32:00:0f:5f:f7:db:18:c6:18:b2:0d:5f:fb:a5:c1:3d:b0:0f:
5a:b5:90:be:90:05:52:a8:06:dc:d4:dd:e5:b5:e6:1b:3e:f3:
b6:ed:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:42 2026 by rpki-client