
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier: AHwf+t9S2jjKZttk8QEckjy3GdQuTFo2l02hStGD0nI=
Subject key identifier: 45:1D:F8:59:02:C2:19:6D:D5:20:44:95:FB:D9:61:53:33:45:98:CD
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 26C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number: 26A9
Signing time: Wed 22 Jul 2026 15:46:06 +0000
Manifest this update: Wed 22 Jul 2026 15:46:06 +0000
Manifest next update: Wed 29 Jul 2026 15:46:06 +0000
Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: 5ucnXaQzc+2eH3jUfPBRUkanxbhv9+u6Xg5T1qXrtX4=)
2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=)
3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: M+Wr8rsuFkv+pEdccGdYS8z/By6LwokW8IQrKL2jIU8=)
4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9924 (0x26c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: Jul 22 15:46:06 2026 GMT
Not After : Jul 29 15:46:06 2026 GMT
Subject: CN=6a60e5be-f91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:ea:69:5c:94:c7:e1:d1:c7:ea:79:47:a1:
5e:77:48:8b:ca:85:14:a7:fe:09:fb:f5:57:13:1a:
c5:32:a0:e6:fa:57:d9:fa:7d:34:4d:cc:20:f0:55:
c3:7d:0c:4b:a1:32:fd:08:2a:9d:e1:c1:21:4f:fd:
4d:57:eb:bf:03:56:6f:47:5e:eb:72:e7:62:65:a1:
68:7b:e1:4f:ae:3e:b2:6c:4c:63:d2:c9:53:8f:0e:
55:06:21:7e:72:66:ed:02:26:5a:98:5e:dd:8d:cf:
e7:ed:52:3b:1f:79:16:84:72:6f:9e:a4:46:33:d3:
0f:3b:3c:51:c5:99:f5:ba:8d:b5:d2:e7:ff:31:6c:
20:f1:ab:46:7b:cd:9d:7f:b8:77:df:cc:ab:9f:5d:
cd:fb:12:05:b1:db:29:e2:c3:a8:9d:f5:c9:4d:12:
51:81:a4:5d:2d:42:20:f0:0c:c2:34:04:93:de:71:
8c:a1:da:e8:7c:d6:d3:3f:05:e8:44:a6:8d:bc:3c:
ea:bc:ee:cb:20:12:dc:44:40:b4:15:3b:03:06:dd:
a7:d3:ef:10:33:1b:13:a0:12:42:55:0e:32:dd:e8:
f3:8e:2d:ec:a9:79:be:5c:ef:81:78:34:24:02:2a:
7e:7f:84:48:ea:11:34:f3:77:5d:bf:60:c6:aa:d5:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:F8:59:02:C2:19:6D:D5:20:44:95:FB:D9:61:53:33:45:98:CD
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:15:66:10:25:64:ee:51:3f:26:e8:6a:0b:a0:87:81:28:49:
e6:b6:6c:51:61:49:ba:a8:d7:77:a7:83:2e:a5:fa:40:2f:1a:
dc:54:1b:3c:9b:68:c8:51:d4:0f:eb:f5:50:0d:ba:49:2b:b3:
d0:0c:14:14:62:60:6c:50:02:71:ca:c3:c4:9a:65:1b:be:73:
db:c3:a1:a9:5f:fd:a6:0d:f0:71:0b:c9:8a:9d:4b:8f:77:0d:
ae:bb:70:c4:1f:f5:24:98:f8:9e:9f:d3:db:dd:20:5b:12:5a:
48:31:7d:1e:ee:93:58:6f:ee:f2:96:db:bf:bc:cc:32:5f:f7:
3e:2a:e6:8d:d4:58:5d:c1:db:ec:38:c7:54:43:6d:e0:0e:81:
c3:34:f5:87:00:5e:ea:8a:2e:86:d0:82:18:27:d9:4d:25:bf:
75:6d:82:0c:e2:77:a3:f7:8d:c2:82:f4:4a:f8:00:5e:3e:dd:
95:1a:b2:e2:1b:a9:4d:4a:2d:1b:43:ad:8d:a4:18:ea:12:34:
81:81:38:e4:30:dc:4b:91:df:bd:a2:a1:73:e9:d6:5e:05:c1:
05:df:6b:fd:b2:71:a8:10:02:12:05:fc:00:3e:bd:4e:e8:18:
b7:19:ea:df:2f:47:4f:4e:68:a6:06:b4:82:e7:e6:e4:33:17:
34:a9:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:11 2026 by rpki-client