
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier: arLuT9IuWbCh3Ln6j7MXvBGPNCNLbqabFk1VYPwc+eQ=
Subject key identifier: F6:54:19:A9:C0:FC:5A:53:75:2F:3D:47:7F:24:54:72:0A:BA:17:A8
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 26A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number: 2685
Signing time: Tue 12 May 2026 15:42:19 +0000
Manifest this update: Tue 12 May 2026 15:42:19 +0000
Manifest next update: Tue 19 May 2026 15:42:19 +0000
Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: GtPk5g/85XaoWZxvpMWJXrytUxSnq7gwP/KjqtqFXkY=)
2: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=)
3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: M+Wr8rsuFkv+pEdccGdYS8z/By6LwokW8IQrKL2jIU8=)
4: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9888 (0x26a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: May 12 15:42:19 2026 GMT
Not After : May 19 15:42:19 2026 GMT
Subject: CN=6a034a5b-3223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:bf:8e:33:b9:78:11:36:14:8c:b6:75:5e:
72:ae:f2:67:6b:3e:65:4f:33:8a:a4:64:0a:48:13:
2f:1e:ff:5b:6e:d5:89:dc:ad:5b:e8:1e:00:d5:01:
5f:43:18:f6:d4:22:c4:d8:51:33:7e:90:33:05:79:
0c:47:ce:15:f0:44:a5:86:f6:74:48:bd:ef:ce:74:
5c:94:df:b2:e8:3a:0e:77:77:84:2f:8b:93:c9:0d:
bc:2d:4b:d6:35:ea:8d:d3:42:33:89:17:54:bb:28:
95:ce:bf:b8:a1:4d:14:c8:0d:2e:ce:86:19:c1:72:
6c:54:cc:98:de:e5:d0:f0:94:24:1f:36:6b:f1:e6:
09:7f:dd:2c:fa:ef:09:d9:fa:66:93:5c:a8:1b:a0:
fc:d0:ce:07:38:7d:75:68:67:9c:4b:35:98:29:15:
90:29:ea:fc:04:ba:df:f3:d3:73:17:24:b3:0a:a3:
9c:7a:61:1f:50:50:e1:22:81:bf:21:d8:d0:b5:1e:
7a:3e:3f:e7:c5:87:c0:68:58:55:27:b1:8b:59:ac:
bd:b2:3f:1b:04:ff:14:4e:c7:f5:76:2f:f5:ff:6e:
a3:08:2f:01:d5:02:88:17:f0:58:68:29:9d:9a:8c:
13:00:1d:4a:3b:60:4d:e1:c2:cc:e4:75:fb:4b:cf:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:19:A9:C0:FC:5A:53:75:2F:3D:47:7F:24:54:72:0A:BA:17:A8
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6b:f8:be:68:52:66:3d:bd:d3:eb:e5:22:9c:f1:61:67:1f:
cf:da:2e:80:a2:77:5d:7c:5c:f5:da:bf:57:c9:a7:c1:29:e1:
c2:71:f7:f9:f9:e6:b7:22:ea:cb:43:a0:67:6f:21:3b:5e:65:
6a:b9:7a:ca:c3:f1:f8:f7:04:6d:71:e6:4f:79:16:99:98:04:
4f:d8:b8:ae:26:02:90:f9:c2:ac:38:9a:e8:d1:78:c9:f3:aa:
56:85:9c:b6:e0:20:cd:1e:95:9c:d3:0a:8a:4f:e5:c2:1a:9c:
d5:22:e7:5a:a2:3e:60:11:a9:53:aa:8a:1c:40:b5:09:e5:e7:
c6:7c:d0:c9:4b:ff:7b:fe:eb:2a:95:3c:69:a5:6b:d7:26:5e:
95:88:5e:7a:34:31:7b:1b:73:76:ef:6d:85:15:a2:fb:ed:a3:
94:14:64:84:90:64:21:a5:8f:c5:e3:ef:35:28:ea:04:58:81:
c9:e1:1c:ed:07:95:be:eb:46:3b:3f:dd:15:03:f2:1a:53:c2:
5d:1d:32:9b:c3:49:a6:87:49:f9:3f:55:53:d3:d1:82:a0:2c:
40:c1:1f:1c:6e:81:cb:0b:50:94:79:64:a1:a8:3a:8f:56:fa:
6e:63:90:9c:47:0f:2d:38:97:c4:bd:2b:b2:ea:8c:1a:a5:59:
48:48:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:12 2026 by rpki-client