
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier: YZ80PZXcY4qQnxgO7a0VeyLAjPzqaQUwbyD9J+2WBOo=
Subject key identifier: 06:AF:45:C4:2F:A0:B3:D5:60:3F:7D:4B:5E:3A:A4:FE:66:A4:4A:D9
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number: D0
Signing time: Thu 23 Jul 2026 08:31:32 +0000
Manifest this update: Thu 23 Jul 2026 08:31:32 +0000
Manifest next update: Thu 30 Jul 2026 08:31:32 +0000
Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: r4rmObgNs/+JQxRI+hcSpiuDu71NY4s4Zj6SxJ9arrM=)
2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Np4RhG1xsJNFE2oTPHnRwfjk0sVMuj4yUU4qDWm5ytg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Validity
Not Before: Jul 23 08:31:32 2026 GMT
Not After : Jul 30 08:31:32 2026 GMT
Subject: CN=6a61d164-7973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:06:00:1e:a1:4d:29:22:38:65:97:da:a1:
3f:61:11:02:7c:53:7a:f0:0d:58:42:0d:c7:3b:30:
11:1f:9f:d4:0b:77:92:e2:e1:8f:38:3d:77:a5:6b:
a7:de:a9:b9:27:77:0d:3f:b6:bf:07:95:f4:87:d8:
43:b6:15:f7:0e:71:ec:65:6c:7e:1d:7e:65:c8:05:
42:b0:b9:28:15:d6:69:89:81:1a:81:d1:c5:c1:e0:
bd:4c:aa:44:f2:df:64:ab:00:50:af:5e:1f:7b:9e:
8a:77:13:22:3b:5b:05:5a:2f:a3:ff:0b:d6:a9:7d:
6c:95:9c:3c:b5:39:25:c4:fa:f0:84:1e:c8:47:ce:
00:f1:eb:f0:09:30:40:02:58:34:c0:2b:e7:64:f2:
ec:83:58:03:6c:dc:b5:42:49:96:0b:58:5d:9e:58:
21:52:01:ae:7a:60:8e:85:13:a8:0d:f4:b3:e7:1d:
13:e6:95:11:e1:26:c7:73:a2:03:6b:a1:16:4c:f0:
f8:f8:ba:4f:47:d5:fe:51:55:5b:4c:16:43:2e:28:
43:ca:62:43:8c:a0:44:46:c2:9b:45:e8:bf:84:f7:
45:d4:15:9d:7b:16:47:8b:bc:8d:dd:49:ca:ed:67:
ed:6d:af:ec:a6:75:98:15:bf:70:d4:08:11:2f:51:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AF:45:C4:2F:A0:B3:D5:60:3F:7D:4B:5E:3A:A4:FE:66:A4:4A:D9
X509v3 Authority Key Identifier:
keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:3b:81:d2:a2:8f:fe:63:09:ce:5b:bf:19:aa:9b:14:b0:
f0:cb:e9:57:ad:ed:17:54:72:d4:35:71:ef:c0:1c:f0:70:50:
59:b5:07:09:6f:d0:1b:8f:94:94:4a:2e:b0:2f:58:07:e1:00:
77:70:fa:9d:41:d3:6a:98:4b:18:36:ae:c6:49:f3:7e:47:5d:
d6:03:6e:9e:d5:a9:ce:9f:ef:33:94:c7:07:aa:23:c6:fd:9b:
46:ba:33:d6:e5:c8:da:0b:86:dd:84:aa:8e:0f:e1:07:3b:22:
c5:86:31:c5:2e:0c:93:57:97:47:50:9b:03:67:97:ba:99:90:
a9:d2:8b:eb:6c:8c:ee:65:29:12:bf:4f:c5:a5:5a:83:b9:31:
3a:78:7a:5e:bb:e7:15:9e:13:83:df:80:7e:61:68:28:bc:91:
a0:2f:46:ac:dd:d4:9e:4c:15:71:8a:07:e0:c8:3c:c5:a6:2f:
96:23:26:b5:2a:cd:e0:58:9f:b0:3c:98:fa:21:71:54:d9:b3:
75:80:94:6d:0b:a9:fa:64:be:be:53:9e:ed:2f:08:f9:18:47:
f0:b4:6c:6d:e3:1c:c8:3a:af:a4:de:dd:28:e2:aa:8c:25:a3:
27:d0:f0:68:94:09:5a:20:3f:60:b5:79:62:42:f1:6e:07:8f:
b7:51:44:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVDQTkxMTAvBgNVBAUTKDU1REQ2QzFCRjFDNDQ3REYzQ0M4NjQwRDExMTJBOTZB
Q0FFMUY4MEMwHhcNMjYwNzIzMDgzMTMyWhcNMjYwNzMwMDgzMTMyWjAYMRYwFAYD
VQQDEw02YTYxZDE2NC03OTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmocGAB6hTSkiOGWX2qE/YRECfFN68A1YQg3HOzARH5/UC3eS4uGPOD13pWun
3qm5J3cNP7a/B5X0h9hDthX3DnHsZWx+HX5lyAVCsLkoFdZpiYEagdHFweC9TKpE
8t9kqwBQr14fe56KdxMiO1sFWi+j/wvWqX1slZw8tTklxPrwhB7IR84A8evwCTBA
Alg0wCvnZPLsg1gDbNy1QkmWC1hdnlghUgGuemCOhROoDfSz5x0T5pUR4SbHc6ID
a6EWTPD4+LpPR9X+UVVbTBZDLihDymJDjKBERsKbRei/hPdF1BWdexZHi7yN3UnK
7Wftba/spnWYFb9w1AgRL1G6mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAavRcQv
oLPVYD99S146pP5mpErZMB8GA1UdIwQYMBaAFFXdbBvxxEffPMhkDRESqWrK4fgM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNBOS85NkQ2MTFEMDRC
MEExMUYwQUI1NDIwMUVDNEY5QUUwMi9WZDFzR19IRVI5ODh5R1FORVJLcGFzcmgt
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZkMXNHX0hFUjk4OHlHUU5FUktwYXNyaC1Bdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUNBOS85NkQ2MTFEMDRCMEExMUYwQUI1NDIwMUVDNEY5QUUwMi9WZDFzR19IRVI5
ODh5R1FORVJLcGFzcmgtQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm/g7gdKij/5jCc5bvxmqmxSw8MvpV63tF1Ry1DVx78Ac8HBQWbUHCW/QG4+U
lEousC9YB+EAd3D6nUHTaphLGDauxknzfkdd1gNuntWpzp/vM5THB6ojxv2bRroz
1uXI2guG3YSqjg/hBzsixYYxxS4Mk1eXR1CbA2eXupmQqdKL62yM7mUpEr9PxaVa
g7kxOnh6XrvnFZ4Tg9+AfmFoKLyRoC9GrN3UnkwVcYoH4Mg8xaYvliMmtSrN4Fif
sDyY+iFxVNmzdYCUbQup+mS+vlOe7S8I+RhH8LRsbeMcyDqvpN7dKOKqjCWjJ9Dw
aJQJWiA/YLV5YkLxbgePt1FEwQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:49 2026 by rpki-client