
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json)
Hash identifier: n5s9EyRhxWhwTg5a9tREHOCp0hIVNzsnuGpeyCLZNNA=
Subject key identifier: B8:54:DD:86:F2:C9:E9:F4:C9:3E:05:1F:9C:F9:1F:C0:F7:BE:19:E4
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
Manifest number: 15C6
Signing time: Tue 22 Sep 2026 18:10:49 +0000
Manifest this update: Tue 22 Sep 2026 18:10:48 +0000
Manifest next update: Tue 29 Sep 2026 18:10:48 +0000
Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: F7mHOWJ8jGjv4M9rdKfYnYuk7JvpwyphaBMBGr68mzw=)
2: 3FF2864AA43D11F1B8FFEA023611F970.roa (hash: Kk0AuJ/Ryqtzie4lfhU9TW/rv+oP1/JoDGak//4Qkco=)
3: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: nHHzFrXJRcXIb2I9fczhxDS1jU+m1O4shauWLpm0dzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Validity
Not Before: Sep 22 18:10:48 2026 GMT
Not After : Sep 29 18:10:48 2026 GMT
Subject: CN=6ab2c4a8-a708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:2b:a7:f4:6d:a4:bb:97:4e:f1:f5:c6:3a:
31:00:ae:70:83:b7:8e:93:1f:d2:36:97:d2:73:48:
c7:2e:3d:df:ad:40:25:ce:6a:fc:e6:c0:0f:e5:2d:
e9:63:71:1f:50:da:8e:79:2f:bc:e9:06:2f:07:23:
29:8f:57:8f:98:14:c7:42:27:c1:73:1f:5e:af:8c:
ff:87:9a:b8:b0:58:a6:3c:8d:f8:12:15:83:b0:b0:
bd:5d:0e:d9:b1:35:29:c4:af:c8:ab:2c:ff:e3:64:
58:63:1c:a8:4e:51:87:cc:22:bc:fd:79:45:b2:66:
9d:ba:dc:21:e7:0b:48:de:ad:d4:b5:d7:54:08:8a:
2e:f2:5f:90:b9:89:ab:13:85:93:f9:d2:f2:ab:6f:
01:ca:4c:81:7b:ee:4f:66:b6:ff:59:8b:e9:36:20:
de:a5:6e:7f:17:2e:bd:34:49:19:9c:f6:0e:43:74:
6f:40:53:52:94:4b:d8:be:42:11:ed:03:42:ef:13:
56:22:35:04:86:5f:97:0c:a5:5e:7e:ef:33:27:65:
f5:2e:e4:8a:c0:f0:af:cb:19:9f:89:c1:6c:d2:4c:
3c:d1:51:1b:39:62:ad:96:48:0c:08:c4:2d:99:09:
fd:8b:0f:86:74:0e:84:f9:66:ab:c1:94:0b:42:2f:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:DD:86:F2:C9:E9:F4:C9:3E:05:1F:9C:F9:1F:C0:F7:BE:19:E4
X509v3 Authority Key Identifier:
keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:8d:5a:d0:a1:12:b9:02:18:f1:d0:c0:72:57:4d:d7:cd:
cd:36:50:b5:c3:a8:64:55:2b:0c:e4:fd:5b:64:40:39:5e:c8:
eb:a8:94:58:7c:e3:77:70:aa:73:d9:9f:56:bb:09:c7:7a:07:
f9:78:a3:f4:85:69:c6:76:a2:91:09:b5:6f:c5:0d:93:b1:3c:
90:73:ce:f5:25:a5:47:dd:b8:46:31:91:00:54:fe:36:cd:ed:
74:a2:83:65:23:05:fd:28:e2:3e:a0:6d:5b:99:d7:6d:c9:74:
a5:df:6e:14:95:2e:bc:1a:47:65:5c:e2:1d:34:45:b3:4b:e8:
0e:48:87:1b:0d:a9:98:70:5c:20:b4:68:c0:21:52:d5:50:fb:
18:8a:e0:9b:2a:52:d6:e8:2e:2d:70:51:9f:8c:c4:ac:8a:7c:
8e:ae:16:c7:57:73:1e:d3:77:d5:69:98:75:89:02:81:fb:7b:
91:17:fa:55:48:39:28:b4:5a:b1:34:5a:d1:b7:c5:66:27:7a:
1e:94:0d:ae:f5:78:44:01:a7:ed:a3:a4:55:c5:ee:db:49:4d:
b1:25:cb:c5:ea:6e:8b:69:08:01:fd:77:5f:4e:12:49:16:cd:
6e:af:da:41:31:11:a9:ed:be:42:d4:6c:4b:fe:22:ae:b0:94:
b6:ea:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:35:16 2026 by rpki-client