
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
File: vNzosG8FliNAMAycR0e1olGiGcQ.mft (raw, json)
Hash identifier: HMWMSoU6PTA8azc4+K90y4MbKUXuIsnUsFMQz2Oksms=
Subject key identifier: DC:85:B1:A7:E0:EE:B1:E4:03:D8:03:05:0B:FD:61:E9:76:20:99:66
Authority key identifier: BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
Certificate issuer: /CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Certificate serial: 355B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
Manifest number: 354A
Signing time: Tue 12 May 2026 14:55:27 +0000
Manifest this update: Tue 12 May 2026 14:55:26 +0000
Manifest next update: Tue 19 May 2026 14:55:26 +0000
Files and hashes: 1: vNzosG8FliNAMAycR0e1olGiGcQ.crl (hash: XSwQ9zDlQ4/L+alI7Bwvk6eQyuXv5xKb8Qg8ryE+WE0=)
2: 3FEFA562483D11EC82E81112C4F9AE02.roa (hash: bRLxY+etXNXqCv4S4DMqEKntfbe88KxPJAJyBTa11rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13659 (0x355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C65E8, serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Validity
Not Before: May 12 14:55:26 2026 GMT
Not After : May 19 14:55:26 2026 GMT
Subject: CN=6a033f5f-0465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:ac:b4:e8:79:aa:d6:94:ba:a8:1e:58:26:
e6:c9:e4:06:3c:1b:12:24:36:21:88:0f:f1:05:d8:
9d:06:8b:e6:52:96:2a:70:bb:06:2b:ab:7a:d9:5f:
ec:ae:e9:b8:14:9b:66:80:33:6f:cb:b3:c5:6f:be:
28:e5:7d:df:7a:60:ad:6e:f3:84:d3:a4:76:c1:c0:
11:80:68:46:ac:6b:e4:73:d7:81:a9:ea:09:0a:ed:
57:8c:86:30:1d:29:e7:fc:ca:9a:bb:9b:6f:11:05:
5e:be:75:a6:b8:92:e7:57:65:01:89:dd:76:91:83:
3e:af:84:79:3c:0f:8f:91:3f:a4:13:fd:3b:76:81:
c8:d5:6d:63:ad:56:21:67:c2:eb:bf:05:36:cc:5a:
e9:47:76:a8:6e:72:d8:4f:be:11:31:d6:0f:e2:5f:
9c:47:e9:38:47:d9:4a:6a:fe:fd:cc:b1:2d:cf:fa:
4e:ed:4a:ba:73:de:39:d8:cd:7f:ae:56:a2:88:8f:
39:9e:4f:4a:f1:b2:0c:83:28:b9:c5:e9:ae:a9:6b:
9c:e9:52:fa:95:17:f4:78:ff:56:cc:23:5d:ec:12:
2b:c6:aa:9f:69:b2:e7:9b:15:83:c0:1a:ba:da:9f:
34:ea:23:b9:f3:3c:0c:dd:30:a0:4c:66:cd:b6:43:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:B1:A7:E0:EE:B1:E4:03:D8:03:05:0B:FD:61:E9:76:20:99:66
X509v3 Authority Key Identifier:
keyid:BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:aa:c4:f6:72:2b:bf:c5:ca:6a:22:c9:71:e2:8a:9a:71:96:
bc:11:cd:2f:3f:1f:9a:ba:c3:d4:31:f6:4c:11:dc:eb:26:cb:
fc:99:0c:e3:85:ab:98:85:06:b8:94:c8:00:2c:53:16:16:ca:
18:3e:f5:1e:d8:7a:66:1e:b5:c2:bf:f7:4a:f0:d5:b8:70:72:
25:a3:04:0b:4d:c6:52:3e:a5:d3:0a:f6:aa:8f:a0:68:d0:f7:
20:13:c6:3f:e6:17:0a:ac:52:2b:02:f3:59:78:8b:9c:57:69:
93:34:96:1f:fe:ef:0e:df:52:18:30:42:f8:65:a3:e4:4d:4a:
ff:9e:98:db:cd:08:eb:c8:6d:bb:72:65:a6:13:b1:ac:df:53:
c4:20:ee:55:eb:8f:8f:4f:3e:0b:76:b8:a1:84:b0:c0:60:55:
6a:db:c3:c9:1b:8a:0d:b9:2c:fd:62:55:6a:df:07:90:9c:72:
bb:ef:d0:bb:e3:5b:62:4d:84:c8:67:91:ba:9c:43:48:77:fa:
33:cd:19:d8:b6:c0:83:e7:3d:3a:c0:c7:b1:c5:a5:8b:29:30:
48:68:06:80:59:6c:b8:5d:da:d5:b0:b8:eb:cc:3b:ee:60:63:
4d:ce:ca:5e:f3:3a:f2:08:82:13:37:d6:dc:1b:d3:0e:55:fc:
e2:71:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:45 2026 by rpki-client