
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
File: VSG7pLlnmYQnwoK61rZvfm22twc.mft (raw, json)
Hash identifier: 0ThGEUk/VHr9q3wIsQKECjR58WGrgpnA5R7dRqAWnRQ=
Subject key identifier: 24:FD:8E:92:E6:64:EA:E2:8F:29:2C:E0:A4:90:4D:0C:24:27:62:78
Authority key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Certificate issuer: /CN=A91C7836/serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
Manifest number: 2F
Signing time: Fri 09 Oct 2026 09:29:34 +0000
Manifest this update: Fri 09 Oct 2026 09:29:33 +0000
Manifest next update: Fri 16 Oct 2026 09:29:33 +0000
Files and hashes: 1: VSG7pLlnmYQnwoK61rZvfm22twc.crl (hash: tixdEx/VB58ZzrsFZEpeUz2Uq3VuWcqlxh0c8MMZoAA=)
2: 33A082DA948D11F1A5BE36406611F970.roa (hash: Zrbzfz5Z2TeRzK/kWg662lvjXfu9AESyGMfzdvdsjVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Validity
Not Before: Oct 9 09:29:33 2026 GMT
Not After : Oct 16 09:29:33 2026 GMT
Subject: CN=6ac8b3fd-90bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:94:00:b4:02:bd:c9:fd:04:40:be:09:bd:
e0:4a:c0:2a:38:bb:47:c5:26:c4:32:74:d0:90:b4:
1a:cd:e2:bf:68:40:f7:de:01:69:b8:43:df:56:2d:
7c:fb:a8:92:9d:55:65:a5:0d:71:75:0b:e3:0e:1e:
00:6f:fd:8b:e2:0a:8d:a4:89:ff:6d:a3:fa:f2:79:
48:27:7b:1f:ff:0d:dc:2f:fa:99:35:06:8d:70:44:
7a:33:2d:ae:a9:dd:6d:1d:f4:ae:eb:3c:6c:08:1e:
cc:bf:5e:4e:6f:0b:fc:d3:ae:ef:f3:3c:e5:47:78:
30:34:5a:c9:62:86:7f:8b:46:ce:c0:d5:bf:86:eb:
85:10:3c:d5:01:99:32:94:0f:70:98:82:07:eb:b2:
0c:9b:9e:44:b0:a6:80:47:62:66:ca:12:52:5f:af:
77:6a:49:0f:88:0c:2a:d8:26:a2:79:81:7b:18:99:
c6:67:3d:fc:f9:71:52:c9:48:7e:8c:f2:9a:67:ab:
fe:95:1c:fe:aa:d8:3c:37:f1:17:fd:9a:30:22:c5:
17:99:28:01:9a:c5:d4:9c:8f:39:96:12:db:21:0b:
64:f7:3a:c9:44:c8:4a:87:4f:45:a8:33:62:26:45:
66:95:8f:83:fd:9d:e6:a1:0a:3c:1d:77:07:16:1f:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:8E:92:E6:64:EA:E2:8F:29:2C:E0:A4:90:4D:0C:24:27:62:78
X509v3 Authority Key Identifier:
keyid:55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:6a:03:26:4e:39:13:ff:25:46:00:fa:d7:77:5c:0b:82:
9a:5c:b9:56:8a:d5:b3:39:0a:37:0c:c5:15:d2:40:25:dd:52:
5e:4f:3f:e6:93:7c:3b:46:12:b9:e4:6c:ca:86:ad:e8:37:48:
d3:8a:71:45:56:35:ad:6e:cf:d6:10:86:21:fe:74:1b:33:82:
ca:c4:ea:2d:83:ed:37:10:4a:9f:e8:9d:09:74:93:2d:3f:fd:
0b:50:a5:08:ec:31:5f:c0:96:a9:17:e4:60:42:3a:af:4e:ed:
02:09:ac:76:e2:7c:b7:2a:4f:2d:61:db:0a:f8:6a:32:88:27:
65:5b:48:f3:ea:95:45:89:7d:95:c5:48:8c:a7:bc:97:49:94:
8b:a2:c2:7f:bd:af:ef:53:24:a4:13:88:f4:63:42:ee:7c:58:
f8:a3:29:56:73:23:ff:db:48:65:d9:46:e0:e1:ea:cb:2f:4c:
33:00:fa:6a:81:9a:99:40:fb:c5:9a:b9:fb:13:31:5b:b9:15:
f5:ba:f9:f3:8f:5e:ce:63:60:14:75:b0:e0:dc:35:9b:7e:73:
82:b7:47:81:01:c8:15:9a:80:c4:34:dc:ba:eb:af:91:28:c4:
1c:82:c1:93:d8:6e:6b:20:36:b2:bc:5e:e5:61:4a:40:af:b3:
59:bd:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:35:27 2026 by rpki-client