
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
File: vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json)
Hash identifier: yJlx827RkPysF8tQKAsppPSi6C7fAdvwiN8P6Wd7Slc=
Subject key identifier: CA:64:FD:61:89:25:E7:87:A3:8A:90:5B:BD:6F:6C:B5:0C:FD:53:22
Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
Certificate issuer: /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Certificate serial: 0939
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
Manifest number: 0926
Signing time: Tue 24 Mar 2026 20:01:31 +0000
Manifest this update: Tue 24 Mar 2026 20:01:31 +0000
Manifest next update: Tue 31 Mar 2026 20:01:31 +0000
Files and hashes: 1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: NbGdDnSnEx+MWgw9xWs7/JupkqMMP0eG4KXzwIO9lgA=)
2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: Ra6aDzkRJ9CvQ2Xe9bv2r/5IA66OVXcErWzz8l4k4Jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2361 (0x939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Validity
Not Before: Mar 24 20:01:31 2026 GMT
Not After : Mar 31 20:01:31 2026 GMT
Subject: CN=69c2ed9b-89e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:d0:09:d7:a3:dc:56:cf:16:81:29:3b:85:
d0:ec:49:8b:01:36:ea:be:e5:25:1a:b8:c2:60:6e:
97:7d:a3:bb:47:e9:40:f1:1e:0c:4f:ad:9a:77:22:
0f:6b:a8:0f:52:a4:34:72:9a:4c:4f:b8:f0:ef:04:
40:41:ce:28:79:e9:54:b4:84:bd:14:b5:5e:f6:dc:
ae:e4:c6:27:8a:3f:26:23:80:be:42:91:36:dd:e6:
bb:1d:3f:8e:c2:d5:08:72:72:12:41:18:08:13:31:
55:f3:49:9e:26:72:21:c1:f0:81:d3:14:21:dd:3a:
fb:25:19:65:2a:d7:0e:45:87:99:58:03:0f:d5:d1:
ce:8e:bf:ee:0b:e8:cb:93:36:0e:26:db:fe:76:45:
de:ef:17:7f:17:31:83:ee:d3:d1:59:8f:d7:e0:f4:
d0:73:b4:f9:ce:99:36:e2:6b:11:04:e0:bd:fb:e8:
5a:40:1d:68:21:5c:ca:0e:f5:68:be:f7:3c:b1:bf:
fe:cf:c1:a4:a8:a4:de:13:a6:2b:78:28:94:aa:c7:
68:02:d8:74:b7:77:13:42:df:87:bc:30:84:3f:6e:
5f:b7:9d:d9:da:9b:36:f1:1d:0f:df:c8:86:4d:cb:
0b:3d:75:47:32:a6:b8:ab:02:c5:f7:18:ae:0e:dc:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:FD:61:89:25:E7:87:A3:8A:90:5B:BD:6F:6C:B5:0C:FD:53:22
X509v3 Authority Key Identifier:
keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bf:76:d1:09:a4:ba:8f:a5:cd:a9:a5:9d:60:6e:9a:52:c4:
30:67:a8:37:11:99:2f:1f:e3:2e:46:97:ed:d6:12:f5:71:69:
ae:d8:ba:9e:32:e8:6e:fa:69:d0:25:95:78:cd:e3:6e:2d:ff:
7f:f4:b1:5b:51:82:b0:2d:f8:9e:5d:32:c7:7f:9a:38:9d:48:
aa:03:1f:01:45:fe:8f:46:49:f0:31:c9:53:08:bd:46:b4:bc:
09:eb:1e:d2:0d:ad:41:51:4c:90:dc:4c:0d:2a:87:c5:bf:1e:
d7:6a:1d:8d:86:52:62:5a:c2:25:8b:bf:c7:4b:16:62:33:29:
f4:81:b1:fd:f7:7a:89:7c:2e:d9:01:1c:35:11:28:57:c8:1b:
3e:d5:92:b4:b7:bd:58:94:6c:db:7b:13:ba:a9:b1:7c:1c:4b:
9c:ff:8f:b2:0b:36:2c:0b:d6:59:d6:d4:95:69:1d:07:63:7e:
69:d0:fb:0b:58:aa:29:80:f0:49:15:c2:11:be:ab:46:9f:22:
db:2f:16:87:65:a3:f6:9e:15:71:b7:aa:a1:27:e0:d1:af:a4:
77:83:83:a3:dc:1f:d4:24:e8:f8:ed:ca:cd:c0:8a:61:66:0d:
0d:da:36:ef:72:f1:70:8e:f8:78:27:6a:b7:34:06:4a:40:45:
39:8a:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:14 2026 by rpki-client