
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier: dlwgsf6CXvAVTwEwA0oGLx+RmIHpoHsAjwYXRwDhpJk=
Subject key identifier: 21:99:94:E7:DD:2E:63:BD:BE:EB:B0:8A:F0:36:B2:42:AC:2C:6E:1C
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial: 07D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number: 07C4
Signing time: Tue 12 May 2026 21:28:24 +0000
Manifest this update: Tue 12 May 2026 21:28:24 +0000
Manifest next update: Tue 19 May 2026 21:28:24 +0000
Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: xuwAkkr5VgFm7erJ9psWtYBpnCGZveU5Ig/zCz1Tyzc=)
2: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: 4xgzK7PrNpZAnd72wXzvBuPzMZA+sokeDoeYoGYDtEI=)
3: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: mtoKEHPZWLoyi/r8N8V2JGeY1kwSeTuX6aCOjVwyle4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Validity
Not Before: May 12 21:28:24 2026 GMT
Not After : May 19 21:28:24 2026 GMT
Subject: CN=6a039b78-0aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:d7:b8:02:d8:83:4f:79:df:a0:4e:f5:e9:
98:fa:87:a7:84:d0:d6:3e:8b:d0:a2:75:45:20:45:
54:f8:57:95:54:7d:e3:81:9b:b5:74:d7:43:ac:ec:
b9:18:27:18:65:8e:24:87:73:58:8c:54:dc:d0:ae:
cf:3f:a4:34:69:ec:7c:21:95:d2:6c:42:28:ff:9e:
04:96:10:52:60:41:da:66:38:2a:1a:96:96:00:59:
13:1e:79:45:e4:4f:fb:01:14:81:13:9a:31:b4:a2:
69:e1:85:2a:12:18:07:9b:fd:50:7c:8d:91:8d:a0:
40:fe:31:47:c2:b8:ad:ea:6f:c1:98:94:9b:45:51:
09:9e:25:a4:69:d4:d6:f5:4f:25:76:f8:3c:f3:7c:
0c:0b:91:de:3a:6a:11:f4:80:e0:40:1f:d8:d5:7e:
98:3c:05:ec:80:87:c9:db:eb:ac:a8:b9:96:de:bf:
ac:ab:6e:9f:44:dd:91:20:56:8b:62:76:43:fb:60:
b6:c7:c6:55:fc:14:e5:a0:6e:d1:20:fa:f9:42:a8:
2b:7f:9e:58:de:3a:fa:d2:5a:21:4b:86:e6:df:b3:
d9:4f:06:67:71:05:91:a3:30:bd:bb:2d:3e:fc:1e:
5f:5e:71:71:7d:44:8b:1e:0b:98:76:c6:e9:c4:39:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:94:E7:DD:2E:63:BD:BE:EB:B0:8A:F0:36:B2:42:AC:2C:6E:1C
X509v3 Authority Key Identifier:
keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:94:1d:f8:54:2b:a5:a4:4f:a7:70:1b:4d:e7:0c:1d:35:8f:
6b:7e:70:6b:ed:4e:39:04:3c:ff:78:72:bb:de:24:08:2c:8b:
82:92:d7:2b:5f:51:05:d5:6e:b2:f9:87:bc:a6:ec:10:de:3e:
3e:2f:57:78:a4:92:73:82:70:3b:8a:ff:34:7b:3a:88:25:73:
b1:cc:db:bf:4c:04:00:9c:41:80:2a:59:8e:c7:0f:96:e5:4b:
3d:d1:88:06:5e:6a:04:e4:4b:70:70:35:94:9f:0e:8e:a0:32:
cc:87:a9:95:ed:6d:93:12:4e:a4:01:d1:4e:c5:91:53:39:c6:
fe:25:bc:11:df:e7:6b:9c:b3:4e:53:ee:38:49:d2:0d:64:fb:
55:b8:a1:b6:e0:e0:21:03:6d:91:bf:57:56:78:cd:8e:07:26:
60:23:cc:9d:04:ad:85:55:62:36:16:1f:37:84:c0:17:6f:df:
5e:82:a8:34:27:74:24:da:3b:82:82:3d:fa:fe:e4:0b:aa:e0:
10:7e:74:ca:b0:45:5e:67:7e:e4:a8:bb:47:77:79:a5:1f:25:
d4:6f:d6:9f:77:7d:72:b1:d1:04:72:6a:60:11:26:b3:6d:33:
8d:bb:9f:c5:4c:20:cc:85:c4:a6:c3:52:41:b5:d7:0e:a0:00:
6a:95:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:26 2026 by rpki-client