
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
File: rVo_mWvNoZuP1pKxr8inCuMzPO0.mft (raw, json)
Hash identifier: OgV+KYwtClj6pJHg6CmTnhv5y5uPC9xVL5vDHPp1Pqc=
Subject key identifier: E7:1C:E3:45:02:25:40:43:55:B5:F3:5F:18:F2:D4:7E:89:F0:AF:0B
Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Certificate issuer: /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
Manifest number: 97
Signing time: Fri 25 Sep 2026 07:44:35 +0000
Manifest this update: Fri 25 Sep 2026 07:44:35 +0000
Manifest next update: Fri 02 Oct 2026 07:44:35 +0000
Files and hashes: 1: rVo_mWvNoZuP1pKxr8inCuMzPO0.crl (hash: mX95y97CJQszUPpM3zFvS8F+8QcJJtt2VF9qIib8E6Q=)
2: 4C2BA294AD8D11F19E54609E6611F970.roa (hash: a0QAdxp0tkx/D2zn2nKgA7+TVInhNFqP1hOyNXAMsME=)
3: F7D60C96704E11F1B5CFE2966BA30FBC.roa (hash: oe1vgnkyb8CIvEZMzZ+MkkXvbRPonUbDGMWaOrr0Ioc=)
4: 486020FAF24811F08C4BA3F45A6F56BC.roa (hash: IIZPIRoP/o59xvhb+DznrbvhHS6sYMy101+UwMlUN0U=)
5: 59BEB010A02011F195A225877011F970.roa (hash: EifTNUj0yWwldcJ+0g0GCF2FEt6QicxfH4aQnX/Bdx0=)
6: BCEA1EC6A02111F1ADA7A6847111F970.roa (hash: k3r/C0IWGFkN/KCeB/dQuu2YRIj0aTBrV6PXQbEtxVY=)
7: 6812C3EE385211F195EE8776AB833773.roa (hash: QiZIy9BppDeecBm87kyJUHMHx+gfE5RFSOUuyLtQyXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl
rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Validity
Not Before: Sep 25 07:44:35 2026 GMT
Not After : Oct 2 07:44:35 2026 GMT
Subject: CN=6ab62663-2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:32:3e:cf:e5:f3:e8:0e:2a:b1:86:fd:ea:
b4:19:12:6f:b9:f0:61:12:f6:36:7d:e2:91:55:3b:
86:e8:89:2d:ed:66:ff:e5:6c:54:a3:06:8d:73:04:
de:f4:15:2b:6e:4a:72:39:db:95:df:67:d9:72:11:
ea:eb:65:69:46:73:de:15:2d:f4:e7:1e:38:b0:3c:
04:b9:8d:df:cf:ce:6c:2a:ba:17:64:2c:e7:a7:28:
25:b0:56:0a:bf:1c:b2:81:ce:f1:f6:7a:23:84:58:
77:b0:8b:8a:8e:d9:bd:39:e9:bb:92:ea:c4:ca:48:
c6:60:9b:b3:5f:f1:fd:01:b0:c1:22:11:fc:6f:d8:
38:a6:de:f5:61:ca:c0:9c:ea:b1:73:42:88:e7:2f:
79:10:0b:1b:9e:7e:8f:ad:24:9d:5c:8c:48:cc:37:
cb:d9:64:a0:1f:56:74:ae:07:a0:05:1c:2d:c6:c1:
d0:07:c9:0c:45:e7:b8:7e:ec:8c:82:23:13:3d:9d:
ab:dc:e7:dc:c8:fb:6d:42:1e:fe:ca:0b:20:a5:64:
23:5e:7a:3d:c9:db:77:42:2f:24:0c:1d:1f:8d:0e:
3a:ce:8f:df:49:7f:c9:39:9a:6c:cb:c7:79:74:07:
e5:ba:af:23:20:e7:0f:90:bd:44:69:0a:e8:2b:c7:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:E3:45:02:25:40:43:55:B5:F3:5F:18:F2:D4:7E:89:F0:AF:0B
X509v3 Authority Key Identifier:
keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:1e:1a:ef:9c:c7:91:24:3d:11:f4:0b:0c:85:76:12:d3:f9:
68:e8:2b:bb:59:5b:fb:65:5c:83:09:41:2e:d3:bc:4f:c9:63:
81:cb:6a:74:39:07:61:39:01:d9:fd:b1:4b:95:0f:f8:e4:f9:
98:8a:e4:66:a6:ee:a3:bb:b8:d6:dd:00:6b:7d:8b:dd:51:6f:
30:f3:ea:51:c6:97:68:5f:b3:21:d9:18:d0:9b:f0:d0:67:9b:
88:e1:97:e1:a5:de:f2:8e:ee:1f:e9:19:a6:4b:db:32:b1:a1:
ae:7d:de:b5:20:f3:57:fb:da:79:0d:be:9f:47:4c:1a:31:a7:
96:ae:8a:74:6b:3b:0e:29:d4:b6:32:fd:b0:93:aa:04:64:00:
d1:ca:e7:3c:25:18:c9:9a:b3:ae:b9:cd:a9:9f:ef:85:de:7d:
ed:ef:b8:a3:66:7f:4d:15:32:ee:5d:00:72:06:1d:d3:af:f5:
47:d2:dc:c4:3c:54:b5:48:d7:2e:5c:be:4c:77:f9:93:1a:77:
ee:94:f5:89:65:e0:dd:79:f1:60:2b:a5:a0:df:c9:68:6a:05:
c3:c0:c2:b0:9f:7c:d5:ed:89:f0:90:35:5c:0b:a9:9d:77:8e:
be:9c:61:01:e7:ca:04:a3:32:5f:ab:9a:fb:ba:c2:d9:bd:d1:
74:59:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:34:52 2026 by rpki-client