
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
File: vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft (raw, json)
Hash identifier: HYIZixqYGHH6Cjg/dxzISWMF1nNq0GuDMnSHOAenSFE=
Subject key identifier: F5:62:44:36:15:F8:B0:C0:31:AA:24:D7:0C:86:C9:83:DE:56:7E:12
Authority key identifier: BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1
Certificate issuer: /CN=A91CD277/serialNumber=BC29E5E4DB13FC53C02282B0C32F586E1C9466F1
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
Manifest number: 19
Signing time: Wed 23 Sep 2026 08:43:49 +0000
Manifest this update: Wed 23 Sep 2026 08:43:49 +0000
Manifest next update: Wed 30 Sep 2026 08:43:49 +0000
Files and hashes: 1: vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl (hash: AEv3vJ12NhFroRDhD++kvwwyRtzOdj0C7e4/quZWgNg=)
2: 6541C736955011F182DDD8986311F970.roa (hash: VmYiwJkdtivR6HXc5cYeknzo53XRP+VA+7pqAoe/M2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl
rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD277, serialNumber=BC29E5E4DB13FC53C02282B0C32F586E1C9466F1
Validity
Not Before: Sep 23 08:43:49 2026 GMT
Not After : Sep 30 08:43:49 2026 GMT
Subject: CN=6ab39145-a4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:a9:19:49:3c:62:0e:b1:ff:aa:b1:74:2a:
22:22:ca:db:21:7b:ea:7e:f6:9e:89:7a:bf:8a:12:
21:ff:65:e4:be:4f:fc:51:0c:e0:96:2a:74:c1:c7:
f9:ab:c0:32:37:d6:45:89:40:d5:e4:fd:6f:98:7b:
f1:e2:fb:66:67:7a:02:cb:3d:3e:88:63:3e:2f:48:
9c:73:b4:03:27:21:53:7f:9d:ab:73:8b:ad:c0:f9:
eb:2a:40:94:72:8f:82:52:a7:04:75:f5:29:6e:8c:
7b:bf:84:9b:ae:c1:64:de:a6:96:b6:40:4c:61:ea:
7f:87:c0:00:0d:26:c4:0a:67:91:c4:df:a1:a7:f7:
92:71:a9:33:07:cd:1c:c9:2c:63:53:0a:87:41:71:
7e:ca:be:44:a4:fe:6d:e7:ce:e4:20:5a:9f:62:6e:
f8:a6:31:ab:8b:51:07:e9:f4:7a:02:76:65:15:80:
dd:46:29:e8:d4:47:62:9e:33:59:03:43:2b:bb:98:
62:f0:c7:3c:9f:95:44:0d:15:a1:d0:83:d8:a9:24:
41:12:1e:e1:e7:4d:70:b3:cb:01:1e:af:f5:b8:e9:
19:97:d5:85:87:81:25:d5:17:58:31:6c:69:f8:0f:
fd:75:be:99:18:f3:7f:1a:69:f9:d3:fa:67:f4:a4:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:44:36:15:F8:B0:C0:31:AA:24:D7:0C:86:C9:83:DE:56:7E:12
X509v3 Authority Key Identifier:
keyid:BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:fe:e3:d5:7a:18:22:4c:b9:39:90:df:8c:19:f1:0d:40:e8:
1b:bf:1e:cd:c0:95:ca:93:0a:e4:87:3c:f1:87:3a:7d:2f:b2:
1c:ac:df:17:d2:26:ac:4b:1b:aa:71:67:41:bd:9b:50:ad:6f:
72:79:40:fb:71:2f:dc:ef:16:3e:8b:e5:56:a0:a9:2a:63:48:
bb:8f:34:41:b3:fe:18:b4:c0:c6:42:f7:23:2d:4e:7f:3e:ca:
e8:ac:63:b8:41:51:06:dc:9b:3c:c6:5b:58:f0:49:c3:34:18:
7e:ee:bc:7d:50:fa:76:d7:90:b0:5a:2d:eb:54:a8:6c:c2:90:
e9:01:1c:38:8a:43:2c:3b:b2:b2:dc:d5:f6:76:0e:09:08:87:
e1:c1:e9:18:28:26:5b:cf:e0:31:c2:e4:39:ce:b4:e1:da:05:
e2:c8:bb:1f:13:69:7f:ee:cb:cc:cc:ca:87:56:24:81:d8:8f:
c5:cc:2c:6c:a0:0b:32:e6:3c:84:ae:ce:d8:f4:72:76:d8:7d:
46:6b:aa:1b:d6:33:f7:13:7d:f9:cd:2e:99:4d:6c:0d:db:31:
d1:31:04:07:1c:4c:f6:21:e3:c0:97:37:9e:b1:fb:13:e2:f3:
a4:12:3c:6b:c8:ce:76:b9:bf:3b:1c:9a:54:5a:74:89:5a:ec:
45:99:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:54:08 2026 by rpki-client