
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier: 5btG3gBTmO89vqnA8chUVLykTadQmMNYlZlyeVrSyyo=
Subject key identifier: 42:2B:A3:0C:FF:9D:7C:2F:4B:50:AC:6D:C6:C3:A7:06:55:63:63:1D
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0C3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number: 08B8
Signing time: Thu 23 Jul 2026 08:59:54 +0000
Manifest this update: Thu 23 Jul 2026 08:59:53 +0000
Manifest next update: Thu 30 Jul 2026 08:59:53 +0000
Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: m9CGch1kGjYGJ699YsbGJ2KgwEUmycQ5vzEehaEFlo8=)
2: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: nbLqVcL0fTjqbIJwLUXiGBSckIhHY+gUWicA4Ejfd+c=)
3: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=)
4: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: ufTi5hbK6vc1MI5912uruEQ478fXX3CwZt4j4vHPRQ4=)
5: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM=)
6: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=)
7: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=)
8: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=)
9: 03D31B6A775711F1A349736662A30FBC.roa (hash: dvNyDKjY+q/DPA+bpKMpCsyquJDjlYqP9mC2DA3NqL0=)
10: 262EECF8623E11F1B19F70B27947A888.roa (hash: 7r8I/t3aD0KS64OG37TgSZks2BgxIbXwQjHGWmC2/98=)
11: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: 44VXldbBCfEVQNtNcncHBjm9zUl5518bfQtv5Cwsbsk=)
12: D359E238716B11ED9F349A49C4F9AE02.roa (hash: go9QI7FpdmjkqqbhQxd+M3xHAwb/d4cfJkbfC6AyPpc=)
13: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: LmBb3E6ZOpW9OlLSpl9Xe8OqcU/Rwlz9J6Udb54EdW8=)
14: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: JnZNG5CGc8oHU0w2EbnMQvCrxn0rcrBgZn15GdSGzO0=)
15: 733B2566778D11F1A5FCE36972A30FBC.roa (hash: MhSAVOXZtaH9ksASWWeor2AgauRPg8SzoAGrVH1ZbqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134 (0xc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Jul 23 08:59:53 2026 GMT
Not After : Jul 30 08:59:53 2026 GMT
Subject: CN=6a61d80a-64fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:fe:b3:8f:dc:41:7d:c8:2c:c7:79:70:c4:
1b:65:4d:21:f8:ef:94:4e:38:5d:3e:f3:1c:53:cc:
38:c0:32:96:7c:d3:7c:ea:97:89:0c:a1:ef:ad:0b:
9c:8d:3b:c4:6d:f9:f0:c2:78:9c:af:23:31:c8:9c:
b5:94:4c:96:f1:b8:19:1d:1e:f4:7a:16:73:c2:c6:
b4:59:c5:f3:b0:5e:76:56:26:3d:14:a9:b6:b2:4a:
77:dc:74:54:6b:8e:06:fa:21:c4:80:b0:3d:b4:09:
74:57:68:fa:92:e9:23:19:43:29:90:55:73:26:70:
39:09:ee:cf:04:62:19:25:de:cb:9a:c7:d7:c9:25:
82:c3:f3:ef:4b:85:7c:69:25:6d:c0:45:71:b0:e4:
6e:64:b3:aa:59:7e:6c:b5:31:c3:9e:f5:1c:34:5a:
16:04:4c:f2:f4:f1:c1:ff:5c:a5:c9:47:88:5d:a7:
94:3f:80:95:f0:88:2f:b2:20:9a:f1:51:20:d6:8d:
e3:fd:ac:19:c4:ce:bf:2c:55:03:6d:ea:db:00:f9:
39:27:3e:f2:04:2d:1d:4e:6c:0e:1d:34:6a:67:7a:
8b:26:3c:64:9f:23:ea:97:e3:d5:63:53:5b:a9:48:
06:85:52:85:7b:1a:0f:23:0b:ff:7e:a9:ac:5d:36:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:A3:0C:FF:9D:7C:2F:4B:50:AC:6D:C6:C3:A7:06:55:63:63:1D
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:64:a7:69:4d:88:96:ac:9b:69:05:e5:c2:39:dc:d5:0d:4b:
ee:fd:42:2e:0d:d9:d0:2c:a9:15:b8:01:79:32:56:d9:36:a0:
59:24:b2:82:2b:1f:07:1b:f9:bc:2b:08:16:4e:41:8e:62:96:
d3:34:27:3a:04:a9:f8:47:16:97:6c:42:b8:7d:c9:12:04:5d:
44:c2:57:7a:fe:46:05:09:f0:66:29:95:61:bd:d3:ba:e5:75:
91:11:a5:38:07:62:89:97:27:1a:18:e3:be:5a:e2:67:87:97:
38:56:cd:7d:37:0b:4c:99:c8:6c:d0:1e:7f:21:52:56:21:2e:
ff:a8:37:75:24:06:8d:f0:e5:05:d5:50:52:a6:2a:61:c1:cd:
02:45:3c:1b:b6:52:76:5c:ac:bd:db:37:a0:16:45:5e:14:a2:
f8:e5:45:9f:b7:00:5b:bf:68:e8:1a:58:c5:18:b7:0d:81:18:
bc:de:8c:c6:3c:0f:04:a2:52:ae:36:50:e7:94:82:3a:88:b8:
ab:16:aa:e2:b8:42:90:5e:c6:5e:0e:e2:36:f4:ce:58:57:bb:
85:e0:6e:f5:9f:b3:cf:99:00:74:f7:05:35:0a:bc:91:6a:4d:
dc:21:69:f4:86:11:95:73:1e:38:ca:7e:f5:6b:aa:41:d2:c8:
ef:eb:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:55 2026 by rpki-client