
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier: TM2rEcUE5ieLmJ7mTbkMYxgoUABttkG+VSnkyFTPkYU=
Subject key identifier: BF:62:71:F0:80:F2:B9:69:D3:E4:8B:D5:E4:05:8B:13:4D:CD:32:0A
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial: 1057
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number: 1049
Signing time: Thu 24 Sep 2026 17:22:29 +0000
Manifest this update: Thu 24 Sep 2026 17:22:28 +0000
Manifest next update: Thu 01 Oct 2026 17:22:28 +0000
Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: jGIQsOUbRprhWZyydXyXyB6imElCtrfNt17VGaqmV7Y=)
2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4183 (0x1057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Validity
Not Before: Sep 24 17:22:28 2026 GMT
Not After : Oct 1 17:22:28 2026 GMT
Subject: CN=6ab55c54-fb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:5c:49:fe:c4:20:14:f3:aa:1b:bd:a4:59:
df:f2:7f:ac:5f:28:40:51:dc:20:cc:8f:f4:c5:3f:
fa:56:2c:1f:83:8d:99:e5:88:b3:e2:d0:66:38:e4:
39:c4:90:1a:fb:6d:d9:7f:79:5a:3e:fa:cf:2c:e0:
a6:51:c6:89:61:65:be:fc:d1:5b:96:92:a1:73:0c:
d2:7c:53:a1:c6:a7:71:cc:c7:10:7b:63:ec:80:6f:
9c:e2:e9:b3:42:fc:43:18:13:f4:e1:3e:f2:5c:34:
d0:cb:82:ec:de:2a:d2:5b:25:5d:17:e4:d8:f6:23:
36:56:f7:78:b7:59:c0:f7:cc:94:eb:92:d6:a1:26:
43:72:e6:ea:d0:a6:90:25:f7:15:cf:9f:9c:d2:ee:
16:27:90:54:3e:55:9e:a6:06:99:35:76:9e:bf:71:
2f:db:04:98:cb:21:95:c4:7d:77:ef:1b:e6:b7:61:
34:57:cb:8e:3f:3a:4f:a1:42:30:ac:f8:85:6d:c5:
6f:26:0a:5e:c9:f1:ba:bd:2b:86:29:7a:00:34:c6:
64:4b:a4:ea:7b:41:4d:cb:83:9e:af:c0:31:79:9d:
11:24:41:35:90:d1:6f:95:58:b7:72:59:28:a5:92:
d8:1a:51:b2:68:90:70:a7:c1:1e:db:1b:f9:83:b8:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:62:71:F0:80:F2:B9:69:D3:E4:8B:D5:E4:05:8B:13:4D:CD:32:0A
X509v3 Authority Key Identifier:
keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:5d:50:3b:f5:13:17:ba:78:35:ef:9a:34:28:31:ba:23:
9d:4d:2c:fc:97:23:cc:26:2b:ff:b1:c4:b1:98:e0:66:ed:bd:
b8:5d:78:32:93:49:2c:8e:63:b8:15:03:7d:bd:f1:d3:ca:95:
0b:58:f3:61:64:bb:7c:bd:a9:3a:f8:fc:b4:e0:cd:84:9d:f8:
ea:e1:57:ff:69:0e:7b:c2:ae:59:57:7d:59:72:54:88:75:52:
dc:98:f0:d7:41:53:b0:18:9c:12:fc:ec:25:0d:c3:c3:bd:54:
da:01:18:ba:7b:17:6b:3b:37:35:a1:c3:fb:ae:7e:d8:31:fe:
33:a8:d2:27:0d:b6:d1:27:31:15:84:c8:64:67:19:f3:d5:09:
07:99:6a:1e:11:4d:32:72:55:da:24:4f:ca:ff:0a:e4:14:23:
92:2e:d4:2d:45:3f:7b:a5:19:c9:83:0d:c8:45:03:50:a7:2f:
28:e0:2a:3b:ee:06:96:51:4b:10:c0:d8:79:ec:a9:2f:8a:aa:
9d:d6:8b:cf:8e:e7:93:a7:87:fe:60:e1:c4:43:2e:65:f9:a0:
fd:5c:fb:59:57:51:2c:34:7c:b1:a4:c6:a7:a8:d3:a2:a7:a0:
b5:26:7f:eb:d0:a7:ad:ee:cb:29:01:76:1e:bf:46:19:a2:5d:
0e:77:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:56:26 2026 by rpki-client