
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier: 8r4zEvzTNq3565M2LcYTLWUPOrR/LSDPCYC8eCZTWNQ=
Subject key identifier: A8:AB:65:ED:12:DD:D2:60:34:B5:0C:46:D9:AC:CF:80:69:B8:46:C8
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0E3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number: 0DCF
Signing time: Wed 22 Jul 2026 18:16:13 +0000
Manifest this update: Wed 22 Jul 2026 18:16:13 +0000
Manifest next update: Wed 29 Jul 2026 18:16:13 +0000
Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: 1lboc1VRQOmKXLgXwE1hnRBolkEVcCWfzaMRO8GaCLE=)
2: 3B85D8D644BC11F1ADDF5543B9833773.roa (hash: RklW5hrk4zusSUgdhb9Rw20W0+Br/qkJMjbhJKUJYC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: Jul 22 18:16:13 2026 GMT
Not After : Jul 29 18:16:13 2026 GMT
Subject: CN=6a6108ed-af3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:69:17:60:37:48:90:97:45:b2:73:30:e2:
39:ab:c9:c3:56:4f:90:8e:69:37:bf:3e:8b:9b:52:
0f:3d:b6:f0:33:4f:b3:39:38:ac:1d:99:02:73:6e:
4a:c0:0e:f1:fa:d6:e5:40:d7:ca:7a:f3:4c:3e:e9:
0c:9c:35:b7:77:37:da:1a:2c:3d:5e:e8:de:92:b3:
bd:e6:cf:10:8f:3a:e5:71:89:40:55:dc:53:a4:1a:
4e:57:94:3d:c0:71:69:fb:12:23:5f:83:fc:00:de:
f1:f8:65:a4:5e:96:5d:80:6e:cb:85:63:7e:a2:c3:
d2:ee:9a:1b:45:b9:1a:92:8c:10:30:70:c1:e6:6f:
e6:9d:c2:c4:51:ea:6a:d3:c2:af:83:32:06:90:ab:
48:1d:49:69:bc:f8:8b:f1:5b:20:ea:e2:65:51:6a:
b9:09:ea:f7:2f:7e:e3:e1:34:b9:db:8d:2c:b9:75:
bb:27:69:0e:4d:a4:0f:e6:c7:ba:fa:34:e3:cf:f3:
56:e1:57:e2:a0:cc:2c:35:02:4e:a4:92:06:8d:80:
16:67:da:a1:3a:72:98:ef:b4:1e:db:4e:bb:21:35:
8f:d2:84:63:84:2b:34:3d:93:44:d3:b1:a7:be:41:
24:2c:68:74:ca:17:c1:df:4f:2c:11:44:0a:88:e4:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:65:ED:12:DD:D2:60:34:B5:0C:46:D9:AC:CF:80:69:B8:46:C8
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:63:32:5c:96:fa:77:78:6e:4b:35:27:8c:e6:be:13:19:1f:
e5:7e:23:3e:19:59:17:eb:9d:16:f3:ca:14:2f:2c:8b:38:48:
db:88:91:44:15:ef:de:39:45:4e:9a:f2:dd:bb:5b:70:44:ca:
7b:c5:fa:6b:01:73:5f:fd:13:da:a3:e5:23:2c:22:c9:74:59:
33:a2:40:a9:b7:06:a8:0c:f8:d7:99:58:f5:23:5d:d9:38:8d:
5d:aa:70:7b:a7:0f:5b:99:7c:67:51:10:9c:03:c4:c5:b4:4f:
4a:a6:75:1a:36:f9:ca:05:e5:e7:ba:79:b1:fa:ca:63:39:8e:
7d:9d:a8:56:5f:93:c5:5d:a4:ff:50:b0:45:dd:81:73:5b:af:
14:b0:3a:35:7f:76:b1:a1:b2:5d:2e:18:e5:f3:d8:12:7c:46:
f4:44:bf:54:5e:9c:ae:a8:6d:61:cd:14:68:b1:ba:9a:d2:47:
9e:c8:88:22:df:52:8e:f5:5f:1c:e6:34:23:be:ad:7f:39:b2:
69:d0:49:60:df:83:d0:db:cb:00:06:05:47:fe:a4:27:eb:a8:
9a:ac:1d:e6:03:08:f4:0c:12:6f:7f:cc:da:61:d4:c0:6d:41:
9a:f7:1a:49:a9:49:f4:57:ca:0f:01:57:ea:32:57:60:85:4e:
43:90:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:39 2026 by rpki-client