
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json)
Hash identifier: 9tw2wxOMQ2nBSEgT+O2Tx7k31K+FowUyIC2QBE7u+OE=
Subject key identifier: 50:DC:0C:07:C7:94:55:86:20:E8:50:07:E3:55:80:52:0A:BA:A1:2E
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial: 0902
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
Manifest number: 08F4
Signing time: Wed 22 Jul 2026 20:47:07 +0000
Manifest this update: Wed 22 Jul 2026 20:47:06 +0000
Manifest next update: Wed 29 Jul 2026 20:47:06 +0000
Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: cN/+y61r343B8RxgBYztEUV3BioaZQ1mVVG7bX2UTl8=)
2: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: Cl5Iksm78xy4pdyZHSdPHHDj46EQ0DV5IDZjQy+nR+s=)
3: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: JbCPb2/G06LWsiRDNl/iJAib0NI/NVkqoq8wvubR2Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Validity
Not Before: Jul 22 20:47:06 2026 GMT
Not After : Jul 29 20:47:06 2026 GMT
Subject: CN=6a612c4b-1e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:91:99:e1:1d:85:c6:5d:e5:ee:2e:09:61:
6a:0d:c6:6b:d8:77:72:20:45:e9:b5:f1:27:3d:67:
ec:e8:cd:42:f4:a5:e0:ba:92:30:b4:82:70:51:50:
39:41:58:31:76:32:40:e8:b4:29:e1:ea:e3:e2:74:
d9:93:0c:01:56:8d:2d:3a:bf:01:ab:59:2d:c9:5d:
a8:5f:09:0d:66:8f:2e:f2:71:c6:62:be:19:ab:f6:
05:cd:60:6f:44:d2:01:b8:10:5f:7b:23:9a:6c:a0:
9a:29:e5:4e:62:66:6c:a5:6b:64:b5:0c:21:13:11:
7a:7f:2a:dc:70:37:14:54:61:6d:b1:f2:e7:44:7f:
0c:ad:4c:2f:b3:fe:e0:92:c0:85:5e:d5:2e:b3:de:
14:fc:05:62:01:81:2e:2a:b9:84:ff:0b:e0:61:e0:
72:1b:7f:1f:3c:4f:50:fb:3d:c2:d9:84:7c:45:bf:
1e:a3:dc:48:fd:3d:d7:3a:ff:4d:47:07:d3:14:ed:
a0:32:49:5d:4d:37:16:25:a7:fb:87:ea:67:79:dd:
9a:ab:cc:b6:29:4d:09:ba:bf:24:85:3b:4b:90:4b:
41:30:97:15:27:ea:f2:6d:18:63:74:2e:ec:79:fd:
b2:0a:fe:4d:90:24:6f:a0:78:ab:b7:ae:6b:d1:a4:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:0C:07:C7:94:55:86:20:E8:50:07:E3:55:80:52:0A:BA:A1:2E
X509v3 Authority Key Identifier:
keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9f:8e:6c:8a:0a:e2:35:a8:d4:59:c8:22:db:1e:25:0a:08:
a8:31:ec:37:50:33:0f:0a:1b:65:d3:12:3a:9e:cd:10:cc:23:
76:a0:83:70:ab:8f:cc:5b:e5:bf:4b:47:a8:fc:48:3d:6e:9a:
c4:1c:30:0f:c0:64:2d:60:08:b1:4f:8f:bc:52:3e:37:f8:99:
81:6f:f1:f4:42:aa:54:34:b4:be:d9:33:21:17:6f:0d:c8:a7:
aa:36:54:cf:d8:af:22:86:55:88:d4:df:85:61:8f:80:1b:e8:
f6:c4:41:65:e6:73:53:c5:e3:27:28:fd:12:2c:01:fb:b2:c0:
37:31:33:f0:99:5f:d5:25:d6:63:0e:95:77:a9:98:b4:6b:5f:
12:c6:ee:34:7d:57:e3:b0:9c:ad:5e:d1:6a:a2:3d:f6:40:4d:
73:cc:02:bc:11:3f:18:fd:b8:f4:e0:69:53:b8:c5:c2:67:6d:
f4:0d:aa:80:b9:9a:84:8c:ac:29:8e:94:ec:c4:20:46:9e:f0:
cf:ed:f6:3b:8d:7c:4b:ba:b3:ca:b8:55:d5:45:42:54:79:df:
32:4f:7b:83:62:22:e6:a4:04:a9:90:d1:06:d4:fa:9f:de:d6:
b1:ea:10:49:7b:d6:f0:10:02:3e:6f:be:1a:ef:8a:8d:45:24:
5a:ca:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:57:44 2026 by rpki-client