
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json)
Hash identifier: 3rXE46LD6Z78nMFp5QAlNMHy3BlXCcaaf759yc2Ye28=
Subject key identifier: FF:74:49:FA:6D:D6:DA:35:34:16:EC:77:86:4A:10:65:EE:9F:1D:87
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
Manifest number: 0213
Signing time: Thu 23 Jul 2026 04:14:26 +0000
Manifest this update: Thu 23 Jul 2026 04:14:25 +0000
Manifest next update: Thu 30 Jul 2026 04:14:25 +0000
Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: WB3QYX8lH2/LcasAD5UQZaZRchjxJZpUmDrmMRNd2go=)
2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: WP8HegPa5EokTKx706o1KpMqrQcLXlZh4ZkoerJ4FaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Validity
Not Before: Jul 23 04:14:25 2026 GMT
Not After : Jul 30 04:14:25 2026 GMT
Subject: CN=6a619522-4460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:d4:9e:74:82:2f:be:b6:e3:c8:9f:5e:a8:
ec:fb:4a:9a:0f:ab:1f:58:72:04:e6:37:d9:e5:eb:
66:d6:2d:58:80:35:2f:4b:ce:ba:5e:5a:cf:7d:ea:
90:5b:66:12:fc:b0:c0:64:7c:62:cb:ea:04:19:d3:
03:96:20:4e:7d:e4:1d:f5:0f:7b:24:11:93:45:bb:
47:fa:7d:bf:6f:eb:fc:41:e5:a3:b0:65:bf:2e:28:
ff:53:60:3f:65:5a:5e:35:48:bc:e1:1f:99:36:ee:
d7:56:12:39:b9:31:e6:69:83:2a:a9:0b:76:d6:1c:
e2:30:28:b1:2d:53:91:8b:16:37:3e:37:e2:66:ac:
a5:8d:87:95:0f:e5:43:1b:63:96:b3:4a:3e:62:ac:
34:53:8a:6f:4a:fa:e1:dd:cc:d2:9c:bf:4b:56:9e:
af:33:7a:a1:f7:f2:a6:21:da:ee:2d:3f:2d:d3:e3:
d9:ce:15:52:11:9c:09:55:26:4e:b0:43:41:65:d1:
0c:33:b8:75:a6:b3:a1:0f:af:ce:7d:57:27:56:4d:
df:ce:9d:5d:d4:56:d3:e4:8a:06:1b:97:13:26:ce:
cf:9f:1b:e7:3f:88:60:b3:a6:52:2f:0e:90:c4:3e:
47:25:10:7c:0a:b8:d0:8d:87:e4:c5:b2:d7:7b:80:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:49:FA:6D:D6:DA:35:34:16:EC:77:86:4A:10:65:EE:9F:1D:87
X509v3 Authority Key Identifier:
keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:e0:a1:4f:2c:44:c7:63:e9:92:bb:4f:70:d7:68:cf:e3:
0e:b7:ea:29:fa:fe:3a:74:24:10:1b:7b:e0:13:a9:36:7b:25:
73:75:8a:5d:5f:70:7f:d9:c9:85:98:8b:33:e1:e6:71:7e:af:
11:36:b5:e5:7f:bc:80:b4:24:3a:7a:4f:c1:96:47:4b:cf:45:
c2:00:88:11:3f:4e:e2:b3:ba:5e:03:77:55:a3:e5:3b:8f:1e:
48:35:c6:da:ce:f1:c3:2b:85:c1:52:95:d5:a5:83:a0:91:af:
df:b7:a8:db:05:c1:fd:a3:52:61:80:a5:fe:9b:bc:2a:6d:6a:
12:d6:39:af:10:69:f7:ed:ee:75:ec:9d:77:7d:7a:de:87:67:
cb:70:24:06:04:41:9d:00:9d:c0:7f:a6:39:ee:82:30:5b:9e:
86:d2:8a:a6:45:45:ff:32:9a:53:e4:b6:0d:d3:de:e2:6d:23:
35:bb:9e:d6:72:64:f8:84:69:58:6a:bb:1e:f8:8c:ef:6d:1b:
d9:f6:01:52:ef:d0:f5:d0:9f:6d:e8:a1:30:c9:18:68:ce:cd:
f9:49:b4:f5:c4:b8:43:72:e5:ff:fa:4c:fc:ae:51:c4:8d:69:
50:e0:cc:2f:70:ab:f4:db:a7:ed:7f:cd:66:56:d7:01:70:29:
a0:61:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:54 2026 by rpki-client