
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
File: vCXNTkiu32CLScwphHLFwG6L9vs.mft (raw, json)
Hash identifier: 93LcJF8+bu2I3zlKumKG4h76F+G+BlFnyjE+jaOwQak=
Subject key identifier: 36:8C:CF:9B:02:58:9B:06:59:76:0D:E4:59:63:8B:AA:C9:D3:C1:26
Authority key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
Certificate issuer: /CN=A91E4700/serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
Manifest number: 8B
Signing time: Thu 23 Jul 2026 09:23:47 +0000
Manifest this update: Thu 23 Jul 2026 09:23:46 +0000
Manifest next update: Thu 30 Jul 2026 09:23:46 +0000
Files and hashes: 1: vCXNTkiu32CLScwphHLFwG6L9vs.crl (hash: 63o5RL3Z15lrGefkNEHCu+U2zIEiqaE7m95cZVKejJ0=)
2: A9CD5C92BB8C11F08999FE2AC4F9AE02.roa (hash: c3y0t6IJx6Q11r5JDlgaeAC6nTxUNX96hYufhWBf0xM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl
rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Validity
Not Before: Jul 23 09:23:46 2026 GMT
Not After : Jul 30 09:23:46 2026 GMT
Subject: CN=6a61dda3-f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:72:c8:ef:ef:65:ad:5a:5c:3c:d3:9e:a0:b1:
4f:94:74:65:f2:a8:17:89:04:49:2b:74:03:d9:58:
34:62:72:36:c6:aa:52:24:04:31:d9:1e:14:4a:77:
32:29:56:6d:f3:e2:b5:e0:80:bb:e4:8d:16:95:61:
68:b4:24:77:49:1f:b4:38:be:81:90:00:05:a0:c4:
83:63:8a:8c:ad:44:9c:82:66:16:8b:76:22:08:7d:
6b:5d:db:3d:bf:e1:ed:0e:a3:8b:7c:21:96:59:4f:
18:65:72:08:df:64:b1:11:04:3f:c5:0d:32:69:3f:
f0:5d:8d:32:d0:68:71:b2:e2:59:17:08:da:53:1c:
fc:b3:bb:30:b0:b1:62:7b:61:9a:06:40:7d:1d:ae:
b0:37:b0:27:75:81:24:60:6e:8b:e0:70:ab:91:24:
7c:58:c8:3f:27:4b:16:7a:d4:bd:e4:f0:c1:7c:2e:
29:81:54:b6:4b:27:1e:e5:e6:56:f7:58:1d:78:47:
63:ed:0d:da:27:56:1a:c0:11:10:1b:22:1c:da:b6:
65:ef:eb:a5:85:78:63:ce:32:b7:75:50:56:42:a9:
e0:56:63:82:c0:69:16:1e:e2:61:92:62:e5:9b:a0:
15:38:28:e6:85:af:4a:80:6a:5e:e2:d0:cc:6b:1d:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8C:CF:9B:02:58:9B:06:59:76:0D:E4:59:63:8B:AA:C9:D3:C1:26
X509v3 Authority Key Identifier:
keyid:BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:d5:9a:19:f4:91:68:7f:f0:cc:d7:23:22:7e:17:90:db:10:
e4:bf:37:62:49:56:4b:91:3f:c7:a1:c0:f8:01:ca:21:21:e1:
37:cb:ad:97:0d:7d:e8:cb:40:0b:55:5e:25:29:38:ee:0b:d9:
c5:53:a9:b0:ca:82:8a:db:db:f1:44:9e:ed:c9:80:0c:22:ae:
73:21:14:bd:dc:b1:44:8c:e0:64:1e:1a:60:47:16:fe:e0:f1:
9d:db:39:b6:ed:95:ab:0a:5c:57:3c:de:47:d2:dc:f4:ff:10:
d6:47:b4:56:13:18:56:b5:41:10:d1:34:c0:13:ba:cc:77:1e:
a9:9f:b2:08:19:37:b5:b0:1b:93:9c:c9:14:27:18:7a:d6:ac:
90:8f:6a:10:70:a5:d4:52:a7:62:54:93:7d:73:7d:7b:16:ea:
14:a8:89:8d:52:fb:1f:90:6a:c4:23:20:3e:00:2f:bb:90:b9:
96:85:4d:ee:f4:56:f4:cf:69:25:89:20:4b:19:4d:ff:45:33:
c4:28:9e:f4:7e:e0:68:0c:69:3f:42:f2:e5:2b:12:d6:0e:74:
8d:92:73:d1:64:56:5c:a8:74:d0:c8:4a:3b:c9:9b:f0:72:bb:
90:7d:17:98:7b:61:49:1b:31:02:95:42:e9:25:e7:df:ed:95:
e6:c8:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:32 2026 by rpki-client