
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json)
Hash identifier: VjjRWqkKxsN1m413wW68MsisGkDe7+mxTldhVzmvWz0=
Subject key identifier: 0E:04:2B:D4:6A:3B:31:D9:4C:F2:E6:B3:02:8B:18:B1:CD:CD:86:D2
Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
Certificate issuer: /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
Manifest number: 36
Signing time: Wed 25 Mar 2026 07:49:14 +0000
Manifest this update: Wed 25 Mar 2026 07:49:13 +0000
Manifest next update: Wed 01 Apr 2026 07:49:13 +0000
Files and hashes: 1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: SJo7OPw5dRXm6EUzrX8R+SvFzvenHbAnOXJT77wv+hg=)
2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: tby1fxG8dty2Idd5oP0UTbPf2lfAkyvFDEToKB0Y640=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Validity
Not Before: Mar 25 07:49:13 2026 GMT
Not After : Apr 1 07:49:13 2026 GMT
Subject: CN=69c3937a-3854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:b5:9c:ec:7a:6f:2a:78:57:e1:94:14:e3:
fc:ea:eb:8a:c8:37:42:ae:5e:aa:d4:bf:6b:9b:75:
05:45:da:04:f8:4f:df:b6:18:95:f4:3f:58:cf:34:
29:d9:9e:26:8b:ea:67:f3:e4:8a:d9:4f:37:e8:46:
93:f0:5f:35:ad:ee:90:88:66:96:67:cb:e6:50:d0:
68:89:5d:04:cf:2c:8c:1f:2f:97:11:83:72:5c:ad:
36:d6:90:ca:1f:77:4c:3d:e0:83:28:64:69:af:7f:
9e:f4:0a:2b:cd:46:1a:bf:77:ce:e6:63:23:29:93:
97:30:67:d4:72:99:9e:bc:1c:25:c8:99:4a:5e:fd:
28:af:2c:ea:7d:21:5d:ce:8f:67:d9:b0:96:fb:0c:
8e:84:33:0c:6b:91:18:a2:7d:e3:11:2d:23:b8:62:
85:b3:8b:20:0d:02:c2:78:52:5b:76:0f:a5:05:26:
ef:14:d1:43:26:a6:ec:2f:cb:d9:1c:d2:09:cf:17:
49:8c:84:55:ee:2c:77:66:78:c0:9f:ca:36:40:da:
37:27:5c:21:6f:c6:dd:b6:bc:c1:04:94:3d:b9:93:
b8:89:87:d1:85:ec:8b:db:6c:63:55:3e:da:a5:e7:
97:10:bc:6d:24:57:fb:c9:c2:ce:30:2f:7d:d4:c8:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:2B:D4:6A:3B:31:D9:4C:F2:E6:B3:02:8B:18:B1:CD:CD:86:D2
X509v3 Authority Key Identifier:
keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:53:70:d0:77:01:78:94:53:a9:13:0f:80:e3:11:3c:6a:04:
7a:53:e1:8d:68:b4:f9:ab:17:19:52:22:6e:77:21:36:a1:32:
53:56:de:1e:a8:9d:29:fd:97:1f:ad:c2:f8:f3:66:95:f0:e6:
b5:af:85:23:9c:fc:70:10:5e:27:cf:e3:86:17:76:5c:c8:2c:
07:18:09:9a:21:b5:b9:8c:d0:1a:be:d0:18:b3:94:c2:69:66:
10:e3:09:b6:4a:80:e2:a8:07:d5:b1:47:d0:cc:90:97:73:ea:
19:e1:d0:7b:8b:77:1f:19:9c:aa:32:66:93:87:e8:55:27:ab:
a5:83:5d:81:6a:5b:57:d7:f8:45:40:93:ee:89:da:bb:43:f4:
54:b4:c7:b3:82:02:7c:c7:cb:1f:96:c7:11:1b:e6:c6:d8:96:
d5:45:f7:46:ec:d7:dc:26:c5:f5:84:53:66:79:dd:86:49:4f:
3f:90:b4:b8:f5:30:91:79:fc:4c:36:22:c5:82:e2:e7:84:f5:
22:73:4d:ab:23:31:4d:ab:39:38:3f:ee:d5:f3:01:ac:1c:f4:
44:96:71:86:a5:a0:ed:ae:df:34:70:be:33:9a:28:d0:56:50:
b2:1e:14:e8:6d:13:16:12:38:d4:62:54:3d:f3:c9:96:d3:bd:
59:11:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:15 2026 by rpki-client