
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
File: vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft (raw, json)
Hash identifier: NnAWB0FJvU+bD21ivL670CSWfNK3/+36Ezux4DdFilc=
Subject key identifier: DD:CD:21:AA:27:DE:02:87:2C:39:F0:DB:35:21:2A:06:21:EA:C9:8B
Authority key identifier: BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
Certificate issuer: /CN=A91E5770/serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
Manifest number: 31
Signing time: Thu 23 Jul 2026 10:40:27 +0000
Manifest this update: Thu 23 Jul 2026 10:40:27 +0000
Manifest next update: Thu 30 Jul 2026 10:40:27 +0000
Files and hashes: 1: vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl (hash: 8xCb1kURhBbvAQjnd78Iof4cUcTtpjC5ShsXgBvlFUw=)
2: 352D320E3D6411F19E142980AD833773.roa (hash: b9pEmQYeXoEvXcUHQWi3fHnQxMX2lT2vWA6aVsvzLk8=)
3: 3CE623883D6F11F196AFC17AB1833773.roa (hash: fccdVhP6r3lPUb+xE1JqxAMJGmzw9RyVmsJhCi+Yhl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5770, serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Validity
Not Before: Jul 23 10:40:27 2026 GMT
Not After : Jul 30 10:40:27 2026 GMT
Subject: CN=6a61ef9b-f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:a0:6e:ce:aa:07:07:c8:e7:97:b6:fb:fa:
31:29:cf:0b:7d:63:21:77:a8:2f:5d:a3:2e:4e:77:
29:37:a1:83:65:37:8d:c8:64:c6:55:06:bf:03:23:
45:df:d2:71:5b:04:c7:40:d4:08:e9:18:cb:a4:53:
41:8e:6b:80:0f:7e:5f:81:bd:6b:4a:34:b2:b4:57:
80:fa:75:30:4b:62:80:0a:92:89:a2:7c:62:f1:5c:
57:f8:7d:d3:ba:f1:b3:a0:bc:44:09:46:33:78:64:
49:37:e3:a1:01:b9:5c:d5:4d:23:1e:25:b7:57:92:
c5:0e:c6:b2:d9:1a:aa:aa:80:a0:59:54:f3:b2:4d:
c6:d9:8b:c0:7e:16:15:5b:e0:97:aa:5d:9a:14:65:
c5:9f:95:37:5f:d2:ed:ce:15:0f:62:35:21:8c:bd:
25:d4:40:92:3d:15:85:fc:46:ce:cb:9c:76:1e:aa:
d5:43:bd:75:aa:6b:ad:f0:8a:3a:b5:0a:82:a4:cc:
00:27:32:b7:4a:3b:af:40:a3:e9:d0:87:05:32:76:
3f:e3:6c:e8:5c:bc:76:a4:e7:0f:77:5e:d2:bd:ff:
94:17:26:7f:09:94:f3:66:a0:d3:fa:81:00:eb:32:
5f:75:16:01:6c:16:50:d6:13:b7:93:6d:3f:1f:6b:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:21:AA:27:DE:02:87:2C:39:F0:DB:35:21:2A:06:21:EA:C9:8B
X509v3 Authority Key Identifier:
keyid:BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:53:e7:7b:ef:5c:45:d2:20:85:d3:ef:78:d8:fc:75:6d:5c:
b8:17:b4:30:81:cd:36:30:3d:7e:f1:09:95:e4:dd:af:8a:aa:
ae:57:15:61:95:5c:9a:b0:a2:a4:ba:ec:ff:79:66:41:c3:45:
5b:a3:45:04:4a:eb:e9:3c:0b:66:a3:25:ad:bc:56:f8:7b:c8:
27:14:9f:75:e1:68:35:34:2a:11:a0:bf:43:56:31:ae:12:02:
b4:50:1b:ff:bd:0b:17:08:fb:4a:f0:b6:5c:9d:62:41:b6:4e:
87:db:f8:6e:07:09:81:64:c6:17:93:3d:5c:5a:da:92:84:25:
40:de:f9:22:cd:3f:06:db:6d:16:80:5a:ca:6a:75:e4:f6:38:
ae:56:b0:b4:a8:f6:58:12:2f:2d:00:7d:17:a4:2f:5a:92:b0:
d2:e2:54:d7:66:bf:d1:d8:37:a3:0e:b2:c9:2a:4f:11:78:ef:
bd:30:c2:b3:20:4d:d5:3f:3f:65:f8:cf:20:e3:05:65:8c:69:
7d:52:c7:4f:f9:d4:fa:a6:2b:bc:23:76:47:c6:aa:d6:f3:d1:
69:67:90:d1:1a:6e:b0:d8:66:ae:92:60:d8:ff:7f:01:0b:10:
39:e1:ea:0b:25:be:f5:7a:46:22:66:0e:f3:22:21:f0:7b:7a:
e6:28:05:de
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NTc3MDExMC8GA1UEBRMoQkQ0MzYwM0Y0Q0E2ODM5MUE3M0Q2NjdERjY2NTBFNTIz
NjlCNzg1NDAeFw0yNjA3MjMxMDQwMjdaFw0yNjA3MzAxMDQwMjdaMBgxFjAUBgNV
BAMTDTZhNjFlZjliLWYzMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoZqBuzqoHB8jnl7b7+jEpzwt9YyF3qC9doy5Odyk3oYNlN43IZMZVBr8DI0Xf
0nFbBMdA1AjpGMukU0GOa4APfl+BvWtKNLK0V4D6dTBLYoAKkomifGLxXFf4fdO6
8bOgvEQJRjN4ZEk346EBuVzVTSMeJbdXksUOxrLZGqqqgKBZVPOyTcbZi8B+FhVb
4JeqXZoUZcWflTdf0u3OFQ9iNSGMvSXUQJI9FYX8Rs7LnHYeqtVDvXWqa63wijq1
CoKkzAAnMrdKO69Ao+nQhwUydj/jbOhcvHak5w93XtK9/5QXJn8JlPNmoNP6gQDr
Ml91FgFsFlDWE7eTbT8fa7xFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3c0hqife
AocsOfDbNSEqBiHqyYswHwYDVR0jBBgwFoAUvUNgP0ymg5GnPWZ99mUOUjabeFQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NzcwLzkyRDU4REY4M0Q2
MzExRjE4MTRDQUEzOEFEODMzNzczL3ZVTmdQMHltZzVHblBXWjk5bVVPVWphYmVG
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdlVOZ1AweW1nNUduUFdaOTltVU9VamFiZUZRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
NzcwLzkyRDU4REY4M0Q2MzExRjE4MTRDQUEzOEFEODMzNzczL3ZVTmdQMHltZzVH
blBXWjk5bVVPVWphYmVGUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDJU+d771xF0iCF0+942Px1bVy4F7Qwgc02MD1+8QmV5N2viqquVxVhlVyasKKk
uuz/eWZBw0Vbo0UESuvpPAtmoyWtvFb4e8gnFJ914Wg1NCoRoL9DVjGuEgK0UBv/
vQsXCPtK8LZcnWJBtk6H2/huBwmBZMYXkz1cWtqShCVA3vkizT8G220WgFrKanXk
9jiuVrC0qPZYEi8tAH0XpC9akrDS4lTXZr/R2DejDrLJKk8ReO+9MMKzIE3VPz9l
+M8g4wVljGl9UsdP+dT6piu8I3ZHxqrW89FpZ5DRGm6w2GaukmDY/38BCxA54eoL
Jb71ekYiZg7zIiHwe3rmKAXe
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:38 2026 by rpki-client