
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
File: vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft (raw, json)
Hash identifier: 440VBxnA3hvO/5BYzZ7EWHzHqd68QyBmsfwWdujKS+o=
Subject key identifier: 0E:EE:14:EF:CA:34:6D:9F:F0:D8:3E:FD:AF:54:F8:5A:1F:0D:7A:B1
Authority key identifier: BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
Certificate issuer: /CN=A91E5770/serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
Manifest number: 70
Signing time: Fri 13 Nov 2026 08:07:39 +0000
Manifest this update: Fri 13 Nov 2026 08:07:39 +0000
Manifest next update: Fri 20 Nov 2026 08:07:39 +0000
Files and hashes: 1: vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl (hash: PveLSoNjFIUYoZEV9jiO0/K/WnrgbhRwHqwGPRs6bqw=)
2: 3CE623883D6F11F196AFC17AB1833773.roa (hash: 853MPgQce1N2I8/sXQh38JI3bCF99jZP68VnNHN1eAA=)
3: E5A2E480A29F11F1BF8A2D6D3411F970.roa (hash: po7ACU514+Tf/q+0sZb3nc1AQ1Z+vwg0epu32LWxXO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5770, serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Validity
Not Before: Nov 13 08:07:39 2026 GMT
Not After : Nov 20 08:07:39 2026 GMT
Subject: CN=6af6c54b-2e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:3c:52:a2:f8:fe:83:54:f3:50:b7:38:c1:
23:ac:f2:f6:b6:8b:3e:9f:19:3d:cb:15:ff:8f:8a:
47:61:46:1a:e8:ad:62:68:02:ff:09:74:62:38:cb:
2f:92:cc:3e:4b:f5:6a:e2:b0:a5:bf:ff:ae:67:8a:
5e:b0:70:14:c2:e5:95:7a:62:5e:4d:12:1f:12:03:
2c:1f:86:91:2a:0a:c1:80:6b:df:c0:59:e5:60:89:
11:a5:4e:f6:67:96:3b:22:70:dc:9c:bb:74:74:65:
45:ab:f2:2c:ed:08:93:9a:d4:bd:55:ad:b3:02:8d:
49:7c:c4:fe:27:e2:42:6a:06:6b:4e:26:d2:af:70:
77:ab:ed:3d:a2:78:52:24:eb:28:5e:bf:f8:e3:87:
72:7c:b9:13:e0:99:95:db:26:e2:51:57:70:4d:ef:
5d:fc:93:fc:f2:c3:6c:e4:71:90:64:81:64:cf:60:
fb:4c:c8:18:0d:b9:f7:b5:66:c7:8a:3a:08:bd:93:
b6:0b:fa:fd:56:0a:7a:5f:3a:4e:16:e8:7f:81:08:
ee:1d:84:c3:7c:87:97:9e:6b:26:9d:76:9c:ae:1c:
da:ad:2d:2a:63:97:1f:71:ae:de:e2:b6:8c:15:8b:
95:01:06:55:b1:b5:09:9b:7b:44:38:74:9d:a9:09:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:14:EF:CA:34:6D:9F:F0:D8:3E:FD:AF:54:F8:5A:1F:0D:7A:B1
X509v3 Authority Key Identifier:
keyid:BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:27:c9:09:50:d9:df:dd:23:ee:07:9b:5d:e7:d7:06:23:4d:
cf:ee:8e:4c:82:8c:e8:77:3a:c9:ea:7a:44:5b:23:fa:0f:f9:
42:b6:a8:f7:5a:0d:83:e2:23:0c:86:d8:97:5f:fa:a8:09:3b:
ec:0a:09:49:fd:55:c0:fa:12:8b:1f:bd:c6:b8:07:76:68:f5:
81:27:1a:bf:be:9d:d6:51:48:cc:af:bb:97:44:d3:14:56:c0:
02:0e:2b:6f:ee:3d:59:bb:a1:1c:94:4c:e6:bb:6c:97:1b:7e:
37:4a:4e:02:58:6f:66:ee:88:64:36:71:91:47:c8:7b:b7:3f:
9d:c9:67:39:0e:44:15:d5:55:44:2b:a7:37:3b:f7:f9:53:f1:
a2:8e:3b:87:dc:30:37:99:21:4b:12:99:49:1a:ed:d5:57:5c:
7b:5c:99:36:dc:f0:4c:89:1b:da:ba:c2:1c:4e:c6:ad:38:86:
6d:eb:97:a3:f9:6e:1f:b0:a9:52:2f:fb:b3:95:ee:c1:57:de:
e6:65:5e:8e:2c:44:d9:d5:1e:a7:ec:8d:c9:90:fa:5d:4e:3a:
ed:e6:1b:22:9a:91:d3:7e:cb:20:70:49:08:11:a9:9a:fe:e0:
ff:d5:52:33:0b:73:4e:bc:b6:84:ab:1a:18:3d:28:6a:c7:dc:
35:5e:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:36 2026 by rpki-client