
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json)
Hash identifier: NPDOAL7BUjw+ofHuJyn7S/Z6k9busfcDz62c3geTH2w=
Subject key identifier: 1D:C3:DA:CE:A4:DE:DC:1E:35:1D:AE:F4:C2:6F:A5:2F:A8:4B:15:52
Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
Manifest number: 0141
Signing time: Sun 27 Sep 2026 05:54:28 +0000
Manifest this update: Sun 27 Sep 2026 05:54:27 +0000
Manifest next update: Sun 04 Oct 2026 05:54:27 +0000
Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: 1ED5bp4e+4wYwO4sh7xzdZEcqYCVEnAVcsrF/rQrv4Y=)
2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: NUBIPTzmLE7ei0rq8siWB1jNLIe1jHWLzPPD5tPj2mA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Validity
Not Before: Sep 27 05:54:27 2026 GMT
Not After : Oct 4 05:54:27 2026 GMT
Subject: CN=6ab8af94-b4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:e0:c8:60:35:82:c6:d0:65:87:ef:c4:65:
f0:e1:f3:bd:21:eb:19:2d:af:57:04:53:bf:ed:82:
ad:d7:67:22:30:59:32:75:9d:0c:fd:33:6c:05:6a:
96:b1:c0:fb:c5:b9:1f:8b:c3:7a:90:44:96:bd:7e:
50:76:d9:58:c5:f3:cb:12:ad:92:cc:55:06:b0:ea:
7c:43:e4:73:14:5e:42:db:37:a1:d5:48:3a:a9:68:
b5:30:aa:09:f7:b0:bd:f9:d2:6b:cc:44:71:84:f0:
42:b9:bc:fd:94:b5:68:68:81:ad:7b:2f:66:2f:c8:
f4:a0:23:5a:37:a3:cd:5b:7a:e2:77:35:fc:b0:c8:
47:14:29:8a:a3:22:b9:67:da:fe:13:5f:37:f2:a5:
0a:f7:8f:be:d2:9f:9c:75:b9:60:1d:1f:92:9e:4d:
1a:93:fd:e7:49:8b:43:ce:2d:3b:3a:4f:a8:5c:6d:
f4:79:05:c3:d6:e3:da:a4:16:f8:6d:81:fa:e5:c1:
a6:d5:17:3e:31:01:09:22:69:9b:37:d3:20:e9:51:
b1:53:d3:c8:45:b0:23:f0:d8:2c:0d:f8:bc:28:5c:
8e:40:16:15:7f:f7:10:b9:5a:f0:0f:5b:5b:21:24:
74:a8:c9:b5:92:0c:83:f8:06:98:60:b8:4c:61:bf:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:DA:CE:A4:DE:DC:1E:35:1D:AE:F4:C2:6F:A5:2F:A8:4B:15:52
X509v3 Authority Key Identifier:
keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:57:a6:f2:8a:e6:5b:42:71:7e:b0:01:6c:8c:63:50:85:19:
93:eb:27:87:30:78:36:c6:9d:23:e2:8d:0d:4c:bd:92:54:06:
f4:0e:31:3f:0a:50:42:50:ab:8c:14:b9:0f:96:6e:14:31:cc:
1d:b7:e1:8d:35:1e:37:ac:4c:9b:1e:15:24:94:5e:cf:20:7d:
c4:a6:88:fa:3e:f3:e5:18:c4:cd:95:41:7e:64:81:f2:f3:ef:
97:17:0c:97:dc:b8:b7:ca:e8:6d:50:59:96:e4:cc:5b:87:69:
e8:e1:2b:aa:c7:e7:e7:ae:8b:e4:40:99:be:6c:1c:17:d3:59:
91:9e:98:f1:4b:7c:c6:05:8e:4f:22:ca:42:a6:f5:23:90:5e:
71:27:ff:00:39:3a:10:b8:35:2b:a6:0b:30:4b:c8:5e:b1:55:
2a:fe:36:87:7d:30:70:70:12:cd:d2:dd:30:40:ae:9c:81:5f:
d2:c7:72:2f:ac:53:1a:74:10:21:61:b5:52:93:8b:01:6e:85:
16:61:10:06:7a:6f:9f:05:c3:13:c7:eb:b3:1b:09:32:e4:3b:
f2:de:31:6d:ab:d1:62:c9:45:16:63:bb:d9:5e:a7:3a:24:29:
63:90:e7:3a:56:16:2a:69:06:d2:3e:6a:dc:66:75:28:ee:08:
3e:ab:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:23 2026 by rpki-client