
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier: rrC/lcGkVBGk7Y5RnG4IT6wngMj2j2YwDnccImJylRM=
Subject key identifier: B9:32:D0:96:4A:BF:8F:C0:F2:1A:83:BE:43:E9:E2:E3:08:C8:78:75
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number: 04A2
Signing time: Wed 23 Sep 2026 01:11:21 +0000
Manifest this update: Wed 23 Sep 2026 01:11:21 +0000
Manifest next update: Wed 30 Sep 2026 01:11:21 +0000
Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: VAMOeM5xrhO42tL0Xd+oUd2sCYm5cZf8h+JNBg2rFI8=)
2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: vkD0HPyQAf9lwCEzMqH+93Ib4tig40Fj/qtTMCAMdbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Validity
Not Before: Sep 23 01:11:21 2026 GMT
Not After : Sep 30 01:11:21 2026 GMT
Subject: CN=6ab32739-fa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:62:1b:94:d6:47:e7:7b:fd:df:3b:b4:40:
79:fe:27:80:49:17:7d:32:3c:21:b6:be:c5:df:94:
13:03:5c:e4:f8:43:8a:40:59:e9:0c:57:fa:a3:a6:
cb:78:ea:65:b1:4e:ca:7f:61:eb:00:9f:04:b8:8b:
15:30:42:cb:f7:6a:83:3d:70:ce:37:8a:9c:52:4f:
ac:d1:28:a9:73:b2:0a:4d:2e:64:7f:61:6a:a4:8c:
a3:85:63:aa:44:5d:bf:2f:c3:db:ad:fe:64:bf:9d:
62:eb:31:6f:c4:f6:a7:da:8a:b6:8e:ed:cf:18:0d:
f6:22:b4:14:87:f6:c0:e0:d6:7b:ea:23:c8:43:8c:
4a:94:9c:84:a7:90:a0:53:67:51:33:ef:c8:b1:20:
d1:28:57:5c:0c:b2:fd:1d:88:bc:19:e6:27:7b:c1:
27:8a:17:ea:0d:e7:63:a8:87:35:d2:2c:ac:50:0d:
ec:48:da:72:fa:dd:02:dd:81:b7:8a:c1:b8:ab:4a:
ab:4a:78:f3:a3:34:30:1f:64:97:87:83:c3:31:1d:
9e:84:e6:90:e4:d4:41:1c:d7:b1:b4:18:87:50:53:
00:0d:68:33:92:4c:2d:1d:85:cb:cd:cd:a7:ba:5a:
fa:b4:29:89:e3:b2:c9:3d:3e:2c:84:18:81:69:6e:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:D0:96:4A:BF:8F:C0:F2:1A:83:BE:43:E9:E2:E3:08:C8:78:75
X509v3 Authority Key Identifier:
keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:de:5a:bc:f7:fc:90:0d:c4:ce:39:64:91:08:1c:d7:8b:3f:
5f:aa:86:02:ae:03:2a:44:15:b7:36:d8:e6:60:27:cd:59:35:
1f:7f:d0:7d:4b:a5:6b:f1:da:ab:ef:7c:e7:49:4f:57:de:ce:
cc:55:5b:35:6c:58:32:23:7c:cf:d6:9a:fe:12:9c:58:d0:c7:
7f:66:2b:f4:08:88:7a:09:83:2e:c9:d6:87:9c:11:18:34:7c:
c0:b2:8e:75:14:d2:cb:e2:86:7f:e3:ef:4a:fa:c1:f6:df:06:
80:01:b0:63:84:c3:e3:0b:75:d3:d7:a4:ee:c0:61:4b:ec:6a:
46:1b:57:28:ff:a4:a1:39:85:a2:37:74:28:01:61:a6:f8:0e:
63:d8:c8:45:47:17:b3:0b:0d:88:8b:c6:51:0d:07:3c:7a:be:
ad:21:fa:96:8b:fc:d8:07:50:d5:e3:17:d8:c6:8f:72:7b:51:
c8:61:c6:23:88:ba:d3:06:1a:7f:bb:3b:3d:77:c9:a2:0b:d4:
24:66:d8:4b:f9:d8:a4:a7:d2:92:d4:b8:a2:30:f2:bd:87:d9:
80:2e:71:d2:e8:87:50:06:91:28:3a:ea:eb:7f:d3:46:96:4b:
b1:fe:68:cf:5b:4f:d2:78:05:48:eb:b1:6b:2d:5c:dd:5c:53:
1f:e3:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:30:05 2026 by rpki-client