
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json)
Hash identifier: n5uG4GcKDWaTH04zCFhUZK5oPocqDeXtX2CMQiheWsY=
Subject key identifier: 32:A1:20:1A:E0:2D:98:12:46:6F:A8:48:A0:32:29:C8:E9:DC:89:00
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
Manifest number: C2
Signing time: Thu 23 Jul 2026 08:46:27 +0000
Manifest this update: Thu 23 Jul 2026 08:46:27 +0000
Manifest next update: Thu 30 Jul 2026 08:46:27 +0000
Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: kdLdutDgVXabOP0T957bsaeHE0HwcAz0jRJ5RiHx08w=)
2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: 1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Validity
Not Before: Jul 23 08:46:27 2026 GMT
Not After : Jul 30 08:46:27 2026 GMT
Subject: CN=6a61d4e3-0d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:d5:a5:e4:a8:5c:91:d4:a4:67:19:3b:0d:
9d:12:30:c2:b5:4f:4c:03:dc:23:01:f9:99:19:7c:
2a:09:88:bd:aa:9c:91:18:b9:6a:6c:8c:f0:ae:81:
c9:ef:4c:81:d3:fd:49:7c:0e:e5:c2:ed:a1:bd:c3:
29:92:cf:57:e8:d2:80:cb:96:1a:d4:62:0a:83:f5:
bf:19:ff:60:e5:53:ca:77:2e:09:4e:7b:ce:a5:51:
2a:a1:87:00:c9:43:3a:15:94:7d:02:3d:67:3a:49:
ae:96:fa:58:78:d6:1b:37:8a:9d:3c:ac:75:b5:57:
0a:17:e4:15:e6:c9:50:c8:2d:d2:33:b5:64:a8:c6:
38:a3:fe:bc:e7:2c:60:9c:3b:bf:a2:28:1a:57:a5:
b2:b0:ce:8e:88:e2:40:3d:1e:0b:07:47:44:7e:31:
e5:78:65:9c:c2:eb:c1:ab:35:ca:a7:b0:7e:6d:fa:
6a:10:04:80:0b:24:b8:c8:d2:1f:c4:fc:2f:2e:34:
af:3a:14:c0:0f:8b:9e:61:48:c0:38:ae:71:ad:d5:
2a:ad:cd:bf:dd:02:da:f6:4f:ef:93:ca:10:e4:85:
e4:43:ee:a6:3b:b0:4f:8d:3f:b2:ff:62:ea:8b:14:
20:ce:93:bf:18:a5:17:2b:cf:38:a6:70:29:a0:4a:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A1:20:1A:E0:2D:98:12:46:6F:A8:48:A0:32:29:C8:E9:DC:89:00
X509v3 Authority Key Identifier:
keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:e9:9c:70:b3:9b:4c:05:f7:e0:e6:ff:12:47:ab:a1:7a:
a0:26:fa:2a:61:d8:b9:e7:d3:26:85:d6:3a:0f:2c:c5:b8:96:
af:62:67:d7:23:f9:6d:f0:63:38:c3:9b:37:38:19:55:c9:7d:
2a:ca:c8:d8:31:c2:dd:d0:58:e7:cf:29:90:64:ad:90:d7:37:
b0:63:d2:e3:8a:59:0b:2a:cd:5d:fc:b9:13:4d:81:2b:f1:c5:
b9:0b:ac:af:8b:9e:49:14:2f:d6:71:a5:75:1a:5e:82:07:85:
53:af:23:5e:97:d7:43:b9:c7:5c:a1:ef:50:11:28:2e:85:64:
a9:00:89:4d:ab:db:61:85:42:0a:a4:a0:34:58:9e:ae:99:7f:
65:5e:56:70:1e:ea:e0:88:a4:21:9b:fe:b8:da:8c:86:e3:89:
8a:8b:89:78:04:8d:ac:18:05:ae:ac:50:c2:97:5d:fc:f0:a8:
69:46:84:d0:f5:e8:ba:19:87:40:68:fc:d4:33:cf:1b:9c:60:
c2:a0:3a:bd:c8:29:ae:a1:02:93:d1:d5:5e:32:3a:87:a6:a8:
c9:a0:8b:5f:88:ab:81:c3:27:d2:c9:8c:79:9b:27:ef:bc:05:
4a:f3:63:19:4c:1f:85:3d:01:23:91:a6:32:b0:51:18:96:d4:
f4:25:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:02:56 2026 by rpki-client