
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier: p6x1iyGTTPrzL9MKVsluUzhCj8OB1ywDl00QywQ5IdE=
Subject key identifier: 35:DE:67:D7:DD:67:0D:36:60:B3:5E:B4:E7:EC:A3:52:FC:06:3F:04
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial: 0345
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number: 0339
Signing time: Mon 21 Sep 2026 00:49:57 +0000
Manifest this update: Mon 21 Sep 2026 00:49:57 +0000
Manifest next update: Mon 28 Sep 2026 00:49:57 +0000
Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: ZXNdaFVn7XzZBctgUrRsOEVNrr5CYbYRsU7f+h2VL+A=)
2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: /BvQ6kvIEgBffI02nHSKZcn99+fjwqt27ykwaYqA3zc=)
3: riNk604YIuT2nGGJLkNkD9gKWGQ.asa (hash: 0/vVoR2g/4rvEMQd9KrOQDIcvUofqRiQow1WZGmbCWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837 (0x345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Validity
Not Before: Sep 21 00:49:57 2026 GMT
Not After : Sep 28 00:49:57 2026 GMT
Subject: CN=6ab07f35-4885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:c4:0d:85:86:c3:1e:a6:28:62:86:f0:ee:
e5:1b:9a:7a:57:0f:4e:96:d6:61:79:ee:26:98:21:
8c:37:57:45:80:9b:54:43:ee:26:5a:2d:a5:95:32:
9a:82:50:a5:92:88:84:43:f7:ff:48:ff:7e:25:6c:
df:f9:7d:db:35:c2:95:16:3d:da:c3:6f:88:5b:15:
2e:30:e9:11:46:c2:b3:d2:fb:9f:0a:64:f1:17:87:
16:1b:f5:ce:62:59:2c:76:03:ca:bc:8a:a5:09:80:
b1:b4:ce:17:07:ce:28:f0:61:dc:ec:25:4a:15:5a:
09:3b:75:ae:e0:a6:5f:a0:fb:a5:dc:9d:75:b8:6f:
e1:7e:e9:7f:c6:63:b9:54:d2:61:bc:6c:19:a9:e8:
98:f9:79:be:6c:0c:e1:f9:26:14:46:e3:54:f6:7a:
6d:1f:fa:04:8f:bb:42:7d:02:db:bf:63:b5:df:55:
c3:42:c1:9a:91:8b:4f:84:a9:eb:54:92:58:9c:ad:
9a:57:d5:0e:e7:76:0b:b2:3b:9c:9d:08:7c:de:87:
d8:6c:8a:d7:b1:3c:35:9a:11:78:35:52:bd:cd:7b:
bd:76:63:ff:b9:6d:5d:f8:4f:62:61:8f:89:e3:55:
9d:8f:2d:8d:51:49:ba:c7:ad:02:4d:06:59:21:09:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:67:D7:DD:67:0D:36:60:B3:5E:B4:E7:EC:A3:52:FC:06:3F:04
X509v3 Authority Key Identifier:
keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:42:1a:38:a9:b2:33:1c:c9:39:f6:aa:36:d8:90:22:27:99:
fc:09:0b:c0:e5:0b:a3:69:c6:d3:f8:7e:e9:e9:e0:93:96:44:
a3:e5:71:63:e7:b4:84:34:82:6b:1d:93:2e:f1:a0:52:02:60:
56:2d:a7:67:18:c7:83:c8:38:cf:f3:15:f1:63:df:f0:ce:bd:
0b:23:dd:f5:33:01:29:ff:ba:76:97:9f:2f:9a:2a:2b:87:1c:
81:70:9a:fb:db:3c:ad:f0:14:8e:28:a6:6f:1a:cc:4c:3f:47:
13:4d:af:08:59:9e:a3:91:c2:3a:d7:08:7f:4c:42:d7:08:cc:
eb:25:95:1d:b3:39:d0:f4:2a:76:eb:1f:19:bf:fe:56:a1:e5:
90:c8:17:8a:b1:2c:61:47:b3:bd:e5:bf:8b:3f:2f:18:88:be:
39:09:1e:48:49:ff:78:b9:55:bf:05:81:e3:3c:fd:9e:35:55:
59:8f:5b:61:4b:f9:a4:34:04:82:aa:3d:97:6f:b5:ce:21:62:
0e:8d:18:28:4b:a5:3e:a4:f9:ff:9d:d1:d0:df:58:7d:c2:e2:
0b:2a:e3:3b:25:18:71:58:df:64:5c:f1:0a:92:d1:67:dd:6c:
72:71:0c:05:a4:1f:d7:24:bc:3a:24:bd:34:81:c8:74:3e:ba:
9f:f1:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:15 2026 by rpki-client