
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json)
Hash identifier: LRBJNBSfVj+bE6T80x+/8h82+8JcEr+yYyLZv6PDR9w=
Subject key identifier: C1:66:AE:81:50:92:38:C3:E0:21:79:2B:B9:7F:B1:31:FB:01:62:0B
Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
Manifest number: F2
Signing time: Mon 11 May 2026 06:35:38 +0000
Manifest this update: Mon 11 May 2026 06:35:37 +0000
Manifest next update: Mon 18 May 2026 06:35:37 +0000
Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: INgoI5MboyRXQDY0cFeTv0WSUXZ5hqnFqK+Le+LDA0E=)
2: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=)
3: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Validity
Not Before: May 11 06:35:37 2026 GMT
Not After : May 18 06:35:37 2026 GMT
Subject: CN=6a0178ba-1c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:37:ab:6b:6d:d7:ca:59:15:b2:8e:15:3a:
43:b4:de:21:4d:91:1b:88:7b:11:c7:9c:5d:8b:94:
56:7b:81:b1:d3:50:14:ab:39:06:e7:29:4f:cc:c9:
a3:70:31:c6:1f:5f:9a:ec:02:44:52:a8:f1:08:1f:
7a:5b:1a:c8:b2:aa:78:8b:49:33:46:4b:5f:a7:3f:
82:b0:d3:29:5b:57:b6:6b:e2:87:82:14:f8:13:24:
77:2a:ed:1c:f5:97:89:cd:00:cb:9d:18:d9:5d:90:
08:d8:57:21:be:8b:ad:7e:9a:29:d2:b1:e7:03:57:
ef:31:bd:bd:3d:e6:7e:b0:6c:52:02:3d:78:d3:af:
ed:2a:71:bd:6a:60:85:7c:7e:e8:9d:a9:4d:d0:15:
8c:ea:0e:16:d5:74:e1:48:1c:01:5d:26:ed:09:0d:
0c:00:95:55:97:d7:a8:cb:c1:f8:1e:d0:d9:46:3e:
9d:da:6c:c2:ce:0b:ea:cf:88:59:1b:a0:4d:70:d5:
3f:9d:d0:b1:e5:c3:d9:30:8f:f8:46:b6:e5:01:6a:
96:74:51:e4:d8:80:8d:2f:2e:94:4d:02:ff:c3:37:
42:f4:71:a4:39:1c:c9:92:d2:8d:06:fa:3b:d1:37:
3d:97:08:c9:12:6b:07:2e:e6:9c:65:0f:ad:84:77:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:AE:81:50:92:38:C3:E0:21:79:2B:B9:7F:B1:31:FB:01:62:0B
X509v3 Authority Key Identifier:
keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:a9:05:10:67:a5:ce:8f:4c:99:79:ba:c8:10:4b:da:40:39:
d2:18:32:ef:84:e1:cd:31:af:0f:6b:77:f3:ba:ed:a3:0b:09:
c3:98:c5:0d:56:2a:84:ef:87:6a:f6:e7:d7:75:63:8f:cb:70:
9d:09:a2:c7:ed:93:aa:ec:3e:0a:29:2b:e7:10:6e:2e:17:a5:
a0:da:6b:bb:f6:4e:9e:8a:01:b7:51:03:75:8e:9d:f0:0a:26:
61:7a:75:7c:1b:50:46:d8:4c:1c:5b:f6:1c:6d:76:9a:c8:17:
7a:42:99:bb:4a:44:44:74:19:ee:b8:e1:00:c5:1b:b8:24:b1:
b7:39:a9:8f:65:7e:71:f4:ac:db:02:84:f6:4e:67:6d:fd:ca:
06:93:a1:a7:84:f8:1d:4f:6b:98:49:14:ad:6f:5b:d1:75:23:
a5:48:a0:c5:ef:08:ab:09:2f:ff:59:ee:29:d3:1c:04:73:c1:
dd:92:21:88:91:76:28:75:6f:ae:e3:6f:2c:44:dd:c5:4e:8f:
82:08:52:ae:dc:47:94:5b:3e:ba:ea:52:62:8e:0e:3d:cf:d1:
3c:38:96:9c:d9:c3:ce:59:c5:fb:23:ae:45:64:e9:c3:aa:39:
d5:59:88:58:55:c5:a1:05:61:28:fc:2d:86:72:b1:38:3f:4c:
60:19:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:45 2026 by rpki-client