
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File: voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier: v6Q6vAeikVFS3472MZyB6MzMvxhCno7S10OMdX9Zh/Q=
Subject key identifier: 64:67:1B:4F:24:CD:4E:4F:12:19:98:DF:A3:11:E9:1A:7B:6D:F3:A3
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 0506
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number: 04E7
Signing time: Tue 24 Mar 2026 23:31:10 +0000
Manifest this update: Tue 24 Mar 2026 23:31:09 +0000
Manifest next update: Tue 31 Mar 2026 23:31:09 +0000
Files and hashes: 1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: S4UEYlKGmWpMFPxlj8+BKlRPP7/VDCZOTf8MwuM6TVg=)
2: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: WdNld5DHUPVbC8ourF5Ae6KnkYpsmFk/aie/RVL4jQw=)
3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: GVjvFKgHSY78CpYCc98Qtcp6gxw2fNKpFQ7HCML9xSg=)
4: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Mar 24 23:31:09 2026 GMT
Not After : Mar 31 23:31:09 2026 GMT
Subject: CN=69c31ebe-9637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:64:bc:e7:2d:b1:a1:b4:fb:89:bb:f3:81:
0a:38:cd:db:cd:1c:a0:e8:e5:57:57:43:c4:06:24:
46:8b:90:56:05:b2:41:a5:1e:77:c7:50:c6:5b:1c:
01:55:f5:27:c4:09:f0:e8:df:6a:38:49:0b:f3:61:
6e:a8:f6:4e:c1:b4:70:67:b5:a8:35:d9:ba:17:c5:
e6:30:7d:88:cc:20:f7:f1:bb:ca:53:00:25:c3:f3:
d9:7f:49:19:5e:02:03:a7:a5:91:ef:47:98:de:80:
2d:5c:c5:11:62:01:65:bf:c6:39:0d:6e:00:9e:2c:
ff:d6:ed:61:11:20:4a:2e:dc:72:df:6b:24:62:1d:
e4:cd:c5:b5:5d:68:44:6e:ee:5e:28:79:5d:7a:d3:
7a:10:d6:93:96:19:b7:a2:6a:ab:9d:3f:2a:dc:8d:
ef:f9:fd:a6:1f:c5:0f:f3:ce:f9:81:43:73:04:61:
9d:6c:a9:2d:cd:ff:9d:a4:32:2b:4f:80:6a:79:b6:
36:1f:70:84:d0:d8:35:cd:7f:fe:02:d2:b8:a6:79:
ba:fc:7a:f2:52:91:e3:33:26:52:34:03:0b:5a:35:
e2:e9:2a:67:9d:c5:6b:b3:eb:c1:9c:96:d3:31:16:
06:d2:6b:4c:96:e2:39:ff:14:01:da:4b:d4:f3:4a:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:1B:4F:24:CD:4E:4F:12:19:98:DF:A3:11:E9:1A:7B:6D:F3:A3
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:af:f3:13:68:8f:07:81:0e:1f:ba:82:43:04:9f:7b:76:b9:
99:fa:05:7e:52:a4:8c:1b:21:f1:e8:95:3a:ed:b5:34:d2:64:
a3:8a:b0:39:8c:ba:54:f5:c8:f1:4f:83:56:66:4c:f8:8b:2c:
f3:28:a2:69:71:c9:7f:21:c3:9f:06:7d:8c:e6:a4:9f:ef:a0:
d9:89:1e:2f:48:08:9e:d4:be:c1:42:3a:e2:79:67:f9:49:85:
e0:ce:8a:38:ad:c7:c0:1a:05:51:20:9f:4a:de:ed:47:a9:1a:
c3:8a:5a:0e:6d:76:31:e8:f9:04:80:c8:a6:f8:77:ce:e8:86:
61:dc:95:c7:4c:f5:46:23:8c:cd:cd:05:53:5c:91:03:56:13:
ff:9c:2b:42:b4:60:33:5e:67:5a:76:32:66:14:da:e7:24:73:
ee:13:17:1f:c9:9c:58:83:a1:11:4b:b1:36:1e:28:42:87:51:
fb:bb:73:4e:4d:cd:0a:6c:56:e6:77:5e:89:eb:42:3d:f3:31:
32:64:c5:90:be:08:04:20:84:aa:e1:96:a7:8a:cd:8a:4e:53:
8d:a9:a0:9b:03:dd:b2:20:8a:61:aa:93:72:a0:80:90:5a:ca:
e3:c4:e4:82:a5:b8:d2:fd:e5:b1:7b:2e:f4:f7:00:58:d7:c3:
60:94:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:12 2026 by rpki-client