
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json)
Hash identifier: DIPN4E58ZGTadWyKv9ritYkjbw1MR/z9vH79kMy+rCk=
Subject key identifier: 56:FA:C6:36:8C:A6:D2:61:8D:81:00:74:09:31:A1:E8:A7:46:03:D4
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial: 0508
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
Manifest number: 04FF
Signing time: Sat 04 Apr 2026 23:27:58 +0000
Manifest this update: Sat 04 Apr 2026 23:27:57 +0000
Manifest next update: Sat 11 Apr 2026 23:27:57 +0000
Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: bJbIC+cNx7ofOamcX7J0dhh5Ri8N+JyerEyWeB4bHRA=)
2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: hCdqprCwRSkiFFOIcLhlGaaBjCvxEp5nk818yBLfGEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Validity
Not Before: Apr 4 23:27:57 2026 GMT
Not After : Apr 11 23:27:57 2026 GMT
Subject: CN=69d19e7d-5172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:5f:7b:32:2b:4a:8a:a2:9f:16:49:a8:43:
b0:fc:8e:b7:5a:a0:df:97:8b:85:fd:8c:84:70:90:
73:88:e4:ec:5b:59:e4:5b:09:1d:a9:6c:81:76:8c:
0e:fc:b8:0f:34:02:b7:a4:ab:be:31:d2:17:59:d3:
a9:be:e0:3b:81:65:5a:58:a1:92:13:16:d6:f0:b1:
9f:ff:7b:f7:02:7a:c5:38:ea:4e:0c:b4:8f:b6:70:
4d:11:53:57:8c:a3:ee:18:e6:ee:44:24:39:e6:65:
25:96:b3:33:8a:1e:67:80:32:d2:fd:4b:00:60:92:
69:af:27:68:59:14:a4:11:19:d6:bf:89:be:c9:65:
0a:59:7f:97:b2:31:c4:8d:74:a7:a3:bd:e9:9c:f9:
5f:d7:e3:49:31:4f:a1:4e:04:b4:57:d6:aa:f0:07:
81:8f:ee:30:3b:02:59:64:36:4f:56:e0:b8:3b:f7:
14:8c:71:2f:60:55:13:38:ec:21:fe:72:26:99:0b:
0f:4e:96:44:37:75:e5:e9:ff:3f:36:91:be:2f:5e:
6e:d3:26:0c:6a:55:ba:a3:cc:7d:a8:55:9e:a0:9f:
09:87:19:c8:f7:e5:2e:04:f2:a5:04:e5:c8:be:50:
0d:ae:f0:49:2d:fc:37:fb:3e:3d:ab:05:59:3d:c7:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:C6:36:8C:A6:D2:61:8D:81:00:74:09:31:A1:E8:A7:46:03:D4
X509v3 Authority Key Identifier:
keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:1c:3b:5f:67:65:99:69:23:82:cf:0e:12:98:f7:bf:b2:
6b:57:99:a4:8f:04:ea:c1:b5:23:3b:c7:a3:8e:6a:f8:52:de:
80:7a:92:50:19:34:48:e7:3e:ad:6c:6a:7d:de:3d:65:07:d8:
6a:6a:51:62:4f:f0:48:60:08:6e:63:6f:e7:35:68:8c:85:43:
dd:92:8d:bb:14:97:b7:6a:ec:19:ef:50:ae:d6:6c:7f:21:4c:
2f:18:12:71:e8:27:b1:0a:84:0c:9b:3e:5c:1c:24:5f:bc:bf:
6e:27:b0:75:9e:ce:6e:0c:4e:fa:43:70:e1:15:52:ac:63:3b:
31:26:17:da:33:7e:ef:14:07:78:80:30:04:c2:04:05:0b:76:
33:ac:9d:05:c3:de:f8:80:f6:1f:ea:19:ab:5c:cc:8a:86:45:
05:2b:69:c1:a0:ba:14:3f:e1:5a:82:9b:21:d9:d4:54:3a:cf:
ce:a9:4e:f8:f7:8f:ac:e7:58:06:24:ba:a1:92:46:77:86:cb:
54:68:2f:1a:e7:1c:99:28:29:c6:ca:78:e8:0a:3b:c9:6e:8a:
09:c1:48:7f:ba:ac:46:cd:36:30:51:0b:85:23:06:91:fc:34:
bf:d4:1b:5a:dc:73:b5:d0:ab:63:e5:f2:46:83:21:3a:10:66:
23:9e:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:44 2026 by rpki-client