
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json)
Hash identifier: ZyN1tpGXEbuLw/Dy9qwdqKwFql+ILgo0ZBfnXJlJrGY=
Subject key identifier: 6C:EF:3C:D9:C0:EB:52:DB:00:0B:1B:A0:7A:FA:E4:D9:EF:09:7D:5F
Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Certificate serial: 0668
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
Manifest number: 0661
Signing time: Sat 04 Apr 2026 22:24:53 +0000
Manifest this update: Sat 04 Apr 2026 22:24:53 +0000
Manifest next update: Sat 11 Apr 2026 22:24:53 +0000
Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: uHH73/wo2YByKcpci8zPaSZWosmBZj0XNgLoFQ4lQfc=)
2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: +7fBmDNkXTllULQUQpOkY6K7Eno8t9wQW0auKblxSCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1640 (0x668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Validity
Not Before: Apr 4 22:24:53 2026 GMT
Not After : Apr 11 22:24:53 2026 GMT
Subject: CN=69d18fb5-b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:d9:d7:7a:fa:58:f5:5c:75:f6:c1:20:60:
63:4b:d0:c7:18:f5:04:fb:fc:a3:7f:00:73:17:bb:
7d:61:cf:5a:b8:dd:90:8d:65:fb:21:a2:5f:52:c2:
9f:34:95:b4:16:5c:1b:cd:a5:ec:cd:34:cf:c1:b4:
ca:73:4e:e4:d6:8d:e2:e2:d8:26:1f:ad:f3:57:3f:
bb:54:1a:78:61:1b:74:0e:81:8a:f5:b6:d4:b0:41:
26:f8:39:2a:28:1f:ea:c8:f3:fd:00:2c:43:be:f7:
a9:d2:4c:54:0e:38:34:b7:3e:9d:db:81:19:0e:25:
1a:e2:e6:1f:82:77:88:5e:72:cc:ee:3d:0a:49:c1:
bd:98:86:58:48:4b:b5:7f:ec:4a:89:eb:d2:b7:66:
a0:55:ef:ec:10:32:14:0b:5e:11:5d:00:01:a5:d1:
9a:bc:a1:91:cd:cc:00:0e:e9:91:1b:73:b0:0f:ad:
bb:0c:9f:7a:20:2a:8c:c9:98:c4:c9:7a:e8:c1:2d:
dc:6a:4d:46:ce:36:c8:a8:fc:d7:f6:5f:dc:9d:5a:
1a:2e:4c:6f:f8:1d:04:d0:45:01:36:c7:d8:c8:f3:
34:39:b5:90:0a:9d:8d:98:31:a6:e4:54:67:5a:83:
01:4a:2b:c9:af:04:4d:b3:64:2b:af:e0:51:16:4e:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:3C:D9:C0:EB:52:DB:00:0B:1B:A0:7A:FA:E4:D9:EF:09:7D:5F
X509v3 Authority Key Identifier:
keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:67:3f:34:88:61:f5:d5:bd:7a:0b:87:df:ff:c6:27:25:7e:
91:e1:d7:d6:a8:fc:c4:da:99:1a:97:d0:cc:67:8a:dd:8f:bc:
5b:a6:b0:29:9a:72:f6:6e:2e:b4:72:2d:30:2e:b7:08:a7:e3:
f8:b1:39:b0:7a:b4:cb:fb:13:ee:cb:f9:71:a5:1d:77:68:d2:
f4:76:66:05:6a:a8:85:2e:33:25:52:eb:2d:27:a2:66:bd:61:
2d:cf:c7:26:57:7d:33:d7:82:d9:e2:e5:71:d7:a5:9c:de:51:
71:83:5e:bf:e5:13:60:8c:de:e0:a1:83:c7:39:2e:67:33:b4:
9c:48:e3:85:6e:e9:3d:06:c8:fa:21:ab:8e:ae:3f:6d:26:34:
8a:43:eb:43:2f:5e:f1:e1:c6:0c:0a:1e:3d:49:fd:67:7d:2a:
d2:f8:41:54:f3:fd:5e:e9:e4:94:85:18:bf:a0:f4:d5:73:45:
c9:3d:a0:d2:1e:df:46:6a:9a:9b:5e:59:25:f5:e0:27:ea:8d:
15:57:ce:d6:43:77:f1:4c:78:49:7f:39:26:fd:a4:03:c1:59:
d9:22:e1:bf:4a:3d:12:7c:f2:64:b9:b9:03:90:b2:9a:48:1a:
2a:50:ed:e8:b4:83:cf:66:5a:4d:91:34:a2:18:ab:4f:ca:ef:
7f:19:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:27 2026 by rpki-client