
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier: XiY2Mpn2Kz/m4WkQ6cMyl7thrrk2N6P568dkuMqdqCQ=
Subject key identifier: B5:72:C3:63:9B:48:0B:28:A7:32:98:B1:32:1B:88:CE:C0:C5:0F:81
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number: 9A
Signing time: Sun 05 Apr 2026 06:46:44 +0000
Manifest this update: Sun 05 Apr 2026 06:46:44 +0000
Manifest next update: Sun 12 Apr 2026 06:46:44 +0000
Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: d8vx5mDpQwWdrHwxNQAbGMgZLsnGoYnLE3eBtRQXlPg=)
2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Np4RhG1xsJNFE2oTPHnRwfjk0sVMuj4yUU4qDWm5ytg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Validity
Not Before: Apr 5 06:46:44 2026 GMT
Not After : Apr 12 06:46:44 2026 GMT
Subject: CN=69d20554-8d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:41:5f:61:2c:56:99:53:52:a0:58:27:d6:
ab:69:09:fd:7f:be:14:97:ec:b1:db:7c:a2:f4:5e:
44:58:91:fa:3e:27:d9:01:f0:b4:6b:f3:43:94:07:
ee:0b:2f:de:01:91:75:98:0a:cc:88:2a:55:97:43:
f5:5b:1e:bd:f3:e8:e0:1b:87:0b:6d:83:10:87:53:
2d:1c:a6:6d:f2:c2:13:d5:12:6e:ce:bc:ad:15:64:
aa:6a:51:b0:17:82:56:c3:ba:8e:42:e3:83:67:31:
b9:69:b4:2c:00:22:43:eb:ae:e0:4e:7e:37:81:2c:
04:2e:48:48:60:31:0a:38:f1:6a:5e:8f:61:0f:cf:
3a:47:51:f3:e8:fd:d8:6e:32:46:7b:a8:5c:8e:90:
8b:7d:08:f0:00:14:53:4d:c5:ce:cf:bc:08:25:fd:
57:b8:85:bc:14:ac:9b:63:41:12:1f:74:82:e3:98:
ac:60:8d:71:57:26:44:9d:ca:e2:a2:5e:d8:16:22:
fc:df:8d:ca:eb:49:b3:47:0b:b5:81:c6:55:ba:a5:
78:08:b0:2a:db:eb:ea:19:6c:9f:93:ae:e1:78:10:
36:0c:67:04:5b:5b:4d:e3:dc:b5:cd:a8:dc:da:f6:
19:b6:45:29:37:8a:c5:36:02:9a:7e:ec:76:4b:10:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:C3:63:9B:48:0B:28:A7:32:98:B1:32:1B:88:CE:C0:C5:0F:81
X509v3 Authority Key Identifier:
keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:56:bd:37:38:7d:21:ee:20:8b:a7:ea:7b:4a:83:c0:b4:c4:
68:11:d7:41:68:a0:44:71:e0:05:f0:67:59:77:00:5c:24:fd:
0e:04:91:5c:16:96:27:db:b5:25:8b:0d:18:5d:c4:50:d9:37:
3d:04:1e:a1:d9:a9:f9:26:01:d4:bd:ff:49:2e:46:04:f1:84:
02:ec:8e:97:01:ad:c4:e2:d4:b5:78:16:96:49:01:7e:02:7e:
14:28:75:0a:3a:fd:63:06:75:28:1b:95:be:d8:70:fc:96:6f:
21:e2:54:14:1a:34:a4:2f:f1:72:85:6b:7b:38:b6:48:e3:dc:
db:f2:5c:52:d7:9e:6e:f5:7e:ae:39:56:fc:b1:ea:2f:e1:c5:
c8:3d:d1:41:7c:d3:f5:0b:86:07:2d:91:fb:59:89:1f:11:f8:
5e:3e:b6:f7:20:dc:49:c9:3b:3b:22:4e:1c:e7:5d:29:9b:4b:
c9:eb:54:33:33:a4:ef:1e:83:3a:10:d8:f8:ad:64:c3:77:a1:
68:f6:ee:89:f3:35:aa:35:af:9e:72:ac:1a:6b:30:7d:df:fb:
b4:34:46:68:b2:76:77:82:ec:9b:09:d1:9d:c9:12:50:10:43:
7c:dd:bf:2e:d8:f6:54:30:2f:7a:26:83:8b:19:d1:12:ca:c5:
49:27:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:37 2026 by rpki-client