
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
File: VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json)
Hash identifier: A72W2TRmrifoBPO4nOAvxdPAHE8CTdaaHIo1PcQsbNY=
Subject key identifier: F2:83:AE:AF:5F:FC:49:F0:2F:27:7E:11:12:C6:A3:18:E3:49:CD:04
Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Certificate issuer: /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
Manifest number: 0143
Signing time: Thu 03 Sep 2026 05:36:22 +0000
Manifest this update: Thu 03 Sep 2026 05:36:22 +0000
Manifest next update: Thu 10 Sep 2026 05:36:22 +0000
Files and hashes: 1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: JiNSoKCEgWPcAspdfKd7eBHmrOLAvQLw5tz37JKBNYQ=)
2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: MQmdIDvcYM844/1uv1UkwZ4FyyfbWMvsu3GOUFQnx9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Validity
Not Before: Sep 3 05:36:22 2026 GMT
Not After : Sep 10 05:36:22 2026 GMT
Subject: CN=6a990756-4bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:9e:e2:62:26:aa:2d:e9:6d:1b:11:9f:93:
20:3f:5f:0c:72:15:07:b3:d5:d3:6a:6d:fe:17:cd:
f8:02:d9:cc:45:62:cf:71:82:8c:02:ce:41:0f:e9:
2b:7f:b1:12:66:c4:80:df:4a:bf:b7:45:8b:ee:52:
68:52:f2:40:e4:c1:44:14:18:a5:94:ce:c1:49:58:
4a:ad:f5:8f:3c:66:fa:f9:c9:b6:b0:a9:14:cc:bb:
8f:67:2c:36:89:56:cf:ee:7f:72:13:3b:09:5f:04:
5b:1c:da:e3:b2:46:bc:c5:48:db:e8:76:89:49:9c:
2b:ea:18:91:7e:9f:ed:11:3c:e6:10:ce:e5:b8:61:
74:e4:5f:f4:33:f3:66:59:45:d5:db:b3:96:44:ea:
10:35:fb:eb:12:17:5f:98:59:fd:d8:40:70:ce:35:
a7:2a:d5:85:39:71:82:f3:1c:fe:d9:95:f5:90:58:
d6:b6:da:aa:a5:51:c3:fb:97:26:de:e2:c8:52:e9:
f3:04:da:14:b2:ce:19:26:fd:f5:c2:59:2a:62:b4:
1f:63:20:25:81:a0:4b:a7:be:f7:47:4e:a6:63:1c:
63:ea:19:3c:f8:1a:60:68:60:bf:35:60:b8:8a:bb:
73:c5:16:99:43:f6:27:3a:bb:e8:5e:35:f5:8d:f5:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:83:AE:AF:5F:FC:49:F0:2F:27:7E:11:12:C6:A3:18:E3:49:CD:04
X509v3 Authority Key Identifier:
keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:b0:f9:25:35:fc:88:98:d9:29:00:62:4e:12:bb:56:e3:3b:
02:f0:a3:6e:7f:42:70:92:9f:0c:aa:7b:fa:ba:78:e0:e7:56:
92:fc:72:27:55:68:fa:88:fa:07:f4:b7:1d:33:94:c0:8a:6e:
4d:0b:79:fa:48:f4:ce:38:bd:d2:d9:b7:74:2f:e5:1f:05:6c:
99:81:8e:3b:51:cf:8b:9f:07:88:7f:31:1a:4d:9b:f3:4b:8c:
ab:ac:da:f5:d3:33:b0:4a:8b:f3:38:38:b1:30:18:3d:a6:8f:
96:dc:da:d7:f0:a8:3b:d4:f6:06:e1:f5:fa:b4:fb:22:c2:1e:
91:2a:58:ed:7c:fe:15:4b:76:a5:1d:3c:56:7b:a5:5e:18:01:
10:de:fc:72:51:50:0d:6a:c7:86:4b:29:10:1d:95:f7:37:a6:
51:74:53:d9:b3:67:24:1c:8d:68:36:20:46:26:28:cd:a4:71:
ae:e8:ed:56:c3:b7:7e:14:a2:01:d5:78:62:84:3d:d4:bb:3a:
d4:c0:e8:d9:5a:ab:01:f8:e6:70:62:97:bb:bf:ec:5b:bd:63:
32:17:bf:a0:da:e2:48:5f:eb:7b:a1:51:f4:79:04:f8:e7:00:
f2:02:26:a6:43:24:af:7a:c6:0b:41:12:98:23:e5:2b:16:48:
6b:5f:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:35 2026 by rpki-client