
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json)
Hash identifier: RPl0jdcwnn3Mw1iwhQ+jU4h1eTyChXeCh5D9viSleF0=
Subject key identifier: DD:F6:3E:17:FB:09:1E:51:AC:A8:57:2D:73:CF:5C:A8:F1:DC:05:FF
Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
Manifest number: 0212
Signing time: Tue 27 Oct 2026 03:13:20 +0000
Manifest this update: Tue 27 Oct 2026 03:13:20 +0000
Manifest next update: Tue 03 Nov 2026 03:13:20 +0000
Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: h/gbZcvQ92kIVsBM69MK/RRFzttvBUKxAqZBAN9zJK4=)
2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: C6Cummg9Sl6RCDS2LtUiMc8wWWKvQYCjdXXfFdueSWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 03:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Validity
Not Before: Oct 27 03:13:20 2026 GMT
Not After : Nov 3 03:13:20 2026 GMT
Subject: CN=6ae016d0-aeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:b8:5e:9f:17:12:0d:b0:ec:eb:da:08:9d:
cc:65:42:9d:4c:98:c1:34:97:37:c4:64:79:cb:37:
4c:93:da:8d:40:25:31:99:2e:b1:11:e5:6a:25:46:
bb:5c:89:60:3e:57:0c:59:27:38:7d:50:e2:7c:4c:
30:df:6c:fb:99:0d:d8:59:47:48:12:0f:33:17:68:
9d:8d:ea:ed:cb:4d:41:fc:74:14:d9:13:bd:06:a8:
f3:ad:6f:da:cc:3e:64:0e:15:3c:88:33:27:a4:ff:
f9:2f:00:28:43:4f:f2:58:c7:dd:46:7f:4d:f1:7f:
cc:6a:e9:b5:60:b6:ad:24:bb:14:13:45:53:44:f0:
4f:72:74:16:55:5f:67:4f:c4:6d:81:46:72:8e:10:
52:ee:c9:13:f9:b0:74:35:ce:a5:63:86:f1:13:89:
ca:04:dd:51:d3:1c:d1:6d:8a:d2:61:5e:08:91:65:
31:e2:e2:96:83:81:0c:50:d4:fb:19:97:90:65:d0:
8a:31:e8:58:75:f8:b8:5f:3a:7c:fe:73:af:a0:54:
4a:89:5d:c6:76:14:f7:45:c6:58:73:1a:7d:95:7d:
26:9d:37:b3:19:5b:18:ec:3f:98:c0:b0:ec:aa:32:
55:d5:78:2c:cf:3f:eb:09:ea:c7:b3:d1:14:ef:94:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:3E:17:FB:09:1E:51:AC:A8:57:2D:73:CF:5C:A8:F1:DC:05:FF
X509v3 Authority Key Identifier:
keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6c:30:e7:72:b4:03:ae:13:18:bc:6b:a3:75:0b:64:f0:ce:
28:af:cb:79:c2:68:c5:39:81:22:55:ca:04:20:d0:56:71:c1:
b2:68:3b:18:df:14:12:a2:18:c6:3c:fc:51:01:71:4a:1e:ee:
ae:bb:b3:29:b0:07:92:77:18:db:f7:f1:26:43:c8:3f:d9:41:
50:89:8c:45:43:fb:44:b9:25:fd:bf:33:aa:45:02:4b:40:c2:
52:a4:ad:e0:48:64:c9:51:16:31:2f:16:8e:2c:21:e0:85:1c:
99:98:53:ff:4b:87:e6:9a:52:74:05:1e:1b:51:a3:07:fb:d7:
17:58:83:6d:2f:6e:d6:c5:9a:5e:c8:61:83:7f:37:f4:fd:65:
43:1e:9e:53:a8:6f:00:0b:fd:4f:ad:6b:ac:df:d2:dc:67:1b:
d6:be:80:18:f3:29:2e:56:07:63:16:f4:6b:95:d1:f0:40:95:
16:9d:f7:2f:d5:6c:10:c7:74:87:f7:78:52:6f:fc:e1:d9:2b:
36:84:f2:c9:a2:dc:aa:fb:82:b8:92:7d:69:2b:9e:85:c3:21:
7d:94:0e:c6:f6:b4:9f:d4:bf:3e:ff:a2:b5:af:54:62:d3:a4:
b7:9c:de:d3:ac:5f:bb:df:71:c1:62:20:f5:08:ac:26:3d:65:
bd:d4:17:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy
MTdBRjdBM0YwHhcNMjYxMDI3MDMxMzIwWhcNMjYxMTAzMDMxMzIwWjAYMRYwFAYD
VQQDEw02YWUwMTZkMC1hZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0AG4Xp8XEg2w7OvaCJ3MZUKdTJjBNJc3xGR5yzdMk9qNQCUxmS6xEeVqJUa7
XIlgPlcMWSc4fVDifEww32z7mQ3YWUdIEg8zF2idjerty01B/HQU2RO9BqjzrW/a
zD5kDhU8iDMnpP/5LwAoQ0/yWMfdRn9N8X/Maum1YLatJLsUE0VTRPBPcnQWVV9n
T8RtgUZyjhBS7skT+bB0Nc6lY4bxE4nKBN1R0xzRbYrSYV4IkWUx4uKWg4EMUNT7
GZeQZdCKMehYdfi4Xzp8/nOvoFRKiV3GdhT3RcZYcxp9lX0mnTezGVsY7D+YwLDs
qjJV1Xgszz/rCerHs9EU75SpEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN32Phf7
CR5RrKhXLXPPXKjx3AX/MB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD
NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l
YnNtdmswZnM3TFFoZXZlajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAomww53K0A64TGLxro3ULZPDOKK/LecJoxTmBIlXKBCDQVnHBsmg7GN8UEqIY
xjz8UQFxSh7urruzKbAHkncY2/fxJkPIP9lBUImMRUP7RLkl/b8zqkUCS0DCUqSt
4EhkyVEWMS8Wjiwh4IUcmZhT/0uH5ppSdAUeG1GjB/vXF1iDbS9u1sWaXshhg383
9P1lQx6eU6hvAAv9T61rrN/S3Gcb1r6AGPMpLlYHYxb0a5XR8ECVFp33L9VsEMd0
h/d4Um/84dkrNoTyyaLcqvuCuJJ9aSuehcMhfZQOxva0n9S/Pv+ita9UYtOkt5ze
06xfu99xwWIg9QisJj1lvdQXuA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:11:57 2026 by rpki-client