
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
File: Vf7J4gez203tZS5JWDNvQ9nic5w.mft (raw, json)
Hash identifier: R74Mm255ZOxobH5XU559z2MqpV4ej0TcoNkQE+gkJ94=
Subject key identifier: 43:52:87:FF:E5:D5:FB:3A:A8:61:3D:B9:D1:DC:F4:D0:4B:13:20:8C
Authority key identifier: 55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C
Certificate issuer: /CN=A91109D7/serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
Manifest number: A2
Signing time: Wed 19 Aug 2026 07:55:46 +0000
Manifest this update: Wed 19 Aug 2026 07:55:45 +0000
Manifest next update: Wed 26 Aug 2026 07:55:45 +0000
Files and hashes: 1: Vf7J4gez203tZS5JWDNvQ9nic5w.crl (hash: wuhDrtng+LbI7iIKl4Q3NxJFJMMuWUbud4etFfY1rO8=)
2: 18193690B83511F08571AD3BC4F9AE02.roa (hash: AcvcEdl+oGy6JYS8+KyLUo4frhDM5qi/jX2RKh1i0Y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl
rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109D7, serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
Validity
Not Before: Aug 19 07:55:45 2026 GMT
Not After : Aug 26 07:55:45 2026 GMT
Subject: CN=6a856182-c9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:8b:7c:ff:b9:d1:ad:27:0d:0e:e2:ce:c9:
0f:a9:73:9e:89:b2:29:4a:95:08:18:a0:3e:8b:14:
ee:d0:d5:9c:15:4a:c3:c9:41:f0:3a:6f:77:8a:e8:
d3:38:a2:1b:86:fd:17:6a:ac:c2:12:9b:95:3e:cb:
43:34:92:46:d7:f9:36:95:75:03:95:2c:96:22:a1:
6c:57:9c:83:aa:06:13:f5:54:99:ab:c0:6b:8c:08:
d1:68:82:0c:21:b3:96:fa:bf:ef:a6:78:b6:6e:7f:
06:27:cd:6a:b1:29:91:ce:dc:dc:45:26:05:51:66:
43:e5:6f:a6:d3:4e:6d:58:2a:d1:ac:c8:f3:68:fb:
00:1c:3f:09:11:61:8a:74:ee:8a:e4:e1:ce:74:98:
07:9e:e1:4a:40:77:03:b3:15:f4:e8:07:71:6d:6d:
47:13:a8:df:32:45:28:7c:f5:93:df:e1:38:18:3e:
9a:34:4d:9e:63:08:0e:62:55:91:9e:37:93:62:ff:
18:6c:c9:3d:98:e8:4a:04:b7:17:b0:d8:dc:b3:ed:
bc:2f:5a:a5:b6:af:50:64:18:03:43:49:6d:1f:dc:
ee:8f:02:97:59:a1:8f:6e:fe:78:0a:e7:be:02:0f:
fa:e4:63:27:b4:b0:fb:79:a5:d3:bc:0a:51:09:7d:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:87:FF:E5:D5:FB:3A:A8:61:3D:B9:D1:DC:F4:D0:4B:13:20:8C
X509v3 Authority Key Identifier:
keyid:55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:d0:2c:15:ac:e8:2b:7b:79:90:c6:2f:06:53:2f:0b:cb:
27:86:60:35:10:68:d9:ef:22:22:24:20:63:18:db:19:8c:27:
ab:d0:b4:a3:60:d8:32:86:67:11:e4:e6:fa:f0:30:9f:65:ef:
7f:5f:30:ef:1b:11:a3:d5:84:b3:c0:e4:8e:19:c0:59:03:6d:
44:59:dd:89:46:c8:ab:23:05:e8:c3:4a:4a:47:6b:31:a0:5e:
bb:87:dd:90:00:5c:3f:68:ac:00:49:e6:4e:e9:dd:1c:0b:11:
fd:fe:bb:89:12:b0:f0:85:a0:d2:0f:80:22:b6:48:16:71:de:
20:75:15:e1:a7:dc:ac:56:b0:f1:27:eb:54:15:23:03:34:be:
15:aa:9a:02:d9:5f:52:93:5d:86:09:d8:13:69:14:42:c3:e2:
aa:b4:8b:83:f6:b2:dd:2b:b9:b5:df:0c:1b:f5:69:37:26:b0:
ff:f8:f4:14:2b:3a:ac:3d:e0:b3:cb:de:98:82:f8:f2:03:91:
a6:7a:f1:a5:b7:4d:11:1c:4e:26:a7:61:5f:d5:3b:dc:23:b3:
9a:65:ea:66:fe:c8:54:4b:c4:98:50:b0:f2:48:76:f1:99:c5:
bc:43:99:4a:1e:30:9b:bc:6f:83:46:31:70:02:1f:6c:27:63:
b4:eb:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:10 2026 by rpki-client