
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier: JXWKnSjvTBUfRe67lVBdTzmnIk2lhcj38eNTWpwa0nc=
Subject key identifier: 27:51:3C:0E:26:96:2F:D7:84:1A:9D:03:21:A6:34:BC:DE:8B:CB:31
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial: 0E5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number: 0E4D
Signing time: Mon 22 Jun 2026 17:46:32 +0000
Manifest this update: Mon 22 Jun 2026 17:46:31 +0000
Manifest next update: Mon 29 Jun 2026 17:46:31 +0000
Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: c10ObjRF4ZsPlRtW8cojo4OBJPIH21c+tgTJDpcx5lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3678 (0xe5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Validity
Not Before: Jun 22 17:46:31 2026 GMT
Not After : Jun 29 17:46:31 2026 GMT
Subject: CN=6a3974f8-9e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:13:fe:6c:26:77:d0:44:0d:33:c3:8b:cc:
0d:fd:36:16:0f:e1:72:ad:fa:3e:ce:98:c0:69:b1:
bb:64:64:33:af:33:27:ca:48:81:3b:59:98:5b:00:
11:5b:19:31:11:88:c8:10:0b:0f:87:1a:4c:76:f5:
c9:62:a5:57:6a:61:63:c2:9f:a9:a1:72:ec:5f:8c:
f6:92:33:3e:1f:47:b5:bb:4e:34:92:32:a4:50:ca:
5e:ac:fe:0b:b9:c2:97:f2:66:3f:44:08:fd:49:a1:
3e:d2:2e:b3:74:61:38:d1:34:00:e4:fe:c0:28:82:
a2:58:5b:0d:db:53:6d:12:03:66:90:0d:68:7d:3a:
47:e1:bb:92:a1:bd:06:dc:e0:2d:4c:84:31:53:7a:
c9:fb:04:51:16:0c:fd:b1:a6:c5:32:97:10:fa:77:
d6:84:13:5b:49:38:71:84:04:ba:1f:c6:f4:07:71:
8b:f5:a3:db:d8:26:8c:1e:7d:f3:27:18:15:93:e5:
2d:0d:29:19:4c:f1:8c:ee:d8:b8:38:0c:02:a6:62:
b5:0a:83:81:40:12:18:01:a8:00:ca:48:d3:d6:93:
24:74:8e:8e:ef:6d:88:a5:ac:c8:03:05:62:53:ab:
37:6f:60:ad:14:f8:c0:db:e2:74:4c:c1:f6:f3:2e:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:3C:0E:26:96:2F:D7:84:1A:9D:03:21:A6:34:BC:DE:8B:CB:31
X509v3 Authority Key Identifier:
keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8c:28:f0:67:e1:87:1a:00:1e:3d:6c:0d:25:5b:ff:69:b4:
cb:bf:42:f8:15:71:38:da:22:b8:9a:f0:3f:54:7e:0d:78:d8:
7b:ed:be:5f:1f:c1:3c:fa:8b:42:55:a2:f4:7d:9f:7c:1a:06:
b8:5c:20:5f:01:20:a6:5b:7c:10:38:74:d6:28:fc:61:33:a6:
ab:5d:ee:7e:4f:9c:72:b1:04:db:a4:fa:c8:e6:cc:ca:f7:36:
fa:f0:55:29:06:0b:87:60:b7:4a:1e:d7:bc:16:54:a1:d0:ef:
8d:72:6e:44:47:5f:ef:8f:96:72:a3:0b:bd:a7:30:d0:a6:ad:
86:42:a6:ef:ad:c4:37:3f:67:de:31:ab:ff:c9:b8:a7:d1:d9:
d0:d5:eb:2e:0d:6d:a1:61:ec:f5:77:54:97:b7:3a:b9:2d:d2:
32:f1:57:09:e0:40:6b:03:cb:46:9a:02:e7:45:5d:da:95:44:
7f:77:d7:b7:52:70:c1:25:8b:a7:f3:11:cc:26:54:64:23:ea:
44:a9:91:39:a7:5a:65:84:1e:7a:77:2f:0e:a2:0a:8d:24:87:
48:f0:30:0c:3e:3f:19:ac:05:83:de:4e:63:d1:c7:47:9d:7d:
d2:2c:9e:3b:44:39:19:f3:b9:e3:3a:9c:bb:e4:a7:60:cf:fc:
ee:8d:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:58 2026 by rpki-client