
$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json)
Hash identifier: MzoxTmGz/HiosdYc96+KFmgkkjfC1C99f9of4DcfBlI=
Subject key identifier: 9D:E3:0E:41:30:57:70:10:3D:D7:46:B9:D4:B3:24:9E:90:8E:69:A8
Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
Manifest number: A9
Signing time: Mon 01 Jun 2026 07:58:07 +0000
Manifest this update: Mon 01 Jun 2026 07:58:07 +0000
Manifest next update: Mon 08 Jun 2026 07:58:07 +0000
Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: w5cV/olCxXO2WxVtldNirSM2q4JGDGCAMa0H77R9FKQ=)
2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: eGLRs5+xRo2yh8UxiEyYoaUHZFSoi/sB9xgpO/Oq4V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Validity
Not Before: Jun 1 07:58:07 2026 GMT
Not After : Jun 8 07:58:07 2026 GMT
Subject: CN=6a1d3b8f-ae95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:70:82:c1:bd:81:cd:ae:7f:c3:16:70:63:
54:6e:e3:5a:bc:69:ca:9d:08:19:59:8b:b2:3d:df:
fc:8d:49:38:af:5c:92:43:b4:27:15:ef:f1:70:d2:
b7:8e:a1:7c:ee:ac:5a:03:e9:f6:eb:c9:66:19:96:
71:c3:25:9b:b3:47:4a:48:f5:68:87:6f:e6:ba:3f:
6d:50:90:b0:a5:e2:5f:a8:52:04:52:a2:4f:b7:bf:
a0:ca:af:98:81:f0:30:5c:e9:a2:41:89:d2:f1:d8:
48:84:5f:f4:25:9e:f8:e7:89:92:5b:26:45:de:a7:
ec:a7:56:cd:e6:f2:a7:95:f2:d3:21:a9:49:82:64:
46:4b:91:df:86:7c:b6:60:a8:0e:bb:fc:5b:f8:e3:
77:ea:04:45:6c:9c:95:5a:47:bc:58:0c:e2:4c:f1:
46:64:e8:bb:14:09:d1:f3:e5:69:9b:ae:55:7b:04:
27:74:59:3d:ce:5c:d0:af:ed:6a:91:f7:5c:28:8e:
ea:77:25:f2:7e:6a:dd:f1:02:17:8c:bd:17:96:80:
d3:48:ca:57:96:56:0f:d5:49:d7:f4:d3:90:13:66:
82:3a:b8:c3:57:f8:01:3a:63:47:25:44:49:79:1d:
a6:d6:43:99:40:5c:19:90:09:f3:f5:b3:33:d0:7a:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:0E:41:30:57:70:10:3D:D7:46:B9:D4:B3:24:9E:90:8E:69:A8
X509v3 Authority Key Identifier:
keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:e9:e8:4a:38:fa:05:3a:d4:21:9f:27:be:1e:12:b4:4b:5e:
3e:3c:e7:6e:40:ab:8d:e7:f2:fe:6c:fd:37:ad:dc:5c:d6:4c:
21:78:e3:83:08:dd:1f:1f:05:85:57:57:16:36:58:cc:9b:3d:
61:fe:92:8b:3d:f0:92:d6:86:11:39:24:70:13:46:cb:cb:42:
a1:df:85:51:4a:7b:21:6c:bc:c8:f6:ea:a2:ea:bf:f1:b1:5e:
7c:b5:d4:7f:35:e5:3d:3f:6a:19:c7:a2:41:74:bb:ae:1d:b5:
ab:e9:42:8d:e3:a7:0f:a2:b4:46:42:c9:62:30:88:f6:99:b1:
47:ee:a7:79:47:31:ea:66:fc:20:5f:86:86:dc:70:f5:2c:40:
5b:ca:d5:48:98:c6:ce:89:87:bc:46:b6:4c:b8:de:b2:49:92:
84:4a:7e:12:f4:2d:60:c0:e7:2d:c2:60:a6:98:d2:03:88:08:
c0:c9:8f:41:48:d1:c3:bc:8b:6e:68:4d:dc:3f:53:00:42:79:
38:ce:95:cb:f8:1c:4f:14:d3:e1:1b:81:c1:31:0e:3e:47:5f:
e6:37:19:7c:62:9b:99:21:a8:ac:8e:c0:94:82:66:0e:6b:3d:
0e:db:66:12:ef:b7:3a:54:87:dd:50:7e:fe:dd:52:a3:68:99:
e8:a7:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:11 2026 by rpki-client