
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier: XZoBjzydFULPbX8BLBBVuPrv8kfNtI6ZErUre1FJJMk=
Subject key identifier: E8:71:CE:1A:7B:6F:A8:40:6E:2C:CF:0F:6F:70:CB:10:52:B3:92:AE
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 060C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number: 05F9
Signing time: Wed 14 Oct 2026 23:19:37 +0000
Manifest this update: Wed 14 Oct 2026 23:19:36 +0000
Manifest next update: Wed 21 Oct 2026 23:19:36 +0000
Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: IgZ4aGPEoSzKzBWgQRn7uFX3jIesQluqDRXeH9O6bVI=)
2: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: +gAjMETIZVTwgsDFO2qKEqW2MhjTXO1u1mjqlUHpdbc=)
3: D575368892D011F0B767031EC4F9AE02.roa (hash: 24rhC/kI9813Kpf55FB3HQ+L1kbPoJIalWHTXjPeaO4=)
4: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: Vvhf+boCEpLuGGFJDAIh2MyKhZZB5ySRIuVYjKw5QFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 23:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: Oct 14 23:19:36 2026 GMT
Not After : Oct 21 23:19:36 2026 GMT
Subject: CN=6ad00e09-0d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:ba:2a:22:da:b2:f4:31:30:7a:86:1c:a6:
c1:f8:c5:eb:7f:af:a4:f0:9f:4f:68:a7:ba:3d:0c:
cf:27:c3:8c:b2:7b:48:1e:b6:74:4e:f3:af:3f:a7:
05:95:07:c6:33:c9:ab:21:8d:c6:a9:8a:0c:f4:ed:
8a:9b:79:3f:b1:56:00:7c:cf:a6:ac:1f:ec:62:07:
4a:7b:6e:9d:1b:de:d0:26:c7:44:40:20:9c:31:29:
34:c0:ba:ad:3b:ae:9f:cf:a3:36:c5:96:96:e3:f5:
38:9e:11:cf:cd:7c:3f:e0:74:eb:65:8a:39:d9:01:
6f:73:dd:5b:d7:9b:e4:93:12:9c:f0:6c:59:5e:22:
41:70:36:a4:41:b0:28:97:9f:bd:24:fe:41:c4:3f:
70:a9:2f:60:c7:01:64:1b:5b:5e:74:51:42:74:81:
aa:24:62:48:1f:75:46:b8:7a:88:87:e6:67:79:0a:
89:ab:4c:06:38:8c:19:f1:b7:d1:68:86:05:eb:3b:
cf:5a:5b:e6:1f:b3:b0:d2:a8:f9:23:f7:a3:cb:f0:
9c:d9:9e:d5:e7:af:65:92:1f:0a:6d:4f:05:dd:f5:
2d:ee:34:0c:e9:6c:7d:36:ec:f3:43:1d:93:5b:70:
38:9c:a9:08:3d:d3:67:5a:a3:68:d2:aa:8d:39:ef:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:71:CE:1A:7B:6F:A8:40:6E:2C:CF:0F:6F:70:CB:10:52:B3:92:AE
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cb:fc:bc:12:a6:7f:5b:f9:57:0a:00:79:63:46:85:d6:2a:
e8:b6:f3:34:1d:c2:e1:46:6c:bd:6a:e9:97:83:d1:a7:a7:88:
28:a2:e9:dc:af:f0:07:01:96:43:70:6f:58:7b:2e:db:71:7d:
2e:c7:79:59:e4:35:d1:8d:7f:70:46:8a:b2:33:de:b7:44:8d:
47:86:42:a8:71:de:9a:0c:d5:b3:35:c1:d4:59:07:38:1c:ff:
93:fa:e3:02:ce:2a:cd:27:25:ca:fb:60:cc:f4:83:bb:3c:09:
4c:0c:e8:27:b6:1f:0f:d7:c9:e4:f0:f6:d8:24:9b:2b:ae:a7:
2d:0b:f6:de:68:2d:7d:a0:69:3b:03:ca:dd:97:b0:08:8f:5d:
15:0e:bb:c8:bf:aa:3a:07:4e:8e:6a:84:81:47:ee:d4:06:6f:
56:87:7d:2a:4f:6f:6f:56:e4:df:6a:42:68:3b:76:8f:37:ff:
f1:07:b6:5d:04:e2:1b:c5:79:f9:60:bc:68:fd:75:cc:aa:36:
97:32:40:7e:54:36:5c:3d:39:e2:d3:d5:9f:14:f9:08:4e:60:
4e:b1:98:c5:99:d4:17:99:5c:0e:34:ce:0e:33:5b:79:a9:a4:
f5:61:02:5d:b4:2c:52:df:86:3a:67:11:0a:d0:55:46:e2:33:
19:f1:3e:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy
MzA2QTI4RTcwHhcNMjYxMDE0MjMxOTM2WhcNMjYxMDIxMjMxOTM2WjAYMRYwFAYD
VQQDEw02YWQwMGUwOS0wZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7u6KiLasvQxMHqGHKbB+MXrf6+k8J9PaKe6PQzPJ8OMsntIHrZ0TvOvP6cF
lQfGM8mrIY3GqYoM9O2Km3k/sVYAfM+mrB/sYgdKe26dG97QJsdEQCCcMSk0wLqt
O66fz6M2xZaW4/U4nhHPzXw/4HTrZYo52QFvc91b15vkkxKc8GxZXiJBcDakQbAo
l5+9JP5BxD9wqS9gxwFkG1tedFFCdIGqJGJIH3VGuHqIh+ZneQqJq0wGOIwZ8bfR
aIYF6zvPWlvmH7Ow0qj5I/ejy/Cc2Z7V569lkh8KbU8F3fUt7jQM6Wx9NuzzQx2T
W3A4nKkIPdNnWqNo0qqNOe+g+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhxzhp7
b6hAbizPD29wyxBSs5KuMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0
RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK
c1Y4QzFST2JvR3NqQnFLT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlsv8vBKmf1v5VwoAeWNGhdYq6LbzNB3C4UZsvWrpl4PRp6eIKKLp3K/wBwGW
Q3BvWHsu23F9Lsd5WeQ10Y1/cEaKsjPet0SNR4ZCqHHemgzVszXB1FkHOBz/k/rj
As4qzSclyvtgzPSDuzwJTAzoJ7YfD9fJ5PD22CSbK66nLQv23mgtfaBpOwPK3Zew
CI9dFQ67yL+qOgdOjmqEgUfu1AZvVod9Kk9vb1bk32pCaDt2jzf/8Qe2XQTiG8V5
+WC8aP11zKo2lzJAflQ2XD054tPVnxT5CE5gTrGYxZnUF5lcDjTODjNbeamk9WEC
XbQsUt+GOmcRCtBVRuIzGfE+cQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:11 2026 by rpki-client