
$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier: HXSSXTOG11yhKxVPxPhIvO1jCAGno5xkevo0AkYwjTI=
Subject key identifier: B7:58:1F:0C:D7:AD:1F:72:BE:6A:B2:AF:0F:CE:8A:BC:7C:15:CB:87
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 05B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number: 05AA
Signing time: Wed 20 May 2026 23:13:19 +0000
Manifest this update: Wed 20 May 2026 23:13:18 +0000
Manifest next update: Wed 27 May 2026 23:13:18 +0000
Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: Z+Z96Gb3D0zPo2X7iB3qyHSWgS/1HX0hYIUHtMPM7i0=)
2: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: C9httljUzii7v4u7kHINBjQrOE0KE6l+urPuufPCT3I=)
3: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: NB4pzvyV9P+LNJLml35IfgjAiIeJce8vTwXZQXDxhRo=)
4: D575368892D011F0B767031EC4F9AE02.roa (hash: +49R+niUVHEGa6s++c9bW33UyinzUzW6Yjq4fPcKfcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463 (0x5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: May 20 23:13:18 2026 GMT
Not After : May 27 23:13:18 2026 GMT
Subject: CN=6a0e400f-4401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:ba:8e:49:0c:28:c6:25:a8:bc:16:3c:0c:
08:d8:9b:3b:37:1c:aa:c1:fc:30:7c:12:f7:0e:83:
b3:de:2b:99:87:37:e5:43:c8:6f:12:51:6e:cf:13:
b1:23:ba:40:26:5d:d3:0d:3f:1c:06:69:80:09:8d:
a4:f2:da:6f:94:4e:13:86:da:8a:3e:13:fd:e9:a7:
29:8e:b5:b2:09:8a:3a:c5:87:6f:24:19:35:6e:32:
30:f7:b5:a5:98:6b:65:b7:15:3d:58:f3:c3:45:eb:
b4:31:21:48:8f:f0:86:53:0d:27:e0:ac:42:ad:8f:
6d:44:1c:08:a3:7d:1a:1d:e3:fe:3e:ed:8b:91:f9:
e2:6b:8b:b5:33:3f:a2:49:74:ec:12:1c:0e:4a:4a:
77:8e:21:92:f8:8c:89:0a:10:36:07:73:2c:bf:70:
a8:67:03:8f:6f:c0:54:5c:19:3d:8d:8f:79:f4:be:
0a:da:b3:98:47:bb:6a:2d:dc:09:96:c9:1c:6e:5d:
30:ff:ed:83:fe:cd:71:9d:82:a6:86:a6:13:6b:3e:
37:9f:7e:4e:f1:b2:2c:d8:84:72:3d:56:f2:b2:ed:
f3:ec:76:a0:b4:c1:2f:d8:b2:72:4a:95:c1:70:50:
82:e5:bf:16:8d:5c:93:bc:73:9a:b5:50:a0:f5:bb:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:1F:0C:D7:AD:1F:72:BE:6A:B2:AF:0F:CE:8A:BC:7C:15:CB:87
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:63:82:f4:b8:b5:5f:19:1c:78:db:a7:42:98:62:fc:6b:3b:
d6:86:fb:af:09:12:56:a1:f2:3f:d7:e8:86:99:a5:63:67:17:
96:dd:48:1e:2c:d3:a9:0c:ae:11:ae:a4:5b:8a:b3:c9:41:28:
2c:29:9e:75:db:00:bc:1b:46:c1:5e:eb:a1:63:50:ee:2e:bb:
de:15:eb:fe:0d:6c:45:c0:3e:00:ea:2d:ce:09:8a:6a:7e:82:
59:34:dc:4b:63:ee:b3:07:76:7c:fa:64:a8:5c:27:07:09:96:
9c:ac:c4:ac:68:5b:56:38:43:e1:35:26:db:78:1e:51:b5:17:
f9:fd:2c:ff:a0:c9:45:d6:ce:20:eb:51:f9:04:09:06:04:53:
a6:bc:f0:67:42:58:7f:00:7f:b8:38:e1:d7:d6:c6:70:16:4b:
ec:3b:3c:e6:53:a9:51:d9:f1:a4:92:74:47:cc:6a:ee:c3:f6:
7d:3b:44:49:eb:ca:3f:37:ae:11:30:80:5d:38:43:f4:fa:f9:
a7:8a:29:1a:19:e1:04:ff:46:5b:93:54:e4:a0:b7:07:7e:fa:
78:99:36:b1:5d:f6:ae:65:12:cc:f3:08:1d:66:6a:77:eb:58:
33:30:ca:80:da:ba:73:18:9f:0c:a1:a6:c7:22:0e:d2:7d:33:
c8:0b:b9:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy
MzA2QTI4RTcwHhcNMjYwNTIwMjMxMzE4WhcNMjYwNTI3MjMxMzE4WjAYMRYwFAYD
VQQDEw02YTBlNDAwZi00NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1LO6jkkMKMYlqLwWPAwI2Js7NxyqwfwwfBL3DoOz3iuZhzflQ8hvElFuzxOx
I7pAJl3TDT8cBmmACY2k8tpvlE4ThtqKPhP96acpjrWyCYo6xYdvJBk1bjIw97Wl
mGtltxU9WPPDReu0MSFIj/CGUw0n4KxCrY9tRBwIo30aHeP+Pu2Lkfnia4u1Mz+i
SXTsEhwOSkp3jiGS+IyJChA2B3Msv3CoZwOPb8BUXBk9jY959L4K2rOYR7tqLdwJ
lskcbl0w/+2D/s1xnYKmhqYTaz43n35O8bIs2IRyPVbysu3z7HagtMEv2LJySpXB
cFCC5b8WjVyTvHOatVCg9buPHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdYHwzX
rR9yvmqyrw/Oirx8FcuHMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0
RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK
c1Y4QzFST2JvR3NqQnFLT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMGOC9Li1XxkceNunQphi/Gs71ob7rwkSVqHyP9fohpmlY2cXlt1IHizTqQyu
Ea6kW4qzyUEoLCmeddsAvBtGwV7roWNQ7i673hXr/g1sRcA+AOotzgmKan6CWTTc
S2Puswd2fPpkqFwnBwmWnKzErGhbVjhD4TUm23geUbUX+f0s/6DJRdbOIOtR+QQJ
BgRTprzwZ0JYfwB/uDjh19bGcBZL7Ds85lOpUdnxpJJ0R8xq7sP2fTtESevKPzeu
ETCAXThD9Pr5p4opGhnhBP9GW5NU5KC3B376eJk2sV32rmUSzPMIHWZqd+tYMzDK
gNq6cxifDKGmxyIO0n0zyAu5MA==
-----END CERTIFICATE-----
Generated at Thu May 21 15:39:37 2026 by rpki-client