
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier: QV8F4U6ZD7FDWmOpQWESBhc/Cr53Ee9qhes9EAKwzhE=
Subject key identifier: A1:FE:04:E7:4B:51:CB:7D:C0:28:0D:73:0E:87:C3:C9:FB:7B:97:76
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number: 01AC
Signing time: Tue 27 Oct 2026 04:41:53 +0000
Manifest this update: Tue 27 Oct 2026 04:41:52 +0000
Manifest next update: Tue 03 Nov 2026 04:41:52 +0000
Files and hashes: 1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: y2cW5jFNeC2s9rGxT9BNO3dS3/v5Kf61mvrmY4fdyGg=)
2: DA947ECEA06911F181CDFB264711F970.roa (hash: tkCYSUL0auwIwvzR+3cYc/QP9+7dCDSRR8SU4BpDT7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 04:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: Oct 27 04:41:52 2026 GMT
Not After : Nov 3 04:41:52 2026 GMT
Subject: CN=6ae02b91-ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:67:fd:92:a9:ae:69:7c:2a:3b:a9:47:1f:
7c:6c:1e:c7:77:cc:3d:66:59:18:31:80:5a:89:52:
92:15:ae:f4:7a:51:66:63:e3:07:42:86:33:2d:c2:
25:e6:41:d4:6f:a7:11:16:85:52:61:50:2a:29:6d:
55:8b:fe:d6:2a:d4:b6:3f:c7:6a:e4:6a:13:be:63:
a7:5f:f6:16:d5:2e:1a:70:aa:a3:00:99:bf:e5:b8:
78:30:6c:ae:87:8c:d7:3e:b5:c4:dd:78:e0:8c:d5:
89:62:1f:8d:3a:16:fe:95:6b:50:b7:53:b5:08:7e:
87:99:6e:29:1b:5e:cc:bf:be:a6:0c:59:8a:0b:47:
76:0e:2f:de:54:93:b8:23:74:31:82:2c:c2:5b:cf:
c7:7b:0f:20:7d:1e:01:0e:6f:67:e0:84:32:08:d2:
a0:a9:40:c7:a8:da:7c:7e:a8:7e:b8:94:59:d6:1a:
46:1b:c8:4b:22:b1:0e:ad:1e:50:41:58:bf:dd:1d:
9a:cf:b3:cf:b4:e3:f3:0d:6f:5c:13:87:09:a6:1b:
4e:11:3a:6b:2d:c4:81:2e:5f:d8:5e:29:6f:fe:84:
62:2e:40:76:a8:8e:65:fa:26:54:33:07:71:05:c8:
44:22:82:4c:95:b7:27:7a:f1:a1:52:9c:3b:fe:33:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:04:E7:4B:51:CB:7D:C0:28:0D:73:0E:87:C3:C9:FB:7B:97:76
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a1:5e:10:79:0b:d1:33:8c:c1:c0:33:6f:fe:61:c8:69:dc:
00:85:d5:87:d3:97:ba:80:f2:08:d4:f5:e6:1f:86:ac:01:7c:
f9:e6:4e:07:66:25:8e:33:73:e0:f6:a8:c8:3b:66:e0:43:db:
3e:f5:55:c7:4d:9d:60:0a:2c:13:a7:69:a6:e5:b3:d6:76:33:
0d:da:f2:2d:e0:92:e8:e1:42:cb:45:2b:ec:42:39:99:bf:ce:
c8:4b:af:a0:59:4c:56:94:ed:e4:f4:36:3a:10:b7:31:f2:04:
2b:cb:9a:99:2c:a0:31:f3:40:63:2b:35:1c:3e:9f:f5:47:ce:
89:cb:0e:a9:17:42:e8:cc:c5:c0:ae:b6:fd:96:0d:92:82:02:
85:53:f0:ac:df:fd:29:67:aa:7c:19:39:3c:a0:bc:a2:cc:c5:
68:30:83:7c:fc:d4:6c:57:06:e7:42:8d:43:25:86:de:1e:4a:
a9:95:e1:f5:21:0f:a4:e3:a1:68:88:de:aa:a3:9e:17:9c:9b:
7a:71:9a:c3:b9:83:02:b8:c6:d6:15:25:33:7b:24:fb:22:1e:
c8:e6:b0:60:7a:73:d5:3b:64:02:a4:65:52:f5:1b:bb:0e:b6:
67:80:c2:f2:78:a2:2a:63:ea:04:c2:af:a4:61:46:3e:88:c7:
fa:ad:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:40:22 2026 by rpki-client