
$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier: OSncepbVdOVT0rma0Lo3/S6SakL+n8VR3JCDy2Pqe18=
Subject key identifier: 1E:7B:7B:7F:D3:FC:96:88:02:AC:DC:2C:6C:4E:C9:AF:08:31:76:26
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number: 014A
Signing time: Thu 21 May 2026 05:20:55 +0000
Manifest this update: Thu 21 May 2026 05:20:55 +0000
Manifest next update: Thu 28 May 2026 05:20:55 +0000
Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: 8YsoPWcJXsSg/ULdBBbitnj+nZw/0pVkkYxUb2QUyio=)
2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: FhlQPzHqzyHEsTCRhj+QxZMQM2lLAuEx3Q/b46+pZ5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Validity
Not Before: May 21 05:20:55 2026 GMT
Not After : May 28 05:20:55 2026 GMT
Subject: CN=6a0e9637-d633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:48:1a:04:dc:c0:dd:bf:51:2d:5a:24:89:cc:
c0:77:f2:76:66:33:34:29:23:79:b2:98:2c:49:81:
55:bc:93:98:72:c4:c3:b9:22:fa:4d:80:fd:ff:be:
ca:92:b9:ab:44:68:8f:fe:37:cd:68:ca:eb:a5:cd:
66:fa:6f:fa:7c:8c:1b:f1:a6:cc:b9:0f:1a:49:6f:
75:46:be:c0:c7:10:0f:85:7e:12:71:ef:cd:81:82:
dd:54:48:12:fe:18:69:97:59:72:36:1f:24:0c:47:
cc:ef:2d:e9:df:f9:69:c6:cf:0d:5a:9b:a9:fd:2d:
dc:5e:ed:41:dc:bb:a7:cd:43:2a:ed:9e:0c:af:b4:
2d:bf:ec:a3:8a:71:0d:08:38:31:54:e5:cd:c2:b9:
cd:22:5f:b9:3c:a4:95:ea:59:aa:6b:e0:5b:ed:f1:
72:95:ab:b4:1d:1b:ce:5f:a9:b1:4f:dc:18:b6:f3:
a4:46:1f:16:9c:d5:a4:08:af:57:54:35:0f:a3:bc:
74:a6:45:b7:09:c2:c2:d3:2e:85:39:95:bc:fe:67:
5b:fa:40:05:14:67:c7:76:14:89:8c:de:60:4f:49:
85:ea:a0:eb:34:a8:73:17:e7:0d:d1:7e:07:19:ae:
dc:3c:57:d5:c6:39:04:10:f0:0a:c4:2e:d4:4e:1a:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:7B:7F:D3:FC:96:88:02:AC:DC:2C:6C:4E:C9:AF:08:31:76:26
X509v3 Authority Key Identifier:
keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:a5:e0:39:49:24:39:e1:75:7f:15:4a:31:82:d7:bc:e8:fe:
8a:d6:c8:df:53:67:a2:1a:e0:8d:23:0f:d0:47:7c:bf:4f:da:
10:6c:d0:5f:ba:10:00:6e:52:db:3d:5b:f8:87:5d:82:ec:70:
a1:1e:85:12:47:a0:45:91:b2:88:26:d7:3e:dd:c7:b8:91:40:
aa:85:93:c4:02:a3:41:6a:d9:b1:44:29:ea:33:8e:0a:84:ff:
df:f1:25:bc:83:96:f7:f0:ea:7e:7a:b9:9d:a3:cf:7b:01:08:
08:c9:e8:8e:67:7a:90:74:91:9a:0d:4d:d0:7e:85:a4:a2:ea:
1b:3f:bb:73:cb:00:9a:7f:82:12:e8:9d:b1:7f:1c:57:fe:ce:
4b:20:a8:c0:c3:0a:6c:45:11:22:45:7d:e2:b4:4c:06:56:05:
2c:d9:67:4e:8b:0d:15:cd:86:e1:f5:03:69:5f:f3:88:a3:d8:
0a:a1:d8:70:7d:3d:7c:02:cf:36:87:a7:0e:a7:8d:6c:4e:7f:
1c:ad:d3:04:80:1f:bd:c7:f1:c5:34:a2:aa:ce:d1:3e:ec:ed:
d3:12:0c:7b:d4:61:63:68:76:8c:1d:39:2c:d5:14:7a:c4:04:
76:26:4e:c5:74:e0:dc:84:8f:8c:05:98:7f:31:51:61:63:54:
67:d8:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:08 2026 by rpki-client