
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier: yK/7xAgqS1BESoueLuPxXcyQYy7lvst0l0+JvF9qzY8=
Subject key identifier: 7A:53:14:CD:9D:85:AE:C7:B7:C6:30:87:A5:11:65:6D:36:8F:C5:A7
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial: 0E24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number: 0E11
Signing time: Tue 18 Aug 2026 18:03:53 +0000
Manifest this update: Tue 18 Aug 2026 18:03:52 +0000
Manifest next update: Tue 25 Aug 2026 18:03:52 +0000
Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: 2h/Kmop14tS+/cOt8mF3Cx31kTjne95bTjr5mXDqmOc=)
2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3620 (0xe24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Validity
Not Before: Aug 18 18:03:52 2026 GMT
Not After : Aug 25 18:03:52 2026 GMT
Subject: CN=6a849e89-e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:1f:7e:8c:b0:36:0d:7a:a1:45:84:be:d0:
ee:6b:e7:49:3a:79:7e:02:aa:18:54:d6:5e:31:d3:
eb:05:db:49:ad:3f:17:f8:51:c5:46:f3:3b:08:ef:
70:b4:91:87:80:ca:87:1f:b3:a7:63:76:2a:62:68:
27:dc:a5:a3:d7:3c:bb:fc:2c:79:ae:b8:72:ac:9e:
bd:a0:6d:d4:ce:26:73:58:d9:61:0a:a1:95:06:f2:
1d:bb:b4:b6:99:80:49:69:d5:34:f3:e9:5f:3c:1d:
b7:24:3b:c0:3a:cb:1a:36:9a:d5:04:3d:b8:1b:fc:
d6:bf:e8:ba:37:6c:ca:60:0d:3c:1c:6f:47:3b:35:
71:1a:5f:d6:1e:2c:c5:57:21:5b:e0:df:71:a0:c1:
fc:be:6f:95:aa:c6:e8:45:44:69:c8:5b:47:10:34:
7d:01:84:c7:24:93:bc:0c:77:a2:d4:8f:33:07:9f:
67:fa:0e:c1:ac:e6:85:2b:3c:05:1d:73:78:25:4a:
30:b1:f7:ec:23:b9:10:b7:46:ea:0b:a4:b1:08:50:
cf:16:9c:70:cd:b8:30:51:62:e6:9b:e5:ed:83:08:
2b:c0:ea:0c:1c:c2:19:87:3c:7a:4b:2b:43:01:af:
f2:d0:26:d5:8a:d3:6a:b1:67:c9:d2:e8:d7:11:35:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:53:14:CD:9D:85:AE:C7:B7:C6:30:87:A5:11:65:6D:36:8F:C5:A7
X509v3 Authority Key Identifier:
keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:32:a9:a9:a2:b5:f9:84:23:61:ea:6c:8f:59:96:aa:39:84:
34:1b:d4:a4:ed:96:cc:0e:8c:ff:a9:25:23:06:38:0a:eb:69:
90:d5:f0:de:a2:35:18:65:27:19:ee:49:56:28:e2:13:fd:bf:
c0:62:38:c3:f8:37:c8:81:12:55:07:c9:24:4c:e8:83:ce:9a:
d1:40:50:1e:6f:8e:92:7a:42:7e:fa:0c:9f:9f:2d:af:81:85:
8d:8e:87:c0:36:bc:9c:52:92:d7:bb:5a:a6:36:b5:3a:c7:ff:
91:53:9b:7c:a2:92:14:78:e8:76:9a:c0:25:29:00:a7:08:25:
97:3c:79:5f:fb:2b:aa:9f:95:d8:92:e3:ff:bf:58:73:93:aa:
e1:89:ef:de:0c:35:b7:a2:91:00:41:a5:60:d7:54:6a:de:2b:
be:b6:08:b8:14:82:10:61:42:49:4b:ed:a7:d9:9b:1f:03:e2:
21:5e:3c:b1:b8:a2:14:db:8c:f8:a0:2a:d0:7d:69:54:5f:9e:
b0:16:6b:39:d6:3a:aa:5c:c6:64:05:bf:6d:16:a8:7d:8c:7f:
d2:8f:5d:df:7c:34:0b:6a:1a:4a:0b:fe:82:5c:a9:d7:cf:bd:
c4:a0:df:83:d4:66:5f:9b:1b:6f:d4:55:f8:d5:90:1c:43:92:
a0:d6:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:59 2026 by rpki-client